Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: wSKUeuPkKym0e+DZnGxcFME8lj4ojqPsbnQozKtUL1Q=
Subject key identifier: 75:1E:02:E0:9C:21:16:DC:44:00:29:5A:59:33:B7:49:C5:A1:30:41
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019E1D9118F512E205FF5D8E28B902223DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0F32
Signing time: Tue 12 May 2026 19:01:48 +0000
Manifest this update: Tue 12 May 2026 19:01:48 +0000
Manifest next update: Wed 13 May 2026 19:01:48 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: id/ldQDjo44IwmS/i1DPiIcNpx35lVhobu6q3VzGA5E=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:18:f5:12:e2:05:ff:5d:8e:28:b9:02:22:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: May 12 19:01:48 2026 GMT
Not After : May 13 19:01:48 2026 GMT
Subject: CN=751e02e09c2116dc4400295a5933b749c5a13041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:f9:ae:c7:04:8f:73:40:cf:a9:dd:90:c1:
fe:e7:a5:3f:cd:07:6a:11:6c:33:e8:bf:d1:c8:3f:
5e:86:e6:d6:df:e5:39:47:24:87:c4:a3:9c:7b:b6:
63:b4:b6:39:a7:94:56:7f:3c:ac:db:65:58:0f:85:
5c:74:58:1f:ea:66:c1:57:36:49:0e:80:5c:74:74:
b0:90:64:7a:62:a1:e6:a1:17:fd:db:af:ac:fd:14:
47:05:08:3a:a0:2c:b2:31:3f:f0:11:11:bd:fc:cd:
6d:ed:03:6d:a5:74:76:96:19:b1:5f:d7:44:2d:3d:
e3:40:3c:4e:07:22:2a:4d:8c:11:07:7e:78:06:a1:
7d:38:16:18:d8:1f:87:5a:07:62:4f:f5:4d:0c:fc:
92:27:43:73:ee:22:8e:15:9d:05:01:3b:bb:d0:c0:
38:fe:d0:ff:e3:65:e8:da:75:2c:77:8e:bf:47:1f:
55:3d:9b:81:14:66:f5:49:27:01:04:e6:81:0f:55:
05:13:ef:30:b0:ba:cd:e2:75:cf:07:3c:3e:f3:67:
34:40:0e:ed:ed:e7:84:a6:e1:1d:06:40:c2:83:5d:
f6:cd:51:71:95:21:8d:a5:61:45:d8:f4:48:20:3d:
46:7a:34:33:f9:39:c6:05:4f:09:7e:2f:4d:c9:2b:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:02:E0:9C:21:16:DC:44:00:29:5A:59:33:B7:49:C5:A1:30:41
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:7c:8b:99:14:45:f1:ff:7d:82:b4:6f:4e:b0:ec:c9:6a:
56:a5:35:25:5a:47:36:cf:b1:15:89:20:dd:ca:58:6f:19:1b:
cd:b2:9e:0d:2c:e4:f3:61:a3:81:05:dc:6f:10:90:6e:53:39:
d5:e7:8b:da:5c:2b:37:0d:1a:b9:9f:f4:13:29:36:65:c1:29:
4d:c7:54:15:1a:95:b1:0f:ae:a6:01:a6:70:80:57:9b:db:4e:
3b:cc:d7:38:fe:1a:31:28:28:f4:01:18:04:1c:9f:38:76:e4:
97:4b:61:eb:31:3e:03:79:7e:cc:8f:8f:3e:99:df:11:2d:3e:
65:12:bf:7a:d5:37:93:3a:3d:6f:a5:d2:52:da:1b:67:c4:b7:
f8:6c:ca:bb:33:ca:41:14:a8:63:33:f7:1b:17:0d:9d:0e:21:
c4:37:4c:13:4b:b7:72:2a:6a:48:56:1a:e2:c4:d6:19:50:fe:
87:f9:cd:aa:23:87:5f:39:27:fe:7e:b8:b6:c3:99:3a:25:60:
9b:44:e8:57:ea:98:ba:64:a7:66:33:4a:6f:96:2c:31:35:9b:
51:a8:0f:80:16:a0:ba:1f:d9:2f:02:ce:e3:19:e6:a8:14:c0:
14:6c:42:1d:09:16:22:98:33:ea:07:c9:93:43:7a:83:eb:78:
79:38:d7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkRj1EuIF/12OKLkCIj30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk
OGNhMzUwHhcNMjYwNTEyMTkwMTQ4WhcNMjYwNTEzMTkwMTQ4WjAzMTEwLwYDVQQD
Eyg3NTFlMDJlMDljMjExNmRjNDQwMDI5NWE1OTMzYjc0OWM1YTEzMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vv5rscEj3NAz6ndkMH+56U/zQdq
EWwz6L/RyD9ehubW3+U5RySHxKOce7ZjtLY5p5RWfzys22VYD4VcdFgf6mbBVzZJ
DoBcdHSwkGR6YqHmoRf926+s/RRHBQg6oCyyMT/wERG9/M1t7QNtpXR2lhmxX9dE
LT3jQDxOByIqTYwRB354BqF9OBYY2B+HWgdiT/VNDPySJ0Nz7iKOFZ0FATu70MA4
/tD/42Xo2nUsd46/Rx9VPZuBFGb1SScBBOaBD1UFE+8wsLrN4nXPBzw+82c0QA7t
7eeEpuEdBkDCg132zVFxlSGNpWFF2PRIID1GejQz+TnGBU8Jfi9NySv0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUeAuCcIRbcRAApWlkzt0nFoTBBMB8GA1UdIwQY
MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt
N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz
LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4Z8i5kU
RfH/fYK0b06w7MlqVqU1JVpHNs+xFYkg3cpYbxkbzbKeDSzk82GjgQXcbxCQblM5
1eeL2lwrNw0auZ/0Eyk2ZcEpTcdUFRqVsQ+upgGmcIBXm9tOO8zXOP4aMSgo9AEY
BByfOHbkl0th6zE+A3l+zI+PPpnfES0+ZRK/etU3kzo9b6XSUtobZ8S3+GzKuzPK
QRSoYzP3GxcNnQ4hxDdME0u3cipqSFYa4sTWGVD+h/nNqiOHXzkn/n64tsOZOiVg
m0ToV+qYumSnZjNKb5YsMTWbUagPgBaguh/ZLwLO4xnmqBTAFGxCHQkWIpgz6gfJ
k0N6g+t4eTjXGw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:12 2026 by rpki-client