Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: y4EBhNUxZZuxTpZSeughwUB6ZraI0DxSntcLj7SiHKA=
Subject key identifier: 9E:4F:7E:28:EE:81:01:BD:85:F9:2A:20:11:1B:AC:E9:78:4C:E6:17
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 01A1DE398D9615E51449680BA37A7E262085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 1680
Signing time: Sun 15 Nov 2026 08:01:16 +0000
Manifest this update: Sun 15 Nov 2026 08:01:16 +0000
Manifest next update: Mon 16 Nov 2026 08:01:16 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: DssaBnYg+5dnbUo+GIHPMmX63+jLEBDGHutZhfspvaI=)
2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:8d:96:15:e5:14:49:68:0b:a3:7a:7e:26:20:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Nov 15 08:01:16 2026 GMT
Not After : Nov 16 08:01:16 2026 GMT
Subject: CN=9e4f7e28ee8101bd85f92a20111bace9784ce617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:ce:19:41:a2:36:8f:97:6c:e9:d3:9c:35:
c2:6c:68:13:d9:1b:81:3b:b4:78:c5:b8:1a:77:90:
63:ba:e4:e2:e3:ce:6d:a9:29:f7:9c:c3:32:8d:e0:
53:51:79:70:fa:6d:d2:26:d1:3e:82:67:24:e1:d2:
3b:0a:aa:26:52:25:fe:2f:c2:5c:97:96:c7:63:b1:
9d:b0:10:e1:dd:df:b3:fc:9b:6f:ca:80:7e:16:40:
6d:06:2e:0c:57:50:ee:7c:d2:d2:d8:d9:e9:27:ef:
d0:04:e9:f0:69:d2:bc:5e:f7:2b:09:72:7f:90:2f:
45:07:20:17:3c:e0:71:2f:e7:ed:5c:2d:83:16:3b:
09:e2:f1:47:3f:bc:34:b1:74:c0:2a:32:1f:2d:b7:
05:e8:3c:6a:41:7c:3b:52:ee:bc:a7:bd:48:0a:8b:
c3:46:5c:fe:2c:65:d1:72:30:f7:16:a3:70:90:09:
e7:7b:ec:cc:d9:40:45:1e:12:77:6c:b7:4d:34:c1:
d0:eb:5c:1b:2a:f7:43:25:dc:82:2a:5a:73:c1:66:
a8:0b:db:fd:34:c5:68:d1:c1:4b:a7:ea:a2:9f:34:
7a:a4:d3:0d:f6:94:d0:59:c8:40:87:7e:41:e7:a7:
f0:9a:16:10:c2:da:6e:44:1d:b4:0c:58:72:6f:d3:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:7E:28:EE:81:01:BD:85:F9:2A:20:11:1B:AC:E9:78:4C:E6:17
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:de:46:0c:6c:27:54:62:9f:39:14:49:8a:9c:f5:5a:76:ab:
9f:22:c7:d1:ef:7a:44:4e:0d:ef:e4:12:79:51:88:fe:40:ac:
4c:af:14:1c:e6:54:46:e5:a9:e1:e5:95:45:e5:50:46:1c:90:
ac:c2:22:46:d2:5a:66:97:8d:a6:21:3e:e8:de:01:74:44:43:
89:d9:fa:24:b1:40:df:a8:8e:88:b8:91:fb:f5:18:81:be:48:
1a:79:a5:f9:4c:6d:f5:ab:e0:f3:85:4f:44:3e:49:47:7e:88:
73:78:f8:17:d0:58:31:68:82:79:cc:ae:01:ca:c0:17:7d:85:
4e:79:7b:78:36:70:15:b5:54:2a:46:7a:5b:e3:62:82:fd:03:
94:f1:b0:3c:60:89:2e:f7:bd:5c:64:36:82:69:df:6a:87:62:
49:3f:66:a6:ca:aa:09:1b:fd:f4:fa:21:e6:c2:4e:98:53:ec:
de:8b:5b:65:86:cc:65:13:3c:81:0b:37:84:cb:5a:df:79:88:
65:a3:1f:f4:c3:a0:e9:d1:72:45:c9:eb:0f:e4:38:45:61:c7:
5b:bb:5a:eb:76:5d:60:7d:dc:3a:d2:6c:88:8b:a0:87:41:cf:
a7:e4:1a:4d:f6:3a:75:3f:4c:98:37:ef:09:ad:dd:36:d9:d5:
80:2d:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:20:21 2026 by rpki-client