Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: OWaNoVrhuDrks/vlFqpNUjEvlPKtfqR4nxu7TVXB0s8=
Subject key identifier: BC:17:1D:B8:67:42:BC:47:A5:33:0A:89:6A:DD:34:F7:61:AF:6D:C4
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019DA754FFC5BE1AE8A1FB90D44849D4FDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 20:00:58 +0000
Manifest this update: Sun 19 Apr 2026 20:00:58 +0000
Manifest next update: Mon 20 Apr 2026 20:00:58 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: I/scIlPlEjB++eN+51srff+Hrxkpg2GIXmSJXD/Dbd0=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:ff:c5:be:1a:e8:a1:fb:90:d4:48:49:d4:fd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Apr 19 20:00:58 2026 GMT
Not After : Apr 20 20:00:58 2026 GMT
Subject: CN=bc171db86742bc47a5330a896add34f761af6dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:59:71:29:b0:db:a2:d4:7e:00:39:a2:b6:
44:f8:91:f4:4d:bc:dc:f2:96:d4:fb:77:12:a8:b2:
7b:30:bc:26:4b:25:10:2d:ef:f5:67:cc:e6:05:fb:
42:43:6f:2b:16:f4:1c:a3:cd:4f:10:dc:f2:07:03:
0c:3e:49:51:3a:f7:d6:91:00:17:23:a7:64:41:ae:
4d:cd:15:af:fc:d9:06:89:4f:9f:96:e9:a3:74:cc:
7b:94:4c:59:cc:4a:9b:da:7d:fb:16:b2:25:80:39:
df:9d:98:2b:be:06:33:70:94:08:29:20:f3:7e:b3:
c4:51:3f:d8:d3:f7:f6:a4:a1:14:41:26:e4:47:90:
a4:50:3f:3a:a5:66:6e:30:e5:72:c4:cf:82:e6:ac:
d8:13:0e:fe:c1:ab:06:87:aa:80:49:4a:75:cc:01:
a0:6b:85:87:97:50:ef:18:9c:cf:70:a1:59:47:af:
a1:73:dc:86:65:96:6e:da:05:f6:a5:44:26:06:64:
87:48:f9:91:b6:ab:35:57:f8:df:3d:b6:0f:89:d7:
7e:44:b1:28:3b:f7:51:48:9e:af:53:87:a4:30:2d:
4c:2a:43:bc:e1:09:2b:b3:77:f2:42:91:73:e8:f2:
cc:0e:99:cf:d7:cf:75:0e:96:73:b9:3d:ad:24:d7:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:1D:B8:67:42:BC:47:A5:33:0A:89:6A:DD:34:F7:61:AF:6D:C4
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b5:47:b1:97:28:e3:eb:74:fd:33:51:72:11:6e:f4:03:71:
e0:f0:3a:dc:c5:75:90:4a:91:d0:6e:a1:33:0c:76:65:e6:1c:
e0:76:08:1d:04:03:61:25:44:2a:d3:98:31:e7:db:13:e3:56:
a5:3d:17:b0:83:06:a1:e9:50:d6:4c:77:a7:8d:08:d3:3d:df:
df:53:03:c5:21:1e:26:64:11:13:e1:08:2f:38:d0:41:87:43:
bf:68:14:5e:d7:da:64:8a:67:2d:a1:da:77:8b:f8:a5:84:83:
5e:cb:ca:0f:5f:a4:cf:f6:ba:96:82:1a:ba:19:1f:6e:b7:f1:
52:d1:12:80:6b:a3:bd:58:d1:31:f0:03:9a:3e:45:f0:6b:d5:
0e:09:34:d6:cb:2c:2e:b1:48:a5:09:58:0a:0b:83:f3:7d:0d:
ae:4a:d7:9f:9d:14:5c:c6:ce:41:14:35:15:b0:bc:ef:da:e3:
04:f5:78:38:a0:e8:15:31:27:20:cb:a5:2f:de:bc:b5:e7:0a:
33:fb:50:0f:59:33:23:b7:68:59:f9:91:04:84:75:9f:79:7e:
ae:6a:a7:32:42:12:0e:21:09:f2:09:77:d7:75:37:a1:bb:b3:
e7:b9:7a:77:94:92:29:64:17:93:64:ac:5b:6b:57:7a:25:6d:
3c:79:89:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2nVP/FvhroofuQ1EhJ1P3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi
MDc5YTYwHhcNMjYwNDE5MjAwMDU4WhcNMjYwNDIwMjAwMDU4WjAzMTEwLwYDVQQD
EyhiYzE3MWRiODY3NDJiYzQ3YTUzMzBhODk2YWRkMzRmNzYxYWY2ZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXpZcSmw26LUfgA5orZE+JH0Tbzc
8pbU+3cSqLJ7MLwmSyUQLe/1Z8zmBftCQ28rFvQco81PENzyBwMMPklROvfWkQAX
I6dkQa5NzRWv/NkGiU+flumjdMx7lExZzEqb2n37FrIlgDnfnZgrvgYzcJQIKSDz
frPEUT/Y0/f2pKEUQSbkR5CkUD86pWZuMOVyxM+C5qzYEw7+wasGh6qASUp1zAGg
a4WHl1DvGJzPcKFZR6+hc9yGZZZu2gX2pUQmBmSHSPmRtqs1V/jfPbYPidd+RLEo
O/dRSJ6vU4ekMC1MKkO84Qkrs3fyQpFz6PLMDpnP1891DpZzuT2tJNdc2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwXHbhnQrxHpTMKiWrdNPdhr23EMB8GA1UdIwQY
MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt
OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz
LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrVHsZco
4+t0/TNRchFu9ANx4PA63MV1kEqR0G6hMwx2ZeYc4HYIHQQDYSVEKtOYMefbE+NW
pT0XsIMGoelQ1kx3p40I0z3f31MDxSEeJmQRE+EILzjQQYdDv2gUXtfaZIpnLaHa
d4v4pYSDXsvKD1+kz/a6loIauhkfbrfxUtESgGujvVjRMfADmj5F8GvVDgk01sss
LrFIpQlYCguD830NrkrXn50UXMbOQRQ1FbC879rjBPV4OKDoFTEnIMulL968tecK
M/tQD1kzI7doWfmRBIR1n3l+rmqnMkISDiEJ8gl313U3obuz57l6d5SSKWQXk2Ss
W2tXeiVtPHmJog==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:59 2026 by rpki-client