Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier: qgNixuQobxKQimmC0Dp7hQoUFL86MObkPjk6gQZCUpc=
Subject key identifier: AC:73:2A:67:58:8A:DE:D9:45:5E:B3:06:15:44:D8:34:A9:1D:A8:F9
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 019D25F1277406600344DD33256AF37B3FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number: 0A21
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: Jn3W6ZaHvgjC2yeedSwwKl0HFXo.roa (hash: 1wPebkRNXxJb4zmu3Rzh3U8d+lR0H05oikgxI60SflE=)
2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: y1wA+yQt4RhOs+HjON996rOi4w/0ZTyVyA04S5KmhvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:27:74:06:60:03:44:dd:33:25:6a:f3:7b:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=ac732a67588aded9455eb3061544d834a91da8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:e2:3e:57:32:f9:06:c2:18:94:f3:b4:34:
92:07:c4:81:ea:1d:ae:29:ab:2e:fa:06:85:46:50:
51:89:55:e7:00:27:66:ae:19:67:83:35:1f:0f:76:
04:ad:5a:c9:2d:0f:45:da:db:d4:72:ab:18:a2:5d:
bb:70:70:0c:b1:c0:49:09:33:b0:44:a1:01:85:4a:
a5:d6:dd:13:c4:11:48:8b:5e:41:1e:cc:4b:7d:b7:
29:53:3f:31:ee:28:44:60:b6:46:b8:cc:9a:55:b5:
4f:fa:08:90:2c:83:2d:fa:92:8d:5d:d2:75:54:bc:
00:61:a1:ab:0e:db:82:5d:2f:f7:1c:9b:1e:e5:cd:
0c:34:ee:c0:97:0b:bc:55:29:93:dd:64:fb:fc:ed:
01:d1:75:cc:fc:74:f5:e4:cf:9c:54:60:93:5d:a8:
a4:19:08:e4:d5:1d:39:6d:db:4f:d3:d1:b3:2a:db:
fb:e6:e8:b6:42:66:a8:14:95:1a:18:d9:20:32:a6:
ce:6e:9b:69:05:c1:51:52:c9:4c:e2:fc:d4:31:34:
1c:45:78:6c:92:0e:94:50:1e:ca:c8:ee:27:90:ea:
2c:9c:2e:5c:6c:42:34:b3:b1:a5:9d:43:83:12:d8:
5a:9f:74:ad:9d:8b:9b:92:c0:6d:59:f5:2d:a5:7f:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:2A:67:58:8A:DE:D9:45:5E:B3:06:15:44:D8:34:A9:1D:A8:F9
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:83:87:65:a7:cb:6f:5f:51:b2:c0:6c:b8:dd:a8:d8:b7:c1:
13:82:c8:9d:12:1d:ce:b2:8f:83:63:a9:c2:cb:65:8e:a0:52:
40:55:b9:3c:d9:d8:7f:ef:cf:9e:37:1e:e5:ef:1c:31:57:35:
f9:23:d6:b3:06:6c:32:7b:0b:c0:1b:03:3b:24:e4:1e:04:ac:
cc:f8:b8:36:11:46:36:fc:d7:70:6d:85:c5:62:3f:02:96:69:
5e:a1:73:b2:05:01:99:1e:1d:97:44:8d:51:aa:25:9d:d9:a4:
73:33:cb:b4:83:ec:af:ff:2d:ae:1b:a2:2a:cc:81:45:a2:ef:
9e:06:8a:c1:50:e7:88:4a:b9:0c:5f:3b:44:25:30:51:90:c9:
d8:57:db:16:51:ae:ea:e3:ec:f2:20:a1:65:dc:0e:69:6f:9c:
60:68:9a:c8:98:05:84:19:8d:55:2b:29:ed:92:b7:66:23:f4:
7c:81:23:cd:ed:fa:95:03:df:1f:f7:64:8c:59:cb:9a:fc:b7:
cb:72:e0:fb:ad:c6:38:fe:2c:ac:e1:2e:7b:bf:1f:c1:6d:88:
f8:9e:a3:52:6b:7b:99:35:9e:30:d0:bf:ed:5a:1c:38:63:3c:
c2:45:79:dd:af:73:b5:ff:32:85:2b:bf:88:90:44:b7:bf:83:
78:03:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:05 2026 by rpki-client