
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
File: 18670561BFA9D2336DFAA180C44342B046E19ABC.mft (raw, json)
Hash identifier: oRITGNXCVsbk15fNLwvQqJJC+ZuKhCglejc/xo4/E3o=
Subject key identifier: 8A:9F:FF:E5:77:74:19:F9:77:B6:33:D6:75:B8:FC:A7:78:71:86:B5
Authority key identifier: 18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
Certificate issuer: /CN=18670561bfa9d2336dfaa180c44342b046e19abc
Certificate serial: 7FA5D2616BABDCA6672EEF00A210550FF0466DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
Manifest number: 2E
Signing time: Thu 24 Sep 2026 01:56:54 +0000
Manifest this update: Thu 24 Sep 2026 01:51:54 +0000
Manifest next update: Fri 25 Sep 2026 05:35:54 +0000
Files and hashes: 1: AS199746.asa (hash: NoXtq8bJrGUN5hpXsuaHgog5KFegWFt2ayB5yOjjj5A=)
2: AS204464.asa (hash: 2PCJGP/4Ki50381rjrEHlPjppnpXzxcouZLOIhoy8+s=)
3: 18670561BFA9D2336DFAA180C44342B046E19ABC.crl (hash: gYfrehpnMEwpI3b8jJCvIyRelhmotp76BcQ/6VPYl6I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a5:d2:61:6b:ab:dc:a6:67:2e:ef:00:a2:10:55:0f:f0:46:6d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18670561bfa9d2336dfaa180c44342b046e19abc
Validity
Not Before: Sep 24 01:51:54 2026 GMT
Not After : Sep 25 05:35:54 2026 GMT
Subject: CN=8A9FFFE5777419F977B633D675B8FCA7787186B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:66:74:b3:1e:93:c0:ca:49:e5:bb:eb:aa:
89:d3:65:20:4a:ca:5f:40:c3:a3:0f:2a:f0:c8:bf:
d4:2d:98:91:5d:e3:bf:8e:e2:a2:1b:01:c6:4c:db:
bb:bc:f0:93:1a:df:32:47:40:d9:49:eb:c5:de:c5:
ef:fd:c9:2b:1e:a1:3a:59:49:3a:f2:90:6b:7e:5b:
7d:12:90:ad:03:8e:80:a4:b8:66:2a:d8:44:b9:09:
5b:36:e4:d1:5c:c1:e7:0a:c9:ef:6a:16:fa:d1:e0:
7d:64:1a:7a:9c:c7:2a:dc:e8:63:61:87:32:97:23:
8c:ca:00:0f:79:0b:6d:a7:a7:bf:b7:89:f7:07:88:
df:75:92:60:ae:6e:c1:e8:37:13:5f:cb:c6:5b:f3:
d3:35:3a:9d:15:5e:a5:b0:c0:12:22:82:b7:64:91:
e1:fd:27:ac:4d:62:49:3e:39:36:38:90:ab:c2:e5:
9d:c9:b7:22:60:58:39:e2:74:59:9e:cb:29:f3:09:
57:8b:34:fd:f3:4b:e6:15:87:c3:13:8e:8d:1e:f0:
85:a6:b8:1d:c1:40:aa:24:8b:54:ac:e3:c1:ee:51:
6f:be:de:30:68:b2:20:33:07:d1:41:13:b8:9b:89:
7a:07:66:b9:d6:6b:f8:a2:fb:d1:d4:76:a3:d4:b4:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:FF:E5:77:74:19:F9:77:B6:33:D6:75:B8:FC:A7:78:71:86:B5
X509v3 Authority Key Identifier:
keyid:18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:fe:ca:5b:b8:20:15:54:34:a4:de:fd:f0:59:ea:9c:69:
8d:5d:1f:ea:92:53:8f:a1:ab:ca:1a:e3:09:db:f4:da:ed:81:
e5:e4:97:6c:69:f7:5a:af:85:f7:f1:61:d5:c5:a8:6d:a7:f8:
4c:ab:52:48:42:9e:6f:45:9c:64:46:c6:46:c3:63:5d:a8:11:
3c:e0:a0:1e:cd:c9:07:db:0c:f0:8e:40:2b:1a:80:ee:23:f5:
99:d9:55:df:0b:36:4a:09:0b:64:47:0e:5c:72:4b:58:50:af:
34:a7:2e:78:01:14:6e:d9:f5:53:01:c8:b9:7f:99:4b:27:32:
e5:b0:a0:13:6b:8b:01:05:8d:1b:7a:ef:6e:04:19:af:fc:fc:
1c:d5:58:4d:9f:94:21:ef:0d:31:0d:16:7d:eb:c6:f3:e7:fd:
62:e8:03:f7:f8:d2:b2:b4:1c:a5:cd:f4:c5:7f:6a:47:48:0c:
3c:e8:3b:fc:b5:bb:9f:b7:96:90:58:b4:ca:71:e3:5d:56:75:
a1:a5:ad:da:4d:ce:ca:d6:ca:2e:ca:e0:da:79:df:fb:19:17:
b5:f0:64:21:d3:f7:a2:74:53:e7:f1:8b:fd:4a:ac:b9:20:8e:
fb:2c:85:31:96:62:9e:96:d7:a4:90:d0:69:5e:ec:60:c0:f4:
21:ea:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:29 2026 by rpki-client