Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: ZdQ/U2HEs/Kw0kaOkDBdYtEVlJoBa+4fsaVdCjxXnQM=
Subject key identifier: 3C:88:F9:A7:CB:A7:1B:ED:FF:58:A9:9C:FF:97:D3:E2:02:D5:9F:36
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 01A0CC358B00DDB71839F68DC540537BC700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1A66
Signing time: Wed 23 Sep 2026 03:00:56 +0000
Manifest this update: Wed 23 Sep 2026 03:00:56 +0000
Manifest next update: Thu 24 Sep 2026 03:00:56 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: CMdSg4tIznC8e7HqAqG/nMFITImjtNkS2/MvRnplHcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:8b:00:dd:b7:18:39:f6:8d:c5:40:53:7b:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Sep 23 03:00:56 2026 GMT
Not After : Sep 24 03:00:56 2026 GMT
Subject: CN=3c88f9a7cba71bedff58a99cff97d3e202d59f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:c8:5e:09:9e:04:ca:4d:69:e3:f2:b9:ea:
db:cc:6d:23:18:bb:e6:cb:75:b5:bf:c8:28:6f:24:
98:cd:5f:36:97:5b:ab:15:b3:80:97:31:6d:3a:e3:
be:31:f1:4d:3c:1d:1c:25:e6:dd:2a:76:ec:7e:05:
fb:70:19:e7:12:59:c9:31:e8:64:d0:f5:23:13:33:
8c:15:88:55:87:82:38:d4:7c:29:e7:e1:c5:77:f8:
1a:0e:87:ce:56:ac:cc:b6:df:eb:4b:73:1e:cb:cb:
37:74:0b:eb:86:1a:0e:31:e9:b4:d7:54:a8:b6:c9:
ab:e4:b5:e2:e3:3b:56:88:57:1b:45:2b:57:0f:32:
9e:ac:70:34:6e:dd:f4:07:bb:36:82:93:18:5c:21:
df:fa:c9:ec:0b:3e:02:5c:bd:b8:2f:58:e0:20:eb:
73:9f:0b:04:62:ee:6e:c6:85:fa:43:c9:5c:b2:af:
06:69:c9:55:35:f6:6d:4b:f3:33:ed:10:91:11:61:
08:7f:35:e9:39:9b:7b:37:ac:14:bc:ae:d3:81:1b:
af:7c:25:81:6d:fd:fd:40:89:43:9e:e7:2c:cf:ea:
cc:88:63:1d:9b:aa:e7:ad:c7:40:0a:bb:67:5a:f4:
3f:3c:37:21:8e:1f:28:94:a2:25:60:78:ef:99:11:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:F9:A7:CB:A7:1B:ED:FF:58:A9:9C:FF:97:D3:E2:02:D5:9F:36
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:69:6d:ec:b1:f7:88:d8:26:86:63:93:7b:86:45:61:c4:cc:
66:25:4d:43:b2:3d:32:d7:5e:93:ba:fb:56:15:26:e7:70:de:
c8:4c:b3:81:3f:1b:b2:a0:70:60:ed:e4:f8:12:91:22:5f:26:
3f:01:07:02:b1:06:f1:18:49:d7:dc:a4:a0:3c:5c:14:22:66:
00:84:00:58:b5:ca:74:4f:20:90:66:52:68:ab:bc:ed:42:7a:
59:56:66:ea:da:ea:c5:d0:ca:42:0e:4c:4a:1c:1e:b9:39:9c:
e0:7b:a6:a6:f4:0c:09:c9:44:5b:09:d0:2b:01:3b:2f:0a:ee:
30:17:52:3b:1a:5f:bd:89:ef:14:13:e5:e3:6d:9b:5c:b0:a8:
e5:1f:47:78:cc:31:94:de:95:30:60:c8:74:6d:59:69:ba:92:
9b:24:1f:50:14:cc:54:26:5f:3a:93:fb:70:6a:5f:8f:f6:f6:
fa:dc:b2:88:a8:c8:c0:97:71:3d:5f:80:36:95:2c:b6:3b:32:
33:32:b0:2b:16:0f:13:a8:18:24:67:97:f9:5d:b1:f6:ab:20:
47:03:a8:84:eb:88:54:21:29:92:1c:a3:c9:eb:ad:48:ae:1b:
74:0b:f9:f5:64:ea:fc:07:91:15:c9:30:43:e0:5f:a9:02:c6:
3f:16:c6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNYsA3bcYOfaNxUBTe8cAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I4ZjgxYjhkMzg4MmQ3ZGIxNzNhNTQ5MDA5NjYxMTU3
NDhjYmYwHhcNMjYwOTIzMDMwMDU2WhcNMjYwOTI0MDMwMDU2WjAzMTEwLwYDVQQD
EygzYzg4ZjlhN2NiYTcxYmVkZmY1OGE5OWNmZjk3ZDNlMjAyZDU5ZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/bIXgmeBMpNaePyuerbzG0jGLvm
y3W1v8gobySYzV82l1urFbOAlzFtOuO+MfFNPB0cJebdKnbsfgX7cBnnElnJMehk
0PUjEzOMFYhVh4I41Hwp5+HFd/gaDofOVqzMtt/rS3Mey8s3dAvrhhoOMem011So
tsmr5LXi4ztWiFcbRStXDzKerHA0bt30B7s2gpMYXCHf+snsCz4CXL24L1jgIOtz
nwsEYu5uxoX6Q8lcsq8GaclVNfZtS/Mz7RCREWEIfzXpOZt7N6wUvK7TgRuvfCWB
bf39QIlDnucsz+rMiGMdm6rnrcdACrtnWvQ/PDchjh8olKIlYHjvmRHy5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyI+afLpxvt/1ipnP+X0+IC1Z82MB8GA1UdIwQY
MBaAFNfLj4G404gtfbFzpUkAlmEVdIy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGIt
MmU4NzFjNTk3Zjk3LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGItMmU4NzFjNTk3Zjk3
LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWlt7LH3
iNgmhmOTe4ZFYcTMZiVNQ7I9Mtdek7r7VhUm53DeyEyzgT8bsqBwYO3k+BKRIl8m
PwEHArEG8RhJ19ykoDxcFCJmAIQAWLXKdE8gkGZSaKu87UJ6WVZm6trqxdDKQg5M
ShweuTmc4HumpvQMCclEWwnQKwE7LwruMBdSOxpfvYnvFBPl422bXLCo5R9HeMwx
lN6VMGDIdG1ZabqSmyQfUBTMVCZfOpP7cGpfj/b2+tyyiKjIwJdxPV+ANpUstjsy
MzKwKxYPE6gYJGeX+V2x9qsgRwOohOuIVCEpkhyjyeutSK4bdAv59WTq/AeRFckw
Q+BfqQLGPxbGPw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:40 2026 by rpki-client