Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: Idc/HsFwVGkU/dfgxWCz+IYGWGCL/08ZKRLqwD2IBAo=
Subject key identifier: 23:93:15:E3:B1:50:E9:99:AB:E9:78:88:54:3D:89:D6:BB:AB:B5:C5
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019E1FED164C211D13A9D6E9BD301707F7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0A2C
Signing time: Wed 13 May 2026 06:01:31 +0000
Manifest this update: Wed 13 May 2026 06:01:31 +0000
Manifest next update: Thu 14 May 2026 06:01:31 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: 5bYyTAso7r38/JZUJgCsJGKY6OudeQq/3mZqlRuer/8=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:16:4c:21:1d:13:a9:d6:e9:bd:30:17:07:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: May 13 06:01:31 2026 GMT
Not After : May 14 06:01:31 2026 GMT
Subject: CN=239315e3b150e999abe97888543d89d6bbabb5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:d1:ec:49:b7:b8:06:3e:6d:47:57:c6:ac:
97:1e:2b:f8:f1:8c:dc:fb:01:89:fb:58:8c:37:ca:
c6:47:6a:db:da:6a:81:c1:14:41:eb:a3:65:d3:be:
21:8b:b6:32:b5:37:31:3a:40:fd:84:a2:88:7b:6a:
a9:3a:9e:c9:0c:b8:eb:81:13:bc:33:a1:7a:bc:b9:
11:1e:38:20:12:7c:9a:9b:72:92:0a:1f:46:53:df:
51:6e:6b:d3:55:5c:62:19:fa:be:25:d8:32:cf:cf:
7c:57:cb:ed:6a:e1:bf:4d:83:9c:3a:f1:b3:9b:e2:
bc:5d:24:60:bd:37:ba:40:a2:5c:43:ad:c2:d2:f7:
20:b8:be:bb:dc:a5:c9:91:9a:2c:8a:ae:ae:c7:79:
bf:f9:57:13:52:dd:92:e0:39:1a:b6:9e:5f:79:ea:
7a:2f:cc:d9:6b:8c:88:0e:8c:f4:7e:3a:c4:af:bf:
87:55:e6:fc:62:f9:54:3d:68:fd:fa:2f:f7:79:af:
ab:a1:7a:3b:5b:63:54:49:73:d6:1f:ab:1c:df:c9:
27:4d:58:d4:e9:f0:9b:e1:61:5d:0a:3d:23:f6:d4:
6b:cf:88:04:be:04:20:18:db:ee:26:35:83:80:88:
31:dc:6c:c8:26:1b:6f:78:0e:e7:68:99:25:9e:ce:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:93:15:E3:B1:50:E9:99:AB:E9:78:88:54:3D:89:D6:BB:AB:B5:C5
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:f7:19:a9:9c:27:4f:02:90:e7:1d:20:09:d9:d0:58:fe:
81:03:51:83:2e:81:31:c7:10:f1:06:8d:5d:71:36:76:76:f2:
1d:db:74:84:94:bd:5c:7a:49:ff:9b:df:73:91:10:a5:de:b7:
5d:9c:d5:7b:aa:78:95:05:77:88:22:31:d3:b0:f7:da:b8:ba:
b4:a9:00:fa:bd:f2:9c:1e:62:17:60:c7:cb:bd:da:40:bf:05:
ac:97:de:e3:15:fc:9b:77:4b:4e:49:92:3a:9d:ef:64:67:3c:
29:bf:42:54:9e:91:c9:c6:80:2f:05:f6:68:7b:fc:3c:83:c1:
ab:3f:21:f9:d9:6e:a4:28:41:07:3f:28:70:17:69:7a:76:50:
09:76:ba:81:ef:1f:ed:5b:ef:2b:53:34:3d:35:64:fc:0a:08:
5f:ac:46:00:c7:e0:ce:f0:f1:8c:4c:ba:b4:e8:bb:92:e0:88:
3b:29:a0:7d:e1:9c:08:56:22:50:91:7a:2b:41:c9:c8:f2:8d:
86:c4:cf:5a:b2:04:9f:6a:0b:5f:8f:d1:15:40:75:03:2d:1f:
c1:ee:73:e6:3a:6a:67:20:aa:90:2c:90:cc:9c:f4:7a:47:3d:
68:1b:44:3f:d8:73:17:e2:80:7c:c2:11:a0:8b:ce:5e:75:94:
80:d5:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:08 2026 by rpki-client