Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: vLyvuSmwIHBwfGwCYZfjqYJ0EdngJLNycfGAVTZVlkU=
Subject key identifier: 64:E2:C2:1A:0A:A1:6F:7D:2F:33:A0:D6:F7:71:2E:14:A4:8A:9F:71
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 01A1DE70C6A3FA16435FAC346C21FB421DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1AF4
Signing time: Sun 15 Nov 2026 09:01:35 +0000
Manifest this update: Sun 15 Nov 2026 09:01:35 +0000
Manifest next update: Mon 16 Nov 2026 09:01:35 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: waBWg318KmDD+PTpnA0CpeYhqW6BXWjZoN4137F7xTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:c6:a3:fa:16:43:5f:ac:34:6c:21:fb:42:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Nov 15 09:01:35 2026 GMT
Not After : Nov 16 09:01:35 2026 GMT
Subject: CN=64e2c21a0aa16f7d2f33a0d6f7712e14a48a9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:4b:9e:5a:e2:5c:62:04:6b:7b:ad:58:7d:
24:df:3d:11:c9:e0:31:e0:72:c1:b7:45:79:d4:72:
07:41:90:47:d9:6f:e1:98:a7:fd:dd:ec:1c:a9:17:
af:f3:f6:12:f1:cb:4b:22:b2:25:af:30:de:0f:79:
39:74:d3:a4:f0:b2:62:60:da:6e:01:a3:8b:7c:2b:
fa:6e:3e:ac:8e:c8:e9:64:cd:bf:90:c2:72:09:f9:
54:01:de:22:35:af:6a:20:b6:e3:01:57:7c:0b:9d:
eb:1d:c6:b4:92:ac:6a:b8:71:8e:d0:2b:a9:fc:0f:
68:27:cc:09:5b:00:36:f4:29:0a:4c:69:14:63:80:
ee:78:60:76:74:59:22:a9:46:9f:87:9b:be:e0:97:
23:9f:0c:b8:94:e1:44:9b:b9:a5:34:7a:92:da:95:
9d:13:f7:f4:3a:59:95:5a:38:1b:de:74:2b:e9:68:
01:ac:1c:39:b8:ac:44:5a:87:91:8e:35:c0:73:d9:
ab:c7:a1:14:24:cc:6b:15:1f:a2:c0:1b:dd:d7:f2:
97:a9:06:58:2f:b3:6b:b3:52:9e:50:5e:e8:2f:bc:
c0:a9:da:32:9c:15:39:81:5d:9f:b6:41:22:44:ff:
a0:10:25:35:13:6a:59:5b:fb:3f:f8:02:25:08:78:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:C2:1A:0A:A1:6F:7D:2F:33:A0:D6:F7:71:2E:14:A4:8A:9F:71
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:85:c4:d0:40:c4:c6:53:45:c1:98:36:b3:51:0b:7d:31:
c2:22:a8:44:09:c6:2d:cd:b7:09:e3:9c:91:52:a3:b9:ea:97:
e2:e8:41:0d:50:b2:f0:59:5c:ac:83:4f:b1:4b:4c:a1:c8:4b:
f4:de:98:db:ff:5c:e4:89:92:0c:92:13:02:5c:d2:89:00:1c:
30:87:3a:41:9e:54:f5:c6:47:94:af:a1:8e:af:25:8f:f5:b5:
50:c2:19:36:a7:ad:b4:2a:fb:7f:87:d5:38:69:9d:26:19:6b:
bf:37:73:22:40:e7:c7:9d:7a:e6:97:e7:dc:38:d2:d0:02:43:
77:1f:ec:c1:af:cb:ed:1f:b9:07:0c:01:f9:6c:74:a7:4f:9b:
03:96:31:f7:67:20:56:8a:dc:6b:9b:70:67:61:65:9d:a8:13:
af:54:e6:70:30:f8:7f:4a:c3:64:fc:1b:d7:58:02:20:83:b6:
69:71:98:ae:57:12:7f:58:f0:73:11:e0:5d:72:b6:d6:75:a2:
29:a2:c2:e9:ee:e5:2a:ad:76:d9:42:b2:59:5a:d5:f9:7b:64:
f5:6e:a1:90:52:f9:ba:21:f3:63:82:cd:99:fc:60:06:04:2e:
f2:49:16:7b:31:ad:18:39:ad:6f:80:f4:78:3e:94:d3:de:a9:
2f:fd:b0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecMaj+hZDX6w0bCH7Qh37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I4ZjgxYjhkMzg4MmQ3ZGIxNzNhNTQ5MDA5NjYxMTU3
NDhjYmYwHhcNMjYxMTE1MDkwMTM1WhcNMjYxMTE2MDkwMTM1WjAzMTEwLwYDVQQD
Eyg2NGUyYzIxYTBhYTE2ZjdkMmYzM2EwZDZmNzcxMmUxNGE0OGE5ZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo5LnlriXGIEa3utWH0k3z0RyeAx
4HLBt0V51HIHQZBH2W/hmKf93ewcqRev8/YS8ctLIrIlrzDeD3k5dNOk8LJiYNpu
AaOLfCv6bj6sjsjpZM2/kMJyCflUAd4iNa9qILbjAVd8C53rHca0kqxquHGO0Cup
/A9oJ8wJWwA29CkKTGkUY4DueGB2dFkiqUafh5u+4Jcjnwy4lOFEm7mlNHqS2pWd
E/f0OlmVWjgb3nQr6WgBrBw5uKxEWoeRjjXAc9mrx6EUJMxrFR+iwBvd1/KXqQZY
L7Nrs1KeUF7oL7zAqdoynBU5gV2ftkEiRP+gECU1E2pZW/s/+AIlCHhLsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTiwhoKoW99LzOg1vdxLhSkip9xMB8GA1UdIwQY
MBaAFNfLj4G404gtfbFzpUkAlmEVdIy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGIt
MmU4NzFjNTk3Zjk3LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGItMmU4NzFjNTk3Zjk3
LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivOFxNBA
xMZTRcGYNrNRC30xwiKoRAnGLc23CeOckVKjueqX4uhBDVCy8FlcrINPsUtMochL
9N6Y2/9c5ImSDJITAlzSiQAcMIc6QZ5U9cZHlK+hjq8lj/W1UMIZNqettCr7f4fV
OGmdJhlrvzdzIkDnx5165pfn3DjS0AJDdx/swa/L7R+5BwwB+Wx0p0+bA5Yx92cg
Vorca5twZ2FlnagTr1TmcDD4f0rDZPwb11gCIIO2aXGYrlcSf1jwcxHgXXK21nWi
KaLC6e7lKq122UKyWVrV+Xtk9W6hkFL5uiHzY4LNmfxgBgQu8kkWezGtGDmtb4D0
eD6U096pL/2w8w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:40:38 2026 by rpki-client