Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: ImVMD/Wx8+fJTD5lYxrFcjj4Hg0Qp7J2mC8K/quVKZs=
Subject key identifier: 2D:B0:08:7D:FF:7B:9C:21:6E:1A:5F:7A:15:7F:D7:53:F9:28:9F:7F
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 01A0F18B782BB8C3C3C3BEB67D53DD945B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 11A2
Signing time: Wed 30 Sep 2026 09:00:44 +0000
Manifest this update: Wed 30 Sep 2026 09:00:44 +0000
Manifest next update: Thu 01 Oct 2026 09:00:44 +0000
Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: e+mFnHTj8mroDe+MFhIsJ9Xi5wQgqNtuOxKleGH9vbc=)
3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
4: tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa (hash: /3YflutobnpMb4cvv5YYiqUDPoXca6VxOl9t+YmVV6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:78:2b:b8:c3:c3:c3:be:b6:7d:53:dd:94:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Sep 30 09:00:44 2026 GMT
Not After : Oct 1 09:00:44 2026 GMT
Subject: CN=2db0087dff7b9c216e1a5f7a157fd753f9289f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:79:54:98:f1:2e:42:ea:b0:8b:dc:01:da:
e1:76:93:a0:90:44:e1:0a:c7:0f:17:5c:f4:66:9d:
45:1b:af:f1:ea:ff:42:63:79:15:ec:07:7b:77:59:
25:8b:84:ac:48:cf:c4:c3:1e:e5:9d:33:15:d9:2b:
7c:b8:88:16:44:5d:37:38:45:41:1a:39:75:e7:21:
7d:d9:c4:64:45:c7:eb:91:c5:95:40:4a:71:bf:a8:
52:77:6e:b8:d9:d4:01:14:6a:52:ee:cd:2a:c2:99:
fc:0e:78:f4:f8:78:ca:5b:e6:c6:b8:4a:e3:ef:07:
88:6b:e4:2a:5e:27:b3:33:e4:db:0c:aa:7d:5f:ee:
8d:0e:0f:d0:c5:36:56:73:bd:b2:02:be:36:6e:81:
ca:3d:45:12:55:00:0a:6f:c9:92:98:2a:fe:f4:69:
21:e5:64:5e:ac:37:c2:10:65:eb:fe:58:2e:e5:ac:
bf:a3:8d:0c:17:4d:df:66:c3:0d:b7:04:19:26:68:
e5:63:62:0c:32:e9:ed:06:e2:9a:4a:bc:15:56:d4:
72:22:0c:0f:46:92:d3:d7:78:b1:7c:a0:31:c4:d5:
00:2a:8f:62:4f:30:bc:1f:78:2f:fd:8e:12:7d:f8:
0f:c1:1e:89:c8:c6:8a:06:3e:f1:5d:44:7a:44:e9:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:08:7D:FF:7B:9C:21:6E:1A:5F:7A:15:7F:D7:53:F9:28:9F:7F
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:30:92:e7:2d:4c:a2:90:50:e4:9b:d0:e3:db:c9:72:dc:5f:
58:f9:09:2c:80:46:88:90:c6:16:fc:3e:bf:49:7d:ad:f5:0c:
3a:48:62:a6:23:33:dc:df:2e:eb:f7:21:f3:77:8e:77:f8:c7:
d4:5e:28:b5:e2:89:7b:47:d4:88:7b:eb:dc:f9:14:18:31:64:
28:50:06:d9:9f:31:70:18:95:98:8e:65:85:a4:bd:a4:4b:fe:
f1:2a:0b:52:65:9c:d5:dc:17:cd:24:59:76:69:e8:e3:4a:4e:
e8:a2:30:ef:73:44:48:8b:23:63:80:85:1b:35:09:07:7f:4f:
b5:bb:65:be:b2:64:8a:31:c1:9b:d0:10:72:57:70:69:5c:36:
b4:11:1b:59:41:36:9a:ac:e0:be:f5:46:d3:80:8f:b8:53:3b:
60:19:65:4c:c4:47:d5:2c:d8:d7:2a:19:dc:c4:06:76:0e:65:
a0:86:bb:7c:60:80:77:65:69:a4:89:59:28:a2:69:0a:a0:fa:
73:35:aa:07:e6:dd:71:73:08:21:a3:a7:8e:91:5d:e5:54:e1:
f0:ca:71:6e:4a:05:8d:c3:6b:c8:67:de:07:2d:b1:4a:36:0c:
18:bf:e7:23:75:64:a1:68:f2:9d:16:0b:37:c3:89:87:c1:7c:
86:6a:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:18:18 2026 by rpki-client