Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: 6wF90BFWIva6QrmSN4EL57xrAOpt/TPK+nN6YiSHwBU=
Subject key identifier: 46:59:62:50:75:64:A7:8C:0A:7C:C4:85:9D:16:E6:C2:74:83:B0:1B
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019D26CD35C5DC3DFD01E5CDB3DA638CA2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 09AB
Signing time: Wed 25 Mar 2026 21:01:15 +0000
Manifest this update: Wed 25 Mar 2026 21:01:15 +0000
Manifest next update: Thu 26 Mar 2026 21:01:15 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: DbELZ9/wp/od5HQ+NUCdfjg7gJpelPmSzS2k4dk2sOk=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:35:c5:dc:3d:fd:01:e5:cd:b3:da:63:8c:a2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Mar 25 21:01:15 2026 GMT
Not After : Mar 26 21:01:15 2026 GMT
Subject: CN=465962507564a78c0a7cc4859d16e6c27483b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:1d:e5:b3:04:40:7e:8d:82:24:66:84:46:
e5:24:62:36:f4:7c:75:23:e9:98:18:ed:46:d1:b9:
a2:7d:58:d4:77:44:a8:26:bd:9f:cb:56:43:c3:f1:
f3:f7:5a:08:a3:30:a5:71:c0:8e:c7:0d:0b:67:86:
48:db:48:0d:e4:e5:64:0b:f1:d1:9d:a4:57:bb:8a:
14:ec:5d:74:3a:81:73:21:a8:56:d3:a3:f8:91:a4:
23:ac:b3:29:13:61:64:5d:bb:c3:10:36:b9:81:55:
62:5b:e9:d3:df:05:ac:cc:d9:9c:61:04:73:93:51:
33:03:a8:83:40:91:1f:8b:ff:62:42:4e:90:cd:ea:
77:ec:74:26:e2:c6:df:43:c8:2b:e6:af:12:bc:3e:
91:4e:04:b5:b7:6d:a4:2c:9b:5b:4f:e3:25:22:47:
75:05:0d:0f:e1:77:fc:fa:f2:d2:83:d1:62:00:1e:
09:78:a1:99:ca:69:1d:7b:cd:f1:27:e8:64:47:f0:
96:c7:39:01:17:6b:df:97:de:c3:34:ae:92:72:9d:
82:a8:2c:0d:5b:91:5c:ca:9b:e2:92:e2:41:a8:d8:
1e:c5:b0:ce:c4:4a:76:4b:ca:af:28:40:8b:82:25:
09:43:35:04:03:0b:eb:10:6f:72:22:ec:a3:99:e8:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:62:50:75:64:A7:8C:0A:7C:C4:85:9D:16:E6:C2:74:83:B0:1B
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0d:19:d7:c8:f0:5d:a5:48:11:cc:a0:b4:53:af:70:b1:16:
c6:ca:d3:61:f7:11:f7:24:0d:ae:d5:4a:f4:91:fb:57:02:22:
56:33:7a:25:14:b8:ea:32:e7:61:5e:d0:b0:b5:f9:53:26:8e:
fd:31:74:3d:0a:ab:fa:aa:a8:94:e8:e8:bd:2e:66:8e:18:14:
7f:42:a6:9f:3d:57:76:ad:73:bb:83:63:13:1f:cc:6e:52:92:
8c:43:03:9b:f2:ef:8c:0a:e1:38:9f:ba:5a:37:0c:81:6c:03:
ea:1d:3e:d6:3f:7c:31:49:c3:a3:79:17:8d:ce:cd:c2:4e:f9:
79:68:f4:5e:81:7c:36:8b:3c:af:ce:82:c2:83:30:f7:fc:89:
29:8c:6d:c3:3a:f2:cb:97:e4:a7:44:05:6e:ec:77:a3:9c:1c:
7a:eb:94:10:c2:d3:d9:53:8a:67:67:a2:f0:0f:35:33:f0:db:
3c:be:86:08:b5:ce:76:48:ff:25:94:7d:af:82:9a:b3:aa:dc:
60:22:01:75:1d:e3:8f:54:18:6d:b0:26:71:ea:3a:b2:95:b3:
d3:fe:78:d6:d7:81:cf:c1:01:1e:da:5b:31:37:ec:6f:1c:0f:
68:75:39:01:2a:e4:34:d6:db:19:80:35:11:f1:9a:7b:c9:d8:
97:3b:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:59 2026 by rpki-client