Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: /68AkqjVIN72jNPTYgLx9f9ZPLk0aawoZA52+a1Wegc=
Subject key identifier: 17:74:BA:18:24:9D:D7:22:8A:ED:DE:63:F1:54:4F:37:D3:47:E4:02
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 019D992B7C44809FD5F1F8AE1628DD0F48D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: Y2tdj69ef37Aeq8W+DBHkb0j5D6oDdW9B1l6aFf/nWU=)
2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7c:44:80:9f:d5:f1:f8:ae:16:28:dd:0f:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=1774ba18249dd7228aedde63f1544f37d347e402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:90:06:ee:f3:83:94:d2:86:75:dd:2f:87:
f3:ed:0b:bb:b7:46:f6:c9:82:31:8b:39:ea:69:8b:
3b:9f:63:02:b6:ce:ec:6f:c3:e7:8f:8a:44:bc:ce:
8e:45:03:6c:64:d2:44:ce:11:e0:c8:b3:e6:1e:ec:
49:29:d9:7a:b1:7c:33:44:3b:f0:a3:4a:b8:ff:3d:
7e:db:49:87:bd:34:b6:a1:36:f2:88:3b:52:6b:b2:
22:0f:d1:e7:53:9b:68:bc:40:e7:53:62:44:5c:5e:
56:2c:2a:fd:ce:10:f7:19:1d:d1:cd:5a:36:10:b2:
44:2a:d1:23:c9:29:0c:0a:1e:76:83:6c:fe:89:e3:
cd:f6:a9:b7:02:0a:13:1c:54:3d:c4:f6:e7:95:1d:
83:eb:44:f0:c7:8f:1b:89:d5:63:98:4f:77:95:83:
b8:3b:ec:01:b1:18:b8:cf:b3:a9:3e:62:09:d4:be:
15:5f:c1:f5:03:45:51:43:39:14:e9:6d:89:ea:76:
1a:b3:89:99:3f:53:aa:b2:2a:ee:67:0d:ec:94:9a:
26:e8:7c:58:29:d7:c3:47:be:79:34:a8:52:68:35:
51:5d:dc:67:1a:d6:3d:39:ec:de:f1:4c:b3:f5:de:
25:b0:3a:86:c0:ed:98:99:2e:d1:3f:39:7f:44:19:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:BA:18:24:9D:D7:22:8A:ED:DE:63:F1:54:4F:37:D3:47:E4:02
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:e3:ab:d2:e7:ae:c1:fd:fd:f2:7f:5c:69:68:4b:99:f8:
8e:2a:77:fe:10:6d:1a:5a:ba:be:af:29:0d:b0:50:4d:46:9e:
54:28:9f:b6:fd:7a:a8:17:74:2b:8c:10:b0:e1:52:06:97:52:
e3:0e:7e:3a:5d:d1:51:1c:f6:29:a4:1f:a9:02:1a:32:fe:1d:
3f:8e:9f:0f:69:31:97:32:d8:72:00:a2:42:fa:f7:61:f0:68:
93:5a:66:bd:27:69:57:99:68:c8:be:ec:42:42:a8:9c:77:4d:
fc:d8:5f:71:fc:23:45:e2:25:52:f1:66:29:a7:01:b6:74:9d:
ab:0c:19:e8:2f:50:0f:1d:02:ef:da:fb:5b:51:15:9e:93:f6:
4c:b6:02:37:40:7c:57:10:c0:38:8a:b2:16:00:78:3c:fb:6c:
09:e7:67:1e:06:69:cb:08:fd:7d:d7:66:6c:d6:8b:f9:11:84:
d7:75:61:8f:52:06:c0:ea:da:f8:0a:c9:bb:a4:67:3d:8b:23:
7e:ea:16:29:91:d2:f6:21:73:d2:67:2e:94:5a:5f:94:c1:2f:
60:21:e9:f9:d1:61:f8:ab:87:5b:65:9a:76:88:3c:20:00:92:
bf:65:f1:3a:6f:cf:b9:a3:e9:e1:ed:83:f2:34:b8:61:71:78:
0d:ca:d1:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3xEgJ/V8fiuFijdD0jXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh
ODkyNjIwHhcNMjYwNDE3MDIwMDU3WhcNMjYwNDE4MDIwMDU3WjAzMTEwLwYDVQQD
EygxNzc0YmExODI0OWRkNzIyOGFlZGRlNjNmMTU0NGYzN2QzNDdlNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2OQBu7zg5TShnXdL4fz7Qu7t0b2
yYIxiznqaYs7n2MCts7sb8Pnj4pEvM6ORQNsZNJEzhHgyLPmHuxJKdl6sXwzRDvw
o0q4/z1+20mHvTS2oTbyiDtSa7IiD9HnU5tovEDnU2JEXF5WLCr9zhD3GR3RzVo2
ELJEKtEjySkMCh52g2z+iePN9qm3AgoTHFQ9xPbnlR2D60Twx48bidVjmE93lYO4
O+wBsRi4z7OpPmIJ1L4VX8H1A0VRQzkU6W2J6nYas4mZP1OqsiruZw3slJom6HxY
KdfDR755NKhSaDVRXdxnGtY9Oeze8Uyz9d4lsDqGwO2YmS7RPzl/RBkHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd0uhgkndciiu3eY/FUTzfTR+QCMB8GA1UdIwQY
MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt
ZGYxZTk1ZDdlZGQ5LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5
LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHDjq9Ln
rsH9/fJ/XGloS5n4jip3/hBtGlq6vq8pDbBQTUaeVCiftv16qBd0K4wQsOFSBpdS
4w5+Ol3RURz2KaQfqQIaMv4dP46fD2kxlzLYcgCiQvr3YfBok1pmvSdpV5loyL7s
QkKonHdN/NhfcfwjReIlUvFmKacBtnSdqwwZ6C9QDx0C79r7W1EVnpP2TLYCN0B8
VxDAOIqyFgB4PPtsCednHgZpywj9fddmbNaL+RGE13Vhj1IGwOra+ArJu6RnPYsj
fuoWKZHS9iFz0mculFpflMEvYCHp+dFh+KuHW2Wadog8IACSv2XxOm/PuaPp4e2D
8jS4YXF4DcrR1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:12 2026 by rpki-client