
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: NzR8hW0MdXYh4l8ijpih30Yli7VPZpheAykcvp3y8OA=
Subject key identifier: A9:69:BE:5D:F5:F1:0A:70:BA:30:CC:A9:5D:7C:CD:06:0F:8B:1A:9D
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 019F909125A7A3C33828BBFB1F980CCDBA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 10EB
Signing time: Thu 23 Jul 2026 20:00:59 +0000
Manifest this update: Thu 23 Jul 2026 20:00:59 +0000
Manifest next update: Fri 24 Jul 2026 20:00:59 +0000
Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: YxZNVto9Dqu+G5O3LXnVCld2nEC8PuStSR5s1B76l1M=)
3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:25:a7:a3:c3:38:28:bb:fb:1f:98:0c:cd:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Jul 23 20:00:59 2026 GMT
Not After : Jul 24 20:00:59 2026 GMT
Subject: CN=a969be5df5f10a70ba30cca95d7ccd060f8b1a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:46:3f:55:6c:69:ae:10:44:f7:a6:3b:36:
e2:3a:4c:0f:55:c7:7a:b9:7c:5e:56:50:1b:78:fb:
aa:ed:f2:da:50:52:23:4e:26:a3:74:56:f7:1c:8f:
6c:0d:98:8d:84:dc:33:af:a5:75:44:f1:e0:e2:eb:
d3:2e:b6:98:ba:4a:85:c4:0e:bb:e4:04:d3:4d:4e:
f6:15:65:0d:22:1a:df:e5:ed:f1:86:00:11:e1:9d:
d2:2b:b2:76:28:b0:62:30:f9:44:d2:3a:90:9d:59:
c3:ba:5b:74:f3:61:b7:84:36:75:cd:22:2f:7e:d3:
13:4e:71:bd:31:56:a7:18:31:58:af:e3:6b:50:cd:
f4:f2:32:21:ed:67:23:8a:d2:de:24:4c:f5:8c:96:
be:8e:64:e5:2c:b0:b3:f6:97:2f:fd:79:6f:49:90:
f9:6c:03:f7:82:af:84:a6:e8:fe:08:82:ec:09:f3:
73:19:a7:61:74:a4:5c:eb:e5:f2:bf:41:10:d7:21:
f0:73:00:e9:f5:ef:d1:db:ff:37:87:58:8c:5d:c1:
8e:70:c3:4f:d1:78:bc:3c:49:87:f1:33:c5:6a:68:
69:e0:cb:d7:75:42:0f:7a:fe:9e:e3:e3:03:c5:86:
f3:13:3b:6a:dd:68:de:41:ca:05:81:6d:96:a7:4d:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:BE:5D:F5:F1:0A:70:BA:30:CC:A9:5D:7C:CD:06:0F:8B:1A:9D
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e0:f1:1a:14:7b:33:6d:d9:43:4a:6b:de:7c:e4:a2:bb:bd:
4f:7e:5e:c1:0d:ae:f2:a3:6e:2b:76:e7:de:1d:09:8e:60:a2:
eb:7c:e2:4c:ce:c4:e3:7f:2b:47:39:93:eb:a6:29:29:08:a6:
38:a0:53:d6:01:09:91:34:f3:5e:1d:4b:20:e8:76:4a:73:8b:
38:3b:20:89:74:3d:d5:96:d4:0b:16:30:5b:52:08:24:84:ff:
fc:23:a7:ab:e4:60:b9:62:bf:19:18:e3:1f:8f:e0:02:63:cd:
a5:c8:69:cc:43:d3:92:65:15:f5:44:fa:4f:3f:f4:35:ee:0f:
d1:21:16:26:7c:fe:ce:58:07:3b:05:1e:ec:68:d5:7e:4c:ea:
3d:61:d8:a6:15:b9:c1:d6:e3:7a:ef:fd:33:2a:45:94:60:93:
fe:93:c5:9f:ca:30:d6:52:83:97:d5:90:10:78:4a:d3:44:ac:
cd:f1:14:f0:c4:1c:b3:80:c8:ce:a9:db:b6:67:49:57:05:73:
e5:c4:04:f2:f9:32:88:59:f9:7c:a8:50:7f:a8:6b:3a:24:c0:
ae:13:9a:90:ea:29:f9:e6:95:2f:aa:98:30:4d:b6:0c:18:1e:
3c:77:5c:d6:c1:8d:e8:e0:8d:f1:aa:29:ba:09:81:5c:14:45:
b3:b7:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:17 2026 by rpki-client