Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: B1UF4IHyRTQkpWHq1nVUA8h742pzgmInIIKzJyUGwto=
Subject key identifier: 52:D2:0B:96:3E:03:91:7E:4B:7B:2A:F0:81:FA:9C:77:C2:2E:35:4F
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 019D2884B8D61628891D64FB3EBD02DD0BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0FAC
Signing time: Thu 26 Mar 2026 05:01:19 +0000
Manifest this update: Thu 26 Mar 2026 05:01:19 +0000
Manifest next update: Fri 27 Mar 2026 05:01:19 +0000
Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: kI80iALTjIVUpWqn3UM8i+vssOsDnnFuqgtnDpxf5KU=)
3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b8:d6:16:28:89:1d:64:fb:3e:bd:02:dd:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Mar 26 05:01:19 2026 GMT
Not After : Mar 27 05:01:19 2026 GMT
Subject: CN=52d20b963e03917e4b7b2af081fa9c77c22e354f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:de:a0:9d:e9:12:f8:49:e5:2c:d7:3d:e3:
47:1a:7c:14:2d:1c:ce:c2:35:3e:6d:d2:8f:86:8b:
5c:04:22:3f:b5:25:ae:54:ca:12:ef:7f:dc:6e:59:
5e:78:5a:ac:90:7d:1a:17:75:ec:3e:0a:07:bf:70:
42:54:44:bf:f8:28:4d:78:88:8a:de:03:3a:32:87:
27:62:63:c8:d3:a7:e3:54:89:f4:77:09:5e:5e:a7:
f7:c9:36:ba:dc:ff:23:8c:df:d8:cc:1e:46:35:19:
50:a1:85:55:76:05:2d:50:eb:76:60:9d:bc:55:4f:
ed:30:c1:54:45:08:f1:66:87:0c:70:6d:50:61:53:
a5:5d:89:80:64:c8:8a:44:c9:e7:de:af:41:d5:06:
d9:e2:f7:40:09:b4:7e:f5:86:2c:e2:de:78:8b:d5:
98:1c:02:99:db:7e:9c:98:dc:15:bc:bc:e3:fc:e2:
cf:6f:ec:df:63:f0:cd:a4:1c:08:e5:30:e2:9a:db:
2f:af:3b:ae:c3:dc:da:42:69:89:6d:87:b5:f8:93:
0b:63:e6:4d:87:2f:34:b1:c8:6d:7d:a2:35:ec:f4:
af:5c:5b:39:b0:4e:e0:26:55:6f:53:d6:61:2c:f1:
44:e1:c6:b4:0a:47:b5:ae:90:a3:b6:0b:04:f8:ca:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:0B:96:3E:03:91:7E:4B:7B:2A:F0:81:FA:9C:77:C2:2E:35:4F
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:78:1b:48:d2:cb:36:c1:60:3a:4e:d3:bb:ea:53:02:c8:30:
92:4a:e5:15:fe:6e:e4:21:f8:b5:37:e0:f7:91:c8:e6:99:af:
77:8b:07:be:8d:b3:8b:ca:e9:b9:14:0e:bf:20:8b:f6:1a:4d:
1d:16:4c:f8:cd:d9:22:e1:87:36:96:10:e9:22:04:cf:0c:b7:
6c:78:1f:9b:48:82:9e:8a:ce:0a:bd:8f:14:15:23:c6:30:83:
4c:78:5a:51:26:35:c4:0c:e2:1b:9c:7c:90:90:00:46:ca:f8:
11:d6:35:3a:f5:f3:d7:e0:16:99:1c:21:53:ca:70:cb:66:91:
25:f8:a0:14:2e:11:e9:7e:16:d8:ae:d9:55:99:13:1d:b5:db:
3c:bd:e5:30:1f:b6:95:b3:a1:11:f7:55:b4:a8:dd:33:14:08:
b7:0b:db:a9:b4:50:64:54:97:a5:b6:21:eb:74:ef:dc:8d:08:
58:28:93:e0:e7:7c:70:8b:67:fc:c7:19:54:5b:d3:ad:03:87:
73:94:6b:50:5c:6b:9a:d8:d7:19:47:3b:c5:77:9d:e6:be:f0:
35:69:be:52:8c:1b:c7:d1:25:31:de:e5:3e:bf:53:06:4f:ac:
2c:37:df:f3:a6:17:71:d1:06:1a:89:e2:4a:a6:eb:72:aa:c1:
cf:42:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:20 2026 by rpki-client