Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: XOhpTHqo6C8T1LATkz2FQFNk23NsOukXiEZxvTGBGMU=
Subject key identifier: BB:BD:1B:1E:B7:46:CD:81:1A:9E:B2:60:FA:F6:F0:04:6A:F5:CC:53
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 01A0D4CB67578ABBC72DCDC987FAED4B3749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 109A
Signing time: Thu 24 Sep 2026 19:01:35 +0000
Manifest this update: Thu 24 Sep 2026 19:01:35 +0000
Manifest next update: Fri 25 Sep 2026 19:01:35 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: ZLY9rDlgPLmF/Mf0y148CFuGQYqgJz/Z5CjhR3tRB+o=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:67:57:8a:bb:c7:2d:cd:c9:87:fa:ed:4b:37:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Sep 24 19:01:35 2026 GMT
Not After : Sep 25 19:01:35 2026 GMT
Subject: CN=bbbd1b1eb746cd811a9eb260faf6f0046af5cc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:f5:84:90:72:5e:da:66:22:02:94:e5:4f:
91:33:a9:a2:79:41:47:ef:12:bf:cf:d4:83:dc:3c:
41:cc:bc:e8:90:b2:bc:8d:8a:61:7e:46:38:fb:8e:
b8:bd:eb:51:cc:79:76:aa:f9:51:8d:8b:9a:62:73:
1e:6c:9e:02:18:e1:71:ce:2c:39:36:89:eb:9a:a1:
d5:f2:64:e0:45:b7:e9:53:5e:20:68:b3:1d:8d:f1:
fd:a0:6b:73:ec:44:40:ff:cc:c5:2b:ba:3d:d9:1b:
3f:68:7f:4c:96:04:7f:a4:6d:cc:0b:a7:5c:7d:87:
f0:df:c6:ec:5a:2b:13:f5:78:e4:a4:1a:ef:12:9e:
5d:f3:f3:2b:4e:4c:79:75:13:5b:3b:0b:29:bd:e0:
5d:ba:ac:7d:3b:3b:c7:0d:dd:b2:3f:33:3e:8e:b1:
cc:a2:6a:e1:94:ae:d2:f6:f9:e0:c2:a4:ef:27:fb:
f2:84:a0:3e:e4:5a:46:9a:ca:2d:d2:45:ab:5f:dc:
3c:78:ff:e5:11:c0:e8:ea:68:64:8c:08:7e:42:b9:
58:ed:d8:d5:ee:51:97:df:3e:11:f6:a1:74:79:5d:
d0:f4:49:4a:b0:2e:ac:ad:b3:d0:ea:29:68:4f:f0:
fb:d5:7f:c0:f4:cc:b1:d4:ad:1d:52:c1:6a:7a:a4:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:1B:1E:B7:46:CD:81:1A:9E:B2:60:FA:F6:F0:04:6A:F5:CC:53
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:89:8e:55:a9:5d:ad:8d:8d:eb:c5:20:3a:6b:5f:dc:15:05:
73:cb:0d:9f:e1:07:9c:0b:ac:c6:a4:0a:9a:2a:f1:7c:16:cb:
6d:93:7b:25:39:ea:38:f4:e2:f1:6f:59:91:39:86:dc:cd:04:
50:fa:54:d8:da:85:a7:88:ea:9f:3c:1c:94:e0:b5:61:e9:18:
be:73:b0:d0:2f:1a:ec:29:c0:1f:f0:34:5b:24:88:08:1d:a0:
9e:ea:c6:04:80:48:7c:c2:d5:a1:a3:ff:59:99:4d:80:97:80:
9a:89:f8:08:49:54:b8:52:6f:85:59:db:2a:63:be:04:88:a6:
83:79:96:b4:95:42:5f:6c:e3:1c:c0:85:3e:0e:db:0a:d7:e0:
14:79:07:10:65:ab:bc:02:59:60:2d:c9:5d:a5:fd:52:ff:1e:
0a:a1:15:b5:63:b7:c4:f6:33:89:54:51:fc:5c:24:de:ea:50:
88:2d:65:ed:78:ae:b9:a0:57:ed:a3:e5:67:81:0c:3a:29:20:
13:d0:7e:e0:c8:ea:6b:d9:86:ce:d9:7b:a5:cf:26:ae:0d:dc:
04:37:af:d5:23:b1:20:fb:09:83:16:03:a8:02:b9:0e:a8:0f:
b4:05:f4:e3:f8:a1:46:e4:03:9a:e8:39:d8:d1:fc:85:c4:8f:
49:e7:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:48:38 2026 by rpki-client