Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: mypGwD3v7nK4eN+HZr1bCiIDTo/R5wYt5gMztSv8uVk=
Subject key identifier: 11:16:C1:8A:32:A9:3B:0E:02:B4:49:04:0E:5A:CB:D8:2E:94:08:49
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 019D29610FE334DDFC23B868AD0610BA8106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: B8sdVRm08GDLoVLyAgYrHelodtJtexh9kIpCAi3Rnu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0f:e3:34:dd:fc:23:b8:68:ad:06:10:ba:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=1116c18a32a93b0e02b449040e5acbd82e940849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:2e:bc:4b:f4:74:b5:f8:56:2b:10:69:51:
ec:e7:dd:aa:3e:db:8f:2b:69:1a:09:08:c4:16:4f:
1a:af:09:c1:5d:91:34:2e:f0:96:af:24:51:b1:f7:
5d:36:20:fb:a0:b9:46:03:02:30:e1:d8:0e:97:40:
45:02:d9:f6:bf:e1:8a:3f:da:87:d1:af:c9:76:d2:
2d:ca:b4:86:e0:a6:7b:e3:cc:90:24:ba:40:1a:b6:
23:e8:b7:1c:19:16:90:c1:ac:2a:47:5c:9c:da:d2:
a9:c9:48:39:9e:76:6f:65:1e:48:a2:31:c8:41:82:
a7:41:cb:0a:9b:6f:34:77:41:2b:be:d7:48:d5:81:
11:e3:8a:ea:42:e7:46:54:fe:8d:7f:2a:d9:0d:d9:
10:c4:c0:04:0d:eb:e6:41:73:a1:ea:d2:29:94:e1:
04:32:97:e6:c3:3b:a2:c3:60:1c:99:8d:98:ec:0b:
bc:68:56:99:05:69:19:8a:2b:3c:91:9e:88:24:69:
57:c9:1c:42:b6:71:ab:b8:dd:d1:7f:58:12:e5:85:
fb:9d:8a:8c:18:c7:19:e9:bc:ba:8e:73:ad:5c:f2:
32:55:8c:ab:75:62:f0:44:48:b0:e6:09:d9:d0:a4:
d8:1c:b5:cd:d2:b7:38:83:f3:7e:d7:f4:2e:d8:3a:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:C1:8A:32:A9:3B:0E:02:B4:49:04:0E:5A:CB:D8:2E:94:08:49
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c9:38:68:59:49:34:22:db:f4:37:0f:30:42:c1:39:ff:11:
76:f6:31:b7:c8:9e:52:bc:53:b5:ae:6f:e2:c9:17:be:1b:43:
91:08:6b:06:22:27:2f:c7:2e:6e:dd:3b:02:5b:98:05:ca:04:
67:20:6b:3b:6a:a9:8a:fe:c5:b1:f4:d1:96:d5:2f:fe:4b:b5:
92:55:49:a8:af:dd:de:a7:2c:3e:7e:a0:34:6c:53:dc:25:02:
62:7f:04:2e:f1:5c:92:51:10:f1:28:e6:6d:eb:f9:5b:02:9c:
f0:8f:10:e3:f2:5f:06:d2:47:ef:05:e2:8c:a0:04:13:70:9f:
4c:42:36:6c:7d:9d:21:34:6b:b7:aa:aa:78:84:69:00:e4:14:
5b:b9:6d:0b:29:ea:50:54:18:46:dc:15:b9:0f:0d:58:1c:bc:
c6:5c:31:af:5b:83:dd:62:21:de:f6:ae:b6:dd:49:d9:70:ef:
77:df:29:31:1e:15:f4:13:24:b3:ce:02:57:6d:70:b3:3b:90:
37:81:b0:0e:4b:25:3e:e1:dd:97:c0:cc:68:73:e7:a5:b2:95:
64:6f:f7:96:b8:13:1b:bf:9a:5c:ab:2d:2c:8f:4a:9c:bf:36:
31:61:cb:cb:f7:81:d0:aa:1c:61:58:6e:22:83:8a:8b:d2:86:
d4:dc:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:26 2026 by rpki-client