Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: 2XWJMKAVRlon4ESMf9+BaGNdvhgOnqjDQ8QGLqD9a0k=
Subject key identifier: B1:37:5D:22:F2:3F:84:4F:6D:A5:D7:C1:72:E1:B9:51:88:C5:1B:D9
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 019DCF3E5554F549EAF7107A2AC185087551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 14:01:01 +0000
Manifest this update: Mon 27 Apr 2026 14:01:01 +0000
Manifest next update: Tue 28 Apr 2026 14:01:01 +0000
Files and hashes: 1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: US/vqroQ5Qf7XcMa6e2r3whsejK9UMsUmxwMEOpqSWs=)
2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:55:54:f5:49:ea:f7:10:7a:2a:c1:85:08:75:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Apr 27 14:01:01 2026 GMT
Not After : Apr 28 14:01:01 2026 GMT
Subject: CN=b1375d22f23f844f6da5d7c172e1b95188c51bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:88:5f:82:f5:fc:19:40:92:6a:a0:8f:3c:
9c:da:f5:cc:ff:39:d4:a9:ff:b1:f4:7c:81:5b:b1:
0e:67:02:1f:1c:e0:f1:ec:8a:c1:1a:b2:fe:0a:97:
8c:7f:d2:f7:f6:84:76:ea:73:cb:73:43:37:75:e9:
e5:db:4d:3f:85:d8:4d:21:84:e5:ce:ff:e3:a5:52:
b5:d6:00:67:08:ee:5e:e2:1c:37:d9:29:60:46:33:
5d:f7:94:49:7d:a0:2e:7f:77:34:a7:e7:cc:c0:f2:
71:aa:55:62:55:2c:9a:55:4b:3e:f3:d4:94:0e:59:
5b:a4:21:15:b4:7e:7c:9c:eb:2e:27:87:2c:a8:71:
9a:6c:eb:ee:e4:78:5d:ec:6e:2a:ef:5b:56:ce:ff:
ca:74:19:6f:a2:96:74:72:d7:15:30:f9:b4:e6:8e:
30:bb:85:c7:95:e7:89:a8:4e:48:38:86:f8:68:c2:
8f:91:c4:9c:aa:4e:e4:b9:65:9f:81:f2:b0:bc:49:
02:f8:52:c1:2e:de:74:e4:7e:83:79:ec:b6:81:20:
d1:4f:c3:b5:24:e2:d6:c0:58:27:b3:59:5b:1d:ef:
0e:9d:ed:b7:10:50:c0:f0:78:25:47:b9:4e:38:f7:
ba:42:71:18:04:10:78:a4:06:f2:10:71:7f:99:9f:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:5D:22:F2:3F:84:4F:6D:A5:D7:C1:72:E1:B9:51:88:C5:1B:D9
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f8:bc:6e:84:d6:d8:54:1c:28:1d:4b:b4:5a:11:ea:f7:a3:
b0:cb:88:60:8a:c4:b0:04:65:67:98:25:89:f1:d8:0a:e3:2f:
99:8d:c5:6c:50:01:4f:10:05:2f:42:0a:40:53:ad:45:2b:63:
00:b5:40:ce:35:b4:a5:14:a5:c8:7a:6c:0b:68:3c:d2:e0:9d:
78:3f:02:a6:ed:8a:d5:06:2d:98:d2:99:a9:ee:a6:1b:31:ba:
20:4a:c5:d2:ab:de:e3:31:c3:94:38:9b:c5:2a:e7:ae:cc:a6:
ae:9a:b8:e5:f9:86:ee:b5:32:81:f4:a5:9f:dc:4a:b9:d7:2d:
a7:79:9a:d9:f1:52:85:92:04:3b:c1:11:5c:66:0a:95:51:37:
43:56:fa:70:f4:9a:a1:b5:aa:af:0c:80:f6:c1:9e:3a:7b:84:
56:62:c7:15:c2:3c:24:cc:ff:a9:50:6b:08:3a:b1:2c:f4:89:
ea:2a:4a:7a:fe:78:f0:c2:09:77:56:19:6b:77:26:70:e5:d8:
61:80:36:63:00:f8:35:c4:bd:f6:2a:64:7c:70:d8:70:17:ee:
2d:af:a3:66:24:68:60:65:14:90:1f:92:29:fc:f8:b7:94:03:
16:0e:6f:cd:0f:1b:4c:c4:a7:14:2c:ee:b2:47:15:06:e2:ae:
7b:49:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:30:07 2026 by rpki-client