Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: FhH4PM65WzZom6U6/iVU1XPpMbjwvFOSEPVNeJgMJbc=
Subject key identifier: 3E:7C:C9:12:21:84:65:A0:DE:DF:CB:00:C5:EE:AE:7E:E4:58:26:1D
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019F92B68DC88F1D3DA0F0F62FEDCC6DC3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0AEC
Signing time: Fri 24 Jul 2026 06:01:04 +0000
Manifest this update: Fri 24 Jul 2026 06:01:04 +0000
Manifest next update: Sat 25 Jul 2026 06:01:04 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: ves8MnQ2IqZpNghkocdJNYQD8byiiEWBYMg1m5G+Ol0=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:8d:c8:8f:1d:3d:a0:f0:f6:2f:ed:cc:6d:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jul 24 06:01:04 2026 GMT
Not After : Jul 25 06:01:04 2026 GMT
Subject: CN=3e7cc912218465a0dedfcb00c5eeae7ee458261d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:01:69:81:44:d8:89:be:8d:53:39:1b:f3:
54:fd:c3:d3:e7:31:ee:03:5b:16:8a:14:7d:c7:6c:
8d:f3:ae:ca:88:a0:8b:66:08:b0:5b:c3:c0:1b:53:
8f:c8:bf:03:8e:0e:d2:cd:8f:0d:a5:26:74:e4:d3:
2f:4b:f4:c1:b0:6f:7d:6b:40:03:d8:86:78:8d:e2:
41:ec:38:d5:2c:18:e8:02:8c:aa:c1:dd:02:24:36:
55:8d:fb:09:39:10:04:5f:af:0f:db:63:80:dd:98:
c8:a1:4d:f5:98:a7:a7:2f:c7:cb:09:bb:20:e1:16:
e2:02:a0:cf:8e:45:6f:30:70:54:20:82:99:00:be:
b1:08:68:7a:3b:68:f0:88:10:5d:36:83:cb:0e:61:
fe:fa:a9:e2:4e:b3:84:48:0a:3a:b5:45:1f:28:42:
e4:7d:ed:1d:32:02:3a:bf:8f:6a:19:31:3b:87:a4:
92:13:e1:1c:da:4a:79:27:ed:ce:77:51:d4:e4:2d:
57:97:62:de:00:61:2d:e5:2a:5d:5d:1f:ee:5c:ac:
59:7a:40:4d:3b:bb:8c:dd:df:e5:2e:97:34:e3:19:
63:dd:87:c0:f7:08:17:66:0c:67:fa:17:ef:c5:43:
ca:14:65:ba:2f:03:00:2b:bb:66:24:79:50:26:ed:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:C9:12:21:84:65:A0:DE:DF:CB:00:C5:EE:AE:7E:E4:58:26:1D
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:27:c8:dc:42:eb:88:f0:8f:c0:67:6f:bb:73:af:50:16:35:
d1:0d:1e:2e:eb:fc:86:1f:16:a1:24:ec:7a:37:ec:19:1c:ce:
a6:a1:89:36:b6:30:19:9a:88:91:03:06:23:87:f0:64:e0:1a:
06:6d:4c:0c:8c:f7:36:3d:2e:d7:aa:a5:4b:46:94:62:17:2d:
0a:ac:78:06:bd:18:3f:1c:60:11:74:c8:20:0d:a2:bd:a2:2a:
30:5c:ad:fa:4a:6c:e9:60:89:d0:b5:a6:fd:34:33:35:6c:fe:
46:ea:6d:7a:b4:c3:74:7d:fc:38:5f:0c:a8:8f:9b:1d:3b:a0:
a5:94:f6:99:8f:84:ca:e2:83:6e:ab:98:05:7a:0c:6b:2f:bd:
6b:eb:02:8e:b2:23:7e:fc:de:de:5e:5c:0a:d6:60:f7:a0:a3:
ec:81:ae:66:a7:03:a5:34:66:86:19:02:6b:52:be:d2:e6:a5:
3a:30:8b:2a:93:da:72:fa:0b:55:a8:39:80:a1:b5:f1:36:55:
3c:69:3c:59:2f:7d:b2:73:47:40:5d:30:dc:b3:e4:90:4d:80:
4a:f9:71:c6:e8:0a:cd:f2:86:96:4a:47:0b:60:c1:b5:4c:be:
5e:c3:c5:c5:a1:10:a2:5d:d8:6b:85:e7:98:02:fb:32:7c:b2:
8d:c1:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:44 2026 by rpki-client