Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: O8i2dfxpTPiJI7WNZhf7m99+itgGRmAyPEomgeHfxo8=
Subject key identifier: 59:4D:D0:36:32:96:5E:C8:0E:A8:71:32:86:C1:BA:B4:EB:75:F6:23
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 01A0E0CFD6D6DFC51356678D879A3A8CFAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0B99
Signing time: Sun 27 Sep 2026 03:01:52 +0000
Manifest this update: Sun 27 Sep 2026 03:01:52 +0000
Manifest next update: Mon 28 Sep 2026 03:01:52 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: zJZ0wyKH0gvpH8FzxV2iF2wNrVZGf6/QQA1GqpKzoTU=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:d6:d6:df:c5:13:56:67:8d:87:9a:3a:8c:fa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Sep 27 03:01:52 2026 GMT
Not After : Sep 28 03:01:52 2026 GMT
Subject: CN=594dd03632965ec80ea8713286c1bab4eb75f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:06:d3:98:bb:7e:97:a0:dc:ce:c3:42:43:
b6:51:f5:15:cf:b8:6a:9e:d1:b8:bd:1d:41:dd:8d:
7c:28:4f:cd:e6:53:e8:f1:54:4a:5a:eb:e6:9c:04:
1e:d3:e9:21:d8:80:53:82:f8:83:fe:55:ce:d9:92:
9e:96:55:ce:1d:73:c4:09:8e:b6:8d:75:c3:20:bd:
0b:97:3c:fd:44:97:00:93:c8:71:6d:85:ba:87:ee:
68:d8:6a:a3:c2:a6:ec:0d:88:f0:1f:80:15:23:be:
33:98:06:99:c7:da:48:b0:55:05:6e:7f:2f:bc:37:
91:81:72:9c:0c:49:71:9e:44:50:b5:3c:b7:a5:e1:
76:f8:0f:2c:e4:42:f2:f3:cf:55:41:05:1f:aa:93:
99:8c:87:b5:5a:8a:68:cf:de:a7:ec:36:fc:69:84:
1e:17:95:e0:ee:b6:6d:f6:9c:55:81:38:29:5a:b5:
0d:a0:a5:b4:21:94:c7:d5:37:58:5f:e0:93:90:69:
80:c6:d6:4e:65:80:b1:84:54:65:07:a2:b1:0e:49:
fa:70:ec:00:d0:37:74:4c:be:73:5a:dd:b1:44:32:
af:20:bd:72:d6:3a:3d:32:0c:a0:87:22:b8:16:67:
56:74:b6:bb:ec:46:e4:f1:82:d7:33:8d:63:5e:c9:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:D0:36:32:96:5E:C8:0E:A8:71:32:86:C1:BA:B4:EB:75:F6:23
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:af:15:4e:6a:ec:dc:5e:e2:94:d7:63:b5:3c:23:c3:05:
b9:98:79:4a:18:b3:3b:60:e3:73:53:d1:dc:36:05:29:2c:83:
13:3e:47:60:a6:4f:89:23:8a:fc:83:3c:b9:7b:2d:fe:43:eb:
7a:0a:20:2e:0a:dc:52:0f:de:62:2a:c3:71:40:3d:bb:24:78:
00:f1:dd:64:f2:74:3d:d3:05:5b:db:e5:cd:67:78:03:97:47:
88:8f:bf:6a:3d:93:57:74:13:c8:2c:99:24:26:75:3f:7b:5e:
65:a5:c9:be:0b:7a:7c:df:de:b6:fb:cf:61:fc:1e:6a:df:61:
b0:46:a4:2f:3a:bb:ae:69:34:9b:21:f0:7a:e2:38:f6:3e:30:
d7:0c:95:3f:6d:9c:e9:b1:4b:b3:a1:a0:6c:27:5d:6a:26:7e:
4f:2c:92:25:94:cd:e4:5c:67:27:8f:17:52:31:3f:4b:68:73:
9e:80:8c:b4:0b:a1:6c:8d:1c:8d:b7:f1:57:6f:20:6d:17:6c:
dc:b7:9a:6b:cc:b6:4f:66:d4:01:65:a7:54:c2:1d:c7:5a:71:
ca:bb:52:9d:aa:fe:64:1f:9c:7c:8a:aa:ab:79:17:4d:9a:fb:
8d:b7:88:76:db:56:3d:7f:34:1f:07:0e:f5:9c:89:5d:0c:98:
a6:41:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:56:33 2026 by rpki-client