Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: r9ZhIsUd41GJ49tNnBxKi3h9Dg1O9jjG5Kkjv+8eptQ=
Subject key identifier: 1F:19:14:C7:73:7F:75:A9:F6:A5:6D:DE:02:4B:C4:61:F8:CB:A0:2B
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019F92490C2A10D9356A3114264254FADB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0FF3
Signing time: Fri 24 Jul 2026 04:01:28 +0000
Manifest this update: Fri 24 Jul 2026 04:01:28 +0000
Manifest next update: Sat 25 Jul 2026 04:01:28 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: 0G5ZnAH1MbZNWMK7SDJRiS0eB9FnRNMr9Rtuv25AWwU=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:0c:2a:10:d9:35:6a:31:14:26:42:54:fa:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Jul 24 04:01:28 2026 GMT
Not After : Jul 25 04:01:28 2026 GMT
Subject: CN=1f1914c7737f75a9f6a56dde024bc461f8cba02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:58:84:2a:c8:54:04:6d:1f:4c:2e:62:14:
3a:1b:9a:eb:76:62:4a:6c:3e:27:9e:96:7d:4a:f6:
94:e7:2e:ae:a9:bc:cb:16:dd:d5:ba:ce:39:fa:33:
33:44:88:e4:8f:3d:81:9e:51:95:8a:8b:19:f4:28:
2d:33:ac:8f:37:e4:70:e6:64:1e:a8:85:b0:ab:be:
d5:7e:04:c0:ec:db:03:73:72:22:9b:28:db:01:cd:
1a:c6:f8:85:56:e8:5f:df:a2:bf:ed:06:bf:bc:cb:
63:81:4f:f5:5c:22:f5:34:47:f5:e5:1a:ee:f3:d1:
4f:5a:40:3e:0d:e6:6a:a4:91:12:d2:58:d7:f6:70:
26:f1:da:24:23:e4:bc:ce:20:9a:bd:2e:15:43:31:
6e:58:4a:d8:24:36:e0:fa:ec:8c:08:14:76:58:de:
61:7f:8e:a8:71:49:6e:f7:03:6a:f4:88:a4:87:4f:
56:c6:20:95:ce:0b:c4:3c:7e:52:a3:0c:f1:80:b4:
c2:6a:a6:c8:af:f9:3b:34:82:7c:f1:71:69:3f:48:
62:fc:96:cb:16:f0:4d:a9:a8:dc:2b:d5:bc:e6:a0:
8f:a6:36:e3:56:be:5e:df:db:4f:a8:cb:a3:1c:6d:
92:4b:8e:f7:f7:27:4e:84:a3:9d:d7:67:8d:bc:91:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:19:14:C7:73:7F:75:A9:F6:A5:6D:DE:02:4B:C4:61:F8:CB:A0:2B
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:25:fe:6b:86:cb:01:95:05:d8:a9:4c:14:ff:9d:8e:91:
a3:10:e9:6a:d9:2b:9d:f5:be:74:b2:3f:f9:92:4f:7a:d4:a3:
54:f5:50:73:d4:3d:9a:cc:59:fe:99:c8:d9:a0:56:ac:47:53:
49:ea:11:c0:d9:e1:46:18:f9:3e:a9:b0:81:af:73:04:e9:7d:
3c:77:06:af:fb:1d:e0:29:7e:41:c1:61:f5:04:11:c5:f4:a1:
89:8c:8a:06:c6:cb:8d:1f:5f:04:0e:da:8c:fa:af:d6:c5:fe:
f0:a4:af:86:be:3b:13:7a:7c:29:b2:d0:c4:81:c1:8f:9d:0a:
be:00:63:9c:51:6b:56:e4:91:8d:c2:64:37:57:04:31:d5:15:
25:60:9c:6c:f8:34:83:e2:49:9d:7a:3c:22:d7:f7:50:41:d1:
48:b3:59:00:13:61:31:7c:a1:44:fa:c1:ef:be:4f:9c:44:42:
29:d1:e7:ea:11:6e:9e:be:94:57:c0:cd:2c:ac:d3:be:98:6e:
f8:5f:22:84:b5:d1:47:d0:90:64:d7:5e:ef:e6:65:93:48:4e:
ed:97:42:14:30:25:41:b0:58:84:c2:b4:31:7c:6a:ca:4f:15:
01:f0:43:53:03:60:35:29:c1:81:40:9f:3a:74:e0:c0:d7:af:
17:cd:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:28 2026 by rpki-client