Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: iQRaFu/prx/bKvm+xwBtjXN9oVr3AiLbbo+CKFYRtPw=
Subject key identifier: 03:A6:73:68:6C:78:00:EA:76:E0:FF:8F:6B:6C:DD:EE:7D:42:38:52
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019F92487FD1DE19E53B7AB4F88AE9F9874E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 04:00:52 +0000
Manifest this update: Fri 24 Jul 2026 04:00:52 +0000
Manifest next update: Sat 25 Jul 2026 04:00:52 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: 4TpH9Wp1tVJ15QSltWlYtGyh0a5kMYn5yZb986BD/Eo=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:7f:d1:de:19:e5:3b:7a:b4:f8:8a:e9:f9:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Jul 24 04:00:52 2026 GMT
Not After : Jul 25 04:00:52 2026 GMT
Subject: CN=03a673686c7800ea76e0ff8f6b6cddee7d423852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:17:a7:e8:0e:fe:97:a1:f6:18:50:92:cd:
a9:0f:20:d8:50:19:8e:4f:e4:a2:df:27:b9:fc:49:
73:29:a5:75:d2:4d:d9:41:42:32:73:6a:74:4b:f5:
7d:9d:a6:64:4f:6b:d4:0c:b0:50:c2:0e:79:09:c2:
9d:a5:c1:a9:48:76:1a:2b:c4:3f:13:de:0b:b3:b5:
40:63:35:07:87:81:75:e4:30:6c:b0:62:63:3c:a6:
20:c9:73:92:aa:3b:5f:22:d5:1a:1e:c9:a7:43:06:
4a:2a:c1:af:33:6f:f6:80:c9:7b:fb:0f:1c:4d:0b:
2b:c8:d9:58:0c:eb:61:2f:d1:73:8f:30:6d:32:dc:
d2:69:e0:1f:27:45:eb:8c:05:3d:3d:63:a3:11:80:
8c:a4:d1:26:5d:6d:a7:e6:09:dc:5f:2a:4d:96:08:
b2:99:d5:80:9d:e9:45:cf:93:57:32:31:58:0a:d5:
14:6d:00:3f:a6:01:9a:5b:df:50:5d:1b:3b:33:8a:
64:f2:f7:cb:6d:34:35:5d:5d:80:e4:0f:0b:3f:d2:
0a:9f:96:ff:22:61:72:9b:c3:b8:e4:7e:12:34:72:
a7:4c:4e:e5:08:aa:ac:8a:8c:1d:6c:0b:1e:b9:2d:
64:93:22:00:f1:75:12:cf:25:b8:de:33:9c:aa:d6:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:73:68:6C:78:00:EA:76:E0:FF:8F:6B:6C:DD:EE:7D:42:38:52
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c8:a0:0f:a6:38:e0:24:9a:fa:40:8f:03:9d:f2:cd:3c:b0:
63:b0:98:7d:1f:1c:ee:94:71:8b:81:ad:6c:ca:61:e3:28:6a:
8e:a8:b4:ce:33:ea:4e:a7:c3:a3:eb:3d:68:c0:19:38:fe:1e:
40:74:f4:97:c6:6c:b2:c3:c6:96:3d:18:07:c4:46:b9:8a:9e:
24:a9:ae:fd:02:1a:84:86:5c:da:ec:1e:f9:70:36:53:19:09:
52:08:97:f2:27:6a:ac:6d:f0:0b:b3:ba:56:f6:73:92:86:0c:
bc:ac:5d:e7:6c:ea:f4:f6:42:13:84:38:e0:19:11:a2:66:97:
c3:41:9d:1b:e9:9c:e6:1c:22:a4:ae:3f:bf:ec:af:18:8e:98:
f4:ff:75:13:eb:2b:8a:6a:be:62:82:11:4d:dd:80:d5:db:53:
49:03:00:da:90:4c:b7:21:ef:19:b3:23:ac:0a:8e:8b:92:c4:
c8:19:33:2a:24:b1:1c:9b:c2:53:f6:cd:c6:6a:0a:49:91:77:
95:47:24:c9:67:ed:ad:14:7b:cf:f5:07:4a:8e:96:16:1e:07:
56:19:4c:fa:8d:79:e0:68:e2:99:8e:22:08:e5:cc:12:45:f7:
52:f2:03:60:6f:8e:48:ec:7c:8f:a8:2c:19:45:0e:4b:42:d3:
17:ff:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:17 2026 by rpki-client