Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: FojCd07ehlb4hoYZPmjuW5bgvTqyZo2g0O1r9Qm3swE=
Subject key identifier: 64:11:6F:83:77:E0:8D:57:4A:31:8B:7A:87:4C:02:49:00:FC:3F:3F
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 019E1EA3C93A2434EAD37ABAFDFB2138B38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 00:01:50 +0000
Manifest this update: Wed 13 May 2026 00:01:50 +0000
Manifest next update: Thu 14 May 2026 00:01:50 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: lu0s+a+iD/kqeNXAr5ORh4tT8/VOUFjdWhfF+naok1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c9:3a:24:34:ea:d3:7a:ba:fd:fb:21:38:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: May 13 00:01:50 2026 GMT
Not After : May 14 00:01:50 2026 GMT
Subject: CN=64116f8377e08d574a318b7a874c024900fc3f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:47:68:1c:74:9a:9b:ce:70:f3:a0:fc:26:
d7:20:40:79:31:c9:20:01:90:cf:6e:56:0b:0c:e2:
69:ee:9d:7a:70:c9:a1:7c:aa:99:a4:f7:2e:ea:6b:
b5:85:1c:e4:f4:47:96:51:19:e5:8c:d6:ac:3b:96:
32:5b:76:9c:e9:f9:0d:8d:94:ba:c1:95:d0:b4:ca:
70:7f:87:c9:12:6d:09:ae:db:e3:5e:a9:b4:4e:e9:
0d:aa:66:1b:5e:83:05:06:3b:58:e0:bd:0f:37:08:
0b:0e:1e:1b:6a:9c:88:eb:81:43:fa:46:5f:ee:01:
2b:bf:cb:06:e7:98:e9:8b:81:da:52:3e:1a:03:f0:
9e:bf:bc:1b:86:c0:80:dc:68:bb:88:f9:a8:b4:c8:
f9:54:ff:1a:ef:e2:65:a3:17:1d:00:4a:f6:85:14:
40:fd:48:0e:1d:20:a3:73:4e:99:9e:ef:4a:a0:56:
9d:d2:6a:fb:ae:f9:b4:83:7f:50:c0:40:be:9a:a1:
f6:c4:9d:bb:aa:68:6a:92:8e:f9:19:2a:16:c2:07:
3a:2d:ab:da:09:82:95:c5:9a:62:d2:aa:5c:23:31:
ec:79:dd:0b:b8:87:68:7e:b6:64:83:df:b6:85:d1:
74:c5:8f:e3:1c:4b:88:26:0b:db:d8:2b:16:b8:65:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:11:6F:83:77:E0:8D:57:4A:31:8B:7A:87:4C:02:49:00:FC:3F:3F
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c9:2b:0d:6d:6e:fc:19:ae:78:a9:f3:42:eb:9a:bf:58:58:
f3:f1:12:67:71:ad:7f:cc:f1:c3:a9:96:d1:0a:6f:2e:60:88:
51:71:72:e8:59:57:a1:32:b1:63:af:0c:9b:cb:cf:cb:e6:1e:
7a:dd:12:06:d1:8c:71:ce:a3:14:4a:9e:bc:ba:03:18:87:7c:
7f:6d:0e:a9:3f:fa:3c:91:dd:c8:f6:c4:58:a9:a9:21:a5:3f:
cd:c9:4f:6f:7f:3b:2c:d3:5f:11:f7:8a:ac:0d:12:c4:1c:79:
30:ab:8c:eb:78:79:23:2e:c4:e6:a5:13:db:c6:b6:6f:06:43:
3f:8c:bc:fa:9d:45:6d:b9:12:03:5b:17:12:4f:88:01:3a:57:
25:1e:7b:d8:f5:7b:7b:73:89:19:89:90:a3:e4:c3:01:73:58:
79:4e:3f:c7:4a:67:82:32:2b:de:5d:51:66:5c:70:2f:e1:75:
a6:41:17:40:7c:dd:54:77:66:99:e4:c3:89:ef:08:1a:6e:d6:
07:ef:2c:ae:13:86:6d:a9:51:3d:66:de:bc:4d:7b:10:2f:d5:
52:56:cb:b3:bc:d2:10:45:b0:04:f7:f8:01:5d:a2:3a:5c:39:
e1:7c:20:e4:75:09:60:0e:c3:6a:59:8f:50:f6:52:55:17:4f:
9b:a3:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:33 2026 by rpki-client