Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: zMeNcLBGjrpZgy0mapbidMIqXuv0vyb+s1Bc3HgSDmg=
Subject key identifier: 92:79:58:43:8F:42:B3:60:CC:5B:7F:7E:0D:A1:87:77:63:FA:AF:8E
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 019D992B674C872D473CD49A8689EB36A62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:51 +0000
Manifest next update: Sat 18 Apr 2026 02:00:51 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: BK1Zg6HTeffOtaCUolsVoHcd1kCFPH9fynJSz/ClaCY=)
2: hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa (hash: McwvJ1iO5xbO5tc5urCHd+wPP0AiWFFllzKeNdIvGeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:67:4c:87:2d:47:3c:d4:9a:86:89:eb:36:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Apr 17 02:00:51 2026 GMT
Not After : Apr 18 02:00:51 2026 GMT
Subject: CN=927958438f42b360cc5b7f7e0da1877763faaf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:77:2f:b4:74:12:c9:75:a2:38:c7:35:37:
50:02:c6:12:21:63:ec:e4:9c:1a:57:20:19:7b:28:
eb:66:78:a0:00:3a:cd:4b:15:4c:97:cb:0d:38:9c:
c0:46:da:b8:e4:53:8d:a9:6e:ee:08:b0:5b:d3:e2:
9a:13:fb:a7:50:eb:06:ce:02:b7:51:a6:c8:c9:16:
a3:e1:b9:ed:f1:60:46:d6:a1:e4:c2:af:b6:d3:58:
79:ed:d3:06:ff:b5:9f:10:b4:65:f8:9f:f8:4d:01:
23:d2:a0:43:ce:9c:a1:3a:77:85:56:f4:60:e4:6b:
c2:23:43:a5:61:f2:4c:c2:d2:57:33:dd:9a:8b:ad:
5e:36:de:bb:cc:aa:7f:a6:df:94:f8:ea:f7:fe:e4:
12:40:5e:a0:42:7e:37:a6:18:92:35:b0:f0:71:ca:
77:f2:72:a4:09:45:63:92:5b:b3:c4:c4:5b:af:24:
38:ac:23:79:5d:1c:35:ec:f4:98:3d:1d:60:6b:41:
3b:41:76:dd:69:4d:67:47:fa:15:71:0f:fc:c8:f4:
5f:0e:a4:b3:61:d3:e9:c5:8c:5b:c4:a7:67:54:0c:
b6:d4:34:5a:4b:d6:8a:0d:a6:34:4d:ee:6c:97:49:
ae:d1:1d:b8:93:34:14:08:97:c9:b0:33:6d:c1:b9:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:58:43:8F:42:B3:60:CC:5B:7F:7E:0D:A1:87:77:63:FA:AF:8E
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fa:b7:2d:61:2a:ff:cc:c1:ed:ad:ee:28:f4:99:e9:85:d8:
c1:98:a7:e1:65:32:52:36:9e:e8:eb:b0:57:88:75:e8:11:7e:
cc:f9:02:7f:4d:ab:17:3d:c5:f0:2b:af:ad:91:27:05:fb:69:
f7:db:34:62:9b:d0:e2:23:9b:97:68:e2:78:5c:f3:8a:23:7a:
cf:b9:9d:e6:2f:de:98:f3:b3:8d:01:86:eb:2a:d2:5e:5d:21:
fc:43:d4:73:a8:10:58:3b:c4:7c:8d:3b:53:65:c8:10:bc:0a:
99:18:31:40:90:f1:19:77:c2:da:40:85:4a:58:2d:23:0d:0a:
09:00:21:ee:df:66:a6:76:72:b8:68:24:ef:e0:51:97:44:2b:
c0:be:b7:98:7a:77:6d:2d:6e:76:64:7a:fd:00:25:5e:0e:39:
16:3f:cd:7d:79:f4:ff:f5:d2:82:9a:c3:35:5e:90:ed:e6:6a:
d8:69:c1:56:3b:aa:f8:fb:b7:44:eb:63:e8:d8:be:f3:79:15:
44:1c:0e:af:0c:25:4c:91:51:df:c1:12:14:01:dc:39:e6:d0:
e4:60:2b:61:f7:50:b9:99:82:01:92:c8:31:ad:d8:eb:31:d2:
34:5c:a2:ec:52:1d:99:c5:92:53:7b:ff:83:d8:ca:91:8c:ed:
e4:1d:0d:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK2dMhy1HPNSahonrNqYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMjIyZWQxYjhhNTMzODU4ZjQ2NThjNWQyNTM5ZmFmNTJh
YmRhYTcwHhcNMjYwNDE3MDIwMDUxWhcNMjYwNDE4MDIwMDUxWjAzMTEwLwYDVQQD
Eyg5Mjc5NTg0MzhmNDJiMzYwY2M1YjdmN2UwZGExODc3NzYzZmFhZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfN3L7R0Esl1ojjHNTdQAsYSIWPs
5JwaVyAZeyjrZnigADrNSxVMl8sNOJzARtq45FONqW7uCLBb0+KaE/unUOsGzgK3
UabIyRaj4bnt8WBG1qHkwq+201h57dMG/7WfELRl+J/4TQEj0qBDzpyhOneFVvRg
5GvCI0OlYfJMwtJXM92ai61eNt67zKp/pt+U+Or3/uQSQF6gQn43phiSNbDwccp3
8nKkCUVjkluzxMRbryQ4rCN5XRw17PSYPR1ga0E7QXbdaU1nR/oVcQ/8yPRfDqSz
YdPpxYxbxKdnVAy21DRaS9aKDaY0Te5sl0mu0R24kzQUCJfJsDNtwbncSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ5WEOPQrNgzFt/fg2hh3dj+q+OMB8GA1UdIwQY
MBaAFEoiLtG4pTOFj0ZYxdJTn69Sq9qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUt
ODM3ZDAwMzFiM2QxLzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUtODM3ZDAwMzFiM2Qx
LzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfq3LWEq
/8zB7a3uKPSZ6YXYwZin4WUyUjae6OuwV4h16BF+zPkCf02rFz3F8CuvrZEnBftp
99s0YpvQ4iObl2jieFzziiN6z7md5i/emPOzjQGG6yrSXl0h/EPUc6gQWDvEfI07
U2XIELwKmRgxQJDxGXfC2kCFSlgtIw0KCQAh7t9mpnZyuGgk7+BRl0QrwL63mHp3
bS1udmR6/QAlXg45Fj/NfXn0//XSgprDNV6Q7eZq2GnBVjuq+Pu3ROtj6Ni+83kV
RBwOrwwlTJFR38ESFAHcOebQ5GArYfdQuZmCAZLIMa3Y6zHSNFyi7FIdmcWSU3v/
g9jKkYzt5B0N+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:45 2026 by rpki-client