Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: HW8tKbut10sdnMqf3bXw+7u48lxkRhnrJJKzym34X24=
Subject key identifier: 78:05:4A:C9:62:F4:EC:4B:79:5C:9D:FB:2F:03:DE:63:53:4E:07:20
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 01A0D2DE58A325098123BB59F6BE2D7CDD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 10:03:02 +0000
Manifest this update: Thu 24 Sep 2026 10:03:02 +0000
Manifest next update: Fri 25 Sep 2026 10:03:02 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: qrbZs7M+4Dq6QOmKX+YrH8IIB5VmM68nXjgECQsrlKE=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:58:a3:25:09:81:23:bb:59:f6:be:2d:7c:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Sep 24 10:03:02 2026 GMT
Not After : Sep 25 10:03:02 2026 GMT
Subject: CN=78054ac962f4ec4b795c9dfb2f03de63534e0720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:d0:7d:f8:e7:df:ae:1b:30:ea:3b:4c:0f:
71:3a:89:ee:3d:87:2d:bb:cf:94:19:97:b1:50:24:
85:33:9c:cf:54:45:40:85:c4:82:67:75:94:dd:dc:
8a:d1:f6:d0:e8:d4:e8:4c:f0:9c:48:85:10:a5:2f:
f7:aa:6e:03:8b:09:4d:99:43:b9:6d:bd:ca:6d:63:
ea:f0:d5:b0:97:c1:e0:1b:28:f9:0f:5e:cf:a7:9b:
90:a7:04:18:cf:ce:72:92:d5:67:0b:fa:87:ef:52:
52:2e:ce:43:a8:0f:3c:48:8b:a4:9e:2d:b7:8a:8f:
8e:af:93:06:3b:dd:34:7c:1f:e1:c1:e6:31:94:f8:
2a:80:f9:48:3f:53:56:6e:a6:ea:e1:ac:3f:e5:77:
37:74:be:42:b1:b1:56:e0:fb:b8:d4:1f:42:e1:3d:
81:30:60:70:db:7e:72:e0:bc:9c:3c:fb:6a:0c:8b:
5e:9c:c4:4b:45:71:9c:3a:e7:93:2f:d3:95:75:e1:
4d:df:d2:6b:99:0e:a5:b7:ae:8d:14:33:07:c8:ab:
b9:f6:9c:bd:91:83:bd:52:a3:a6:3f:8e:9f:81:e0:
79:a0:eb:ce:b8:16:ba:37:54:12:86:9b:4d:5d:bd:
6a:a6:7b:4b:d1:99:5e:c6:db:f1:5c:e5:f6:90:f8:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:4A:C9:62:F4:EC:4B:79:5C:9D:FB:2F:03:DE:63:53:4E:07:20
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:79:42:a8:13:6b:6f:ac:a3:af:b8:2a:9e:5b:45:0a:4e:40:
c3:be:5a:81:60:a2:1a:6d:9b:db:95:a3:60:2b:7f:a9:e6:6b:
ce:c9:b8:96:51:f7:c7:4f:25:26:a4:21:04:fd:2a:02:a7:30:
a5:c9:f7:47:21:2f:a1:c6:0b:a7:fc:8c:f6:41:df:53:91:74:
1d:8e:18:29:c7:16:d4:e1:9f:c2:69:d3:96:28:68:c5:27:f5:
c2:06:84:be:f5:b9:ff:5b:fe:8a:44:6c:5c:39:64:49:bb:4f:
6c:b5:35:7c:a2:f4:07:e0:16:24:1b:cd:81:ee:87:62:44:a4:
f2:ed:87:44:a5:ce:a7:ce:d8:af:aa:9a:17:e3:3d:9e:aa:73:
6d:b0:ad:f0:5b:fd:a4:ca:fc:5e:8a:fc:fb:a0:a2:a2:08:11:
9c:5d:10:2b:43:79:ac:9c:c1:13:b1:5e:8b:d5:e6:a2:0e:e0:
60:8e:bb:f4:d1:de:a8:a0:b7:20:5d:aa:7c:08:06:9f:37:de:
d2:a0:49:4c:50:d2:86:6a:91:ef:45:6a:86:56:5d:d0:70:73:
be:ae:e9:4f:a2:51:be:bc:c0:28:62:8f:24:91:c7:bf:54:01:
72:84:29:f4:cc:fc:f0:b7:8b:d9:1d:a5:10:90:45:8d:88:64:
f8:34:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:38:40 2026 by rpki-client