Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: 0CD8robjABFq8oz0tY5/V6LKMGIEZWN2BYmiVgfCG94=
Subject key identifier: 4A:53:44:F6:A6:95:07:5C:DC:61:46:27:F8:F1:68:4A:64:CB:19:19
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 01A1DE39A5083CDAF725E78CCAF6A62955E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 08:01:22 +0000
Manifest this update: Sun 15 Nov 2026 08:01:22 +0000
Manifest next update: Mon 16 Nov 2026 08:01:22 +0000
Files and hashes: 1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: gbYlNj7jm6vVtqNbNCozOfaAZRorMxmX72N9PyQFqXs=)
2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a5:08:3c:da:f7:25:e7:8c:ca:f6:a6:29:55:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Nov 15 08:01:22 2026 GMT
Not After : Nov 16 08:01:22 2026 GMT
Subject: CN=4a5344f6a695075cdc614627f8f1684a64cb1919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:b0:45:db:b2:ef:1c:e5:b4:b9:35:2b:74:
e8:c2:1c:f6:d6:bc:46:37:fa:13:fd:3e:39:55:b0:
02:82:7f:63:f3:f7:49:08:14:dc:59:41:bf:5c:89:
f7:87:f0:51:42:c7:09:0d:46:6d:b1:bb:76:03:4f:
23:86:3b:07:1a:3c:be:b6:c4:87:68:de:57:94:36:
f7:c7:32:1a:22:51:2b:fe:9d:6b:d5:2e:14:1c:12:
4b:a2:cf:f0:07:68:b6:e1:b5:3c:32:c6:35:89:44:
f6:83:05:41:f0:1d:e3:e8:80:59:00:5d:8e:fc:e1:
42:41:fd:af:c3:78:a2:c8:77:c0:57:15:61:c3:85:
c0:6e:70:3b:47:17:56:1b:ed:90:3b:64:49:6b:9c:
e5:ff:f9:8a:60:21:f1:ed:42:67:e4:46:8b:7e:cd:
90:66:8c:44:24:17:7c:8c:e6:d4:86:60:0e:ad:b3:
bf:8c:b6:54:42:ff:65:c8:35:50:04:6b:eb:e6:58:
15:cf:f4:13:27:e1:64:5f:81:92:cb:e0:10:da:16:
df:4a:16:70:19:2c:51:b9:be:52:84:f9:55:45:3d:
49:a1:00:53:06:23:27:08:c3:47:0e:94:25:e1:4f:
d3:ad:9a:46:92:81:3c:27:f6:75:df:57:54:13:4e:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:44:F6:A6:95:07:5C:DC:61:46:27:F8:F1:68:4A:64:CB:19:19
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ba:cc:c8:95:5e:22:2d:1a:73:d6:cd:08:f9:89:4a:9e:90:
b4:f8:17:9a:ba:e7:d1:7d:0c:42:8f:78:61:c3:ce:70:30:3c:
02:d0:07:f8:42:2f:58:e0:5d:f7:13:05:41:57:eb:c2:c5:a0:
85:db:b0:48:57:d7:7d:55:0e:22:1d:b0:c7:85:d2:b7:59:97:
57:6d:ae:3b:6e:b0:c0:32:db:d7:29:5b:f8:e3:1b:1b:80:d6:
83:64:ce:b1:02:15:0e:d1:59:5c:af:5c:b9:30:2f:40:c1:67:
c6:65:bb:c2:09:05:b7:6b:7b:be:a0:a1:1f:ed:c7:83:c8:13:
ed:fa:36:30:5d:85:85:96:00:1e:83:88:34:90:c1:1c:bc:0a:
d4:ba:85:b6:63:2b:dd:28:b9:03:42:f7:9b:df:c6:b4:02:31:
6b:cd:0e:a8:ee:5f:b3:c6:d5:e0:bd:bb:a7:bc:6d:9e:fa:f3:
bf:e2:56:df:3c:3e:59:dc:e4:d4:bf:a8:42:61:c7:4e:c5:74:
ee:f8:3f:4d:a4:c3:70:e8:fc:33:6f:a3:d6:cd:e5:8f:37:73:
3f:13:03:f2:fa:20:d0:83:c3:e3:bb:63:8b:9f:87:ce:9b:e8:
a7:c2:72:2b:12:d2:be:9d:7a:20:1b:41:bb:11:a6:08:4f:83:
44:30:b8:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOaUIPNr3JeeMyvamKVXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh
ODkyNjIwHhcNMjYxMTE1MDgwMTIyWhcNMjYxMTE2MDgwMTIyWjAzMTEwLwYDVQQD
Eyg0YTUzNDRmNmE2OTUwNzVjZGM2MTQ2MjdmOGYxNjg0YTY0Y2IxOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMSwRduy7xzltLk1K3Towhz21rxG
N/oT/T45VbACgn9j8/dJCBTcWUG/XIn3h/BRQscJDUZtsbt2A08jhjsHGjy+tsSH
aN5XlDb3xzIaIlEr/p1r1S4UHBJLos/wB2i24bU8MsY1iUT2gwVB8B3j6IBZAF2O
/OFCQf2vw3iiyHfAVxVhw4XAbnA7RxdWG+2QO2RJa5zl//mKYCHx7UJn5EaLfs2Q
ZoxEJBd8jObUhmAOrbO/jLZUQv9lyDVQBGvr5lgVz/QTJ+FkX4GSy+AQ2hbfShZw
GSxRub5ShPlVRT1JoQBTBiMnCMNHDpQl4U/TrZpGkoE8J/Z131dUE055/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpTRPamlQdc3GFGJ/jxaEpkyxkZMB8GA1UdIwQY
MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt
ZGYxZTk1ZDdlZGQ5LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5
LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrrMyJVe
Ii0ac9bNCPmJSp6QtPgXmrrn0X0MQo94YcPOcDA8AtAH+EIvWOBd9xMFQVfrwsWg
hduwSFfXfVUOIh2wx4XSt1mXV22uO26wwDLb1ylb+OMbG4DWg2TOsQIVDtFZXK9c
uTAvQMFnxmW7wgkFt2t7vqChH+3Hg8gT7fo2MF2FhZYAHoOINJDBHLwK1LqFtmMr
3Si5A0L3m9/GtAIxa80OqO5fs8bV4L27p7xtnvrzv+JW3zw+Wdzk1L+oQmHHTsV0
7vg/TaTDcOj8M2+j1s3ljzdzPxMD8vog0IPD47tji5+Hzpvop8JyKxLSvp16IBtB
uxGmCE+DRDC4Jg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:41 2026 by rpki-client