Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: eM7c4cWh08dvxGIAW0z3znY90l+DZls9hhma9MF7GmQ=
Subject key identifier: CB:6F:DB:10:B9:0E:B4:22:62:08:76:3C:CF:8A:9F:1C:A9:B3:8B:E5
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019DA41C9CA0D3DB42E06893346D1F09C5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 0117
Signing time: Sun 19 Apr 2026 05:00:31 +0000
Manifest this update: Sun 19 Apr 2026 05:00:31 +0000
Manifest next update: Mon 20 Apr 2026 05:00:31 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: /fF2QfU0s2d0+0DW2CFvtr+dK2oAf+HSVfFwgOd2k+o=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:9c:a0:d3:db:42:e0:68:93:34:6d:1f:09:c5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Apr 19 05:00:31 2026 GMT
Not After : Apr 20 05:00:31 2026 GMT
Subject: CN=cb6fdb10b90eb4226208763ccf8a9f1ca9b38be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:b1:32:2f:f4:c3:cf:e3:8a:b2:a1:14:cb:
15:b4:8d:27:ca:5d:79:ca:bb:f5:43:17:8b:ac:8c:
8e:da:3d:18:52:54:81:36:c6:47:b2:6f:84:9b:e4:
c7:24:ed:6c:59:22:6e:f0:44:37:46:9c:56:98:84:
3a:af:b9:30:ed:53:5d:e6:08:e9:24:16:4e:13:5c:
28:bc:ad:2b:88:56:5f:e2:84:e5:a0:c1:ab:19:dc:
69:3b:e2:2b:36:0b:a0:d7:ba:85:1d:e2:38:1f:55:
38:31:4c:4f:bf:80:63:2e:26:6a:81:53:f4:7d:bc:
51:a5:d8:7b:d1:6f:63:dd:31:b5:45:2d:e1:c2:c9:
ac:3d:ae:b2:b8:77:4f:f6:c9:0a:53:d0:d1:7e:85:
f0:cc:3f:06:a2:d8:ef:0e:1f:29:f8:c1:71:da:35:
14:b3:52:72:cc:65:bb:1c:5e:d8:7e:7e:7e:d1:15:
58:60:2c:b1:e0:c9:ac:4e:96:a7:ae:06:9c:e4:26:
34:7d:39:ec:1b:40:a3:68:61:c0:de:39:22:a3:2b:
38:24:1c:db:33:90:bc:9f:46:dd:56:87:7c:ad:a1:
a9:2d:b3:29:44:a1:b3:19:ab:69:70:05:69:1b:2b:
f7:c0:b8:99:ac:7c:5c:22:c4:75:2c:ce:48:9d:a8:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:DB:10:B9:0E:B4:22:62:08:76:3C:CF:8A:9F:1C:A9:B3:8B:E5
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:92:8e:e7:a7:f8:9d:9f:49:39:cb:94:03:bf:f9:99:1d:
8c:80:c5:71:d3:b7:4b:8a:cc:a2:e8:2f:c8:f0:19:86:03:22:
c7:cf:76:a2:29:62:a3:1f:45:be:43:ab:30:2c:ca:ad:aa:32:
5c:c3:88:77:7c:08:bf:bb:7f:2a:27:df:a3:d0:73:4d:2b:b8:
fb:66:5b:72:f5:9f:81:4f:b1:6c:da:d3:fc:5f:6a:7a:3e:74:
26:91:6f:f2:11:73:31:6e:d9:6e:65:16:b2:47:63:7e:5f:f2:
e9:7c:5b:4e:49:8d:47:4c:2e:00:57:bd:89:70:55:20:43:ce:
b2:de:5a:ce:f3:22:fc:a2:ed:a5:e7:74:c4:a9:b4:91:e8:b3:
f0:bb:2c:69:58:86:78:7f:59:49:98:07:53:8d:ec:fc:11:4c:
05:fc:e0:fa:28:75:d8:42:21:77:49:b0:b3:b4:2b:14:d3:b8:
04:fe:1f:5e:39:0f:9c:f5:c7:9a:b6:a3:9c:b0:98:b4:8c:4a:
c6:de:c4:4f:5a:d6:67:7f:92:da:f0:b9:65:09:52:72:d2:cc:
b7:33:4d:7f:4f:eb:5f:fa:5c:3d:61:ed:3b:65:7a:c9:07:1a:
60:66:e8:8e:08:7e:c1:68:ed:f6:1f:68:98:5d:2e:d2:10:f0:
0a:99:9d:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2kHJyg09tC4GiTNG0fCcXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjVhMmYyOGIxZWI2MjkxNjExMTI4NzA5NDJhNWVkMTgx
YjUxOWYwHhcNMjYwNDE5MDUwMDMxWhcNMjYwNDIwMDUwMDMxWjAzMTEwLwYDVQQD
EyhjYjZmZGIxMGI5MGViNDIyNjIwODc2M2NjZjhhOWYxY2E5YjM4YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoWxMi/0w8/jirKhFMsVtI0nyl15
yrv1QxeLrIyO2j0YUlSBNsZHsm+Em+THJO1sWSJu8EQ3RpxWmIQ6r7kw7VNd5gjp
JBZOE1wovK0riFZf4oTloMGrGdxpO+IrNgug17qFHeI4H1U4MUxPv4BjLiZqgVP0
fbxRpdh70W9j3TG1RS3hwsmsPa6yuHdP9skKU9DRfoXwzD8GotjvDh8p+MFx2jUU
s1JyzGW7HF7Yfn5+0RVYYCyx4MmsTpanrgac5CY0fTnsG0CjaGHA3jkioys4JBzb
M5C8n0bdVod8raGpLbMpRKGzGatpcAVpGyv3wLiZrHxcIsR1LM5InagarQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMtv2xC5DrQiYgh2PM+Knxyps4vlMB8GA1UdIwQY
MBaAFPolovKLHrYpFhEShwlCpe0YG1GfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pV2k4b3NldGlrV0VSS0hDVUtsN1JnYlVaOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjQ0NDNlLTAzZjgtNDM3NS05NDFj
LWUxZDE5NWFjMzVkMi8xLzEtaVdpOG9zZXRpa1dFUktIQ1VLbDdSZ2JVWjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5LzY0NDQzZS0wM2Y4LTQzNzUtOTQxYy1lMWQxOTVhYzM1
ZDIvMS8xLWlXaThvc2V0aWtXRVJLSENVS2w3UmdiVVo4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLmS
juen+J2fSTnLlAO/+ZkdjIDFcdO3S4rMougvyPAZhgMix892oiliox9FvkOrMCzK
raoyXMOId3wIv7t/Kiffo9BzTSu4+2ZbcvWfgU+xbNrT/F9qej50JpFv8hFzMW7Z
bmUWskdjfl/y6XxbTkmNR0wuAFe9iXBVIEPOst5azvMi/KLtped0xKm0keiz8Lss
aViGeH9ZSZgHU43s/BFMBfzg+ih12EIhd0mws7QrFNO4BP4fXjkPnPXHmrajnLCY
tIxKxt7ET1rWZ3+S2vC5ZQlSctLMtzNNf0/rX/pcPWHtO2V6yQcaYGbojgh+wWjt
9h9omF0u0hDwCpmdSw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:37 2026 by rpki-client