Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: k58RLJinYsbIBe0IP6T7E3455xGY1j+CvzokaZzfR0I=
Subject key identifier: BD:B6:6E:B9:7E:6F:F9:AC:87:A0:7F:87:13:DF:D8:28:2C:64:9D:94
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019D26CD3ECFAFAFD5E69879BB0FFBB381BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: 5rWTwj19jTa+3azHjbkWYxb62/+UvgRGwnTRiRvjqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3e:cf:af:af:d5:e6:98:79:bb:0f:fb:b3:81:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=bdb66eb97e6ff9ac87a07f8713dfd8282c649d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:af:34:30:58:24:25:69:d0:80:ef:26:8a:
ae:90:85:b5:4a:1c:85:68:c9:ec:34:0e:d7:d2:5e:
c0:c9:79:ca:c8:84:ff:e1:d5:12:7d:cd:9e:95:0a:
26:34:20:0f:f0:05:86:79:63:9a:11:90:94:45:9a:
13:3e:f6:f9:c0:47:d8:95:69:e5:0f:49:36:3d:ad:
5f:95:30:ba:b7:27:18:a5:f0:89:5b:32:00:54:c6:
b0:17:4c:c5:f1:17:ff:42:c2:02:ae:bf:59:89:6c:
fe:b4:f7:1a:e0:3f:47:a4:8a:0b:ac:7e:25:79:52:
cd:7a:f5:f5:64:84:45:96:02:c8:20:bb:b8:d3:82:
2a:3f:5c:d4:b4:63:56:88:a3:52:2f:4a:42:57:24:
71:81:21:e0:11:e4:7d:5a:b8:6c:ed:3f:82:a4:fb:
23:f9:48:be:03:9d:8c:04:28:a6:57:50:d6:05:a5:
c9:08:a0:13:b6:d7:05:df:08:09:65:ce:e4:e4:81:
fc:f9:a5:dd:a3:36:1b:19:b3:8c:70:94:af:59:b6:
93:d9:3f:b3:ff:e3:b5:2d:8e:cd:90:f8:ca:96:7a:
6e:18:b1:1c:54:ae:3b:17:e1:d9:39:02:40:38:f8:
87:21:08:3f:54:af:08:e2:6b:b9:aa:bc:1a:d0:0b:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:6E:B9:7E:6F:F9:AC:87:A0:7F:87:13:DF:D8:28:2C:64:9D:94
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:b8:bc:93:b1:5e:8f:97:7d:c3:6a:86:1e:77:4b:57:c1:
40:b0:9a:05:d9:0e:ac:82:d0:42:10:95:28:c3:25:3b:ab:c2:
89:ee:db:c5:2f:45:ec:94:a7:c7:0a:7e:76:ea:93:a7:29:c3:
6a:45:85:f0:3d:64:9b:43:b8:7f:38:d7:01:d0:08:25:0c:fe:
86:91:1c:9c:a1:d7:4a:7b:32:24:24:0f:e7:14:cd:0e:db:6a:
af:0b:2a:df:76:53:cb:19:3d:48:06:40:7b:97:bd:a1:d4:03:
2b:20:fb:35:42:94:fb:10:aa:90:77:cd:d0:33:8a:be:6f:a2:
d5:80:15:22:35:9d:bd:2c:c1:70:5e:41:26:c2:fc:a1:9b:69:
09:76:c1:a4:47:e1:b8:97:fd:aa:d1:2c:d6:fb:01:c8:f4:c9:
bf:42:a1:01:ce:93:31:a0:80:29:c3:c5:20:76:fc:43:ef:a0:
93:54:bb:a0:6e:e7:63:cf:2f:17:8f:44:36:54:0f:0a:93:23:
b7:5b:80:4e:20:0d:48:96:a7:c5:97:fe:db:0f:f5:b1:e0:fd:
98:da:3e:b3:ad:e6:a3:44:b6:6a:8a:3b:6b:87:57:e1:cd:3b:
9e:26:bf:3f:2c:96:71:34:c0:ea:aa:24:28:d5:fa:62:b8:d7:
9a:90:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:17 2026 by rpki-client