Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: 12JMch2HdXpB8gccZ5LvGVtQ4xBL5DEbOF/yHsHQwLU=
Subject key identifier: 5F:C3:6D:B0:75:31:02:5F:05:37:40:28:5A:E9:20:3B:DD:BF:EF:76
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019D265F69529A70D9BC69BC06BCD822E75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0EB2
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: 57S3XtsYB5mN1aedNKzVT1BziXnLTXZ5OBTD6jN4EPA=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:69:52:9a:70:d9:bc:69:bc:06:bc:d8:22:e7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=5fc36db07531025f053740285ae9203bddbfef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:fa:b3:19:48:b6:ef:fe:ff:d9:31:05:fc:
a2:02:3b:e5:a8:50:76:95:22:ea:fb:d6:9c:83:4b:
8a:19:5f:df:9a:90:62:d7:a8:24:83:b5:3e:a6:d6:
a8:74:3f:17:d8:aa:39:54:a9:b0:a1:c5:32:bb:ab:
2f:fd:67:f7:cf:6e:38:36:9c:54:da:aa:3d:4d:1d:
a7:f6:65:9f:82:7f:65:0f:f5:02:dd:4c:3a:58:f6:
72:85:ca:ce:2b:ed:38:f0:fd:fc:76:2d:04:04:39:
c7:08:e1:ba:ac:ba:d4:10:bb:a0:05:5d:38:d5:b4:
cb:15:cc:60:15:85:40:54:a9:55:41:79:42:36:52:
7f:14:6a:d9:49:06:ac:d4:41:73:2d:a7:09:d2:66:
09:f8:0b:27:b8:ae:a5:d0:0d:3e:e1:e3:16:1c:69:
76:b5:ab:63:f4:a2:d2:f7:2f:f0:a8:06:a8:78:93:
57:e1:b8:96:3d:4c:4f:38:4d:d9:a5:84:9f:cd:c8:
f9:08:80:e6:4b:ed:4f:39:da:78:ea:9e:b7:a3:0a:
93:cc:88:d2:c0:39:d5:49:62:10:4b:18:e0:8a:eb:
e5:a8:dc:e0:a3:2d:14:3c:87:d8:33:c5:97:01:1a:
4c:4b:25:e7:36:e0:81:16:34:04:f8:99:d4:c2:90:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:6D:B0:75:31:02:5F:05:37:40:28:5A:E9:20:3B:DD:BF:EF:76
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:74:1b:df:69:e0:02:fd:57:9c:38:f0:e8:bf:47:af:46:e7:
6d:bc:7a:6e:45:8e:40:f4:4e:11:7d:79:d7:27:0d:d4:16:2d:
81:21:45:27:04:8c:ea:50:ab:bf:fe:46:c2:9c:0d:2e:73:65:
1c:9f:36:3c:0d:47:66:80:41:24:e0:34:57:64:08:f5:65:02:
22:3e:4f:33:f9:c7:1e:c5:83:3a:29:62:1f:ef:21:fb:b2:10:
09:d3:53:df:bb:57:85:aa:56:55:b0:05:95:c9:f9:50:6b:f3:
d4:3f:40:09:1c:cf:9f:73:d1:0f:b2:47:2d:e4:e6:57:ed:83:
04:06:5e:c7:d3:89:de:ea:ff:7c:c9:c8:11:22:c9:7a:6d:fe:
75:50:e5:a9:97:12:20:61:5c:70:df:7a:27:1d:fb:78:88:14:
c2:1e:17:33:0f:9b:54:f3:28:31:6b:82:11:aa:a4:68:96:b8:
a5:b9:2f:98:9e:83:9f:b1:7c:09:db:17:6d:5f:85:7f:0f:18:
8f:5d:25:0e:4e:bf:c4:ec:75:6b:eb:e3:27:f4:78:03:8d:dc:
8b:03:4d:27:69:08:e2:87:53:19:8e:55:dd:9c:5c:e4:bc:d6:
6a:26:e4:0b:99:0a:9a:ac:42:47:cc:a9:92:08:a0:b9:3e:a8:
39:00:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:46 2026 by rpki-client