Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: xVGE0Y4yhihgjMVk1ZWdIRZmX3WTH3MvPiZq/qT67Bg=
Subject key identifier: 1A:8C:0C:D2:2A:33:EA:A4:9E:85:B8:D2:23:BA:3C:91:D8:C2:0D:A3
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019CAAC65D7ED15AC50D62D15A1F947AC4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0E72
Signing time: Sun 01 Mar 2026 19:00:52 +0000
Manifest this update: Sun 01 Mar 2026 19:00:52 +0000
Manifest next update: Mon 02 Mar 2026 19:00:52 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: LujIuvZLZIeRKDANk9DvMWxk/8anMPlZ9RSDls+9JbY=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5d:7e:d1:5a:c5:0d:62:d1:5a:1f:94:7a:c4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Mar 1 19:00:52 2026 GMT
Not After : Mar 2 19:00:52 2026 GMT
Subject: CN=1a8c0cd22a33eaa49e85b8d223ba3c91d8c20da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:0c:aa:cf:c1:3a:9f:a5:cc:33:85:8d:52:
37:ec:8d:29:64:3d:2d:7e:de:8a:34:b1:cf:1d:46:
7a:78:d6:31:d2:49:3f:a3:dd:ec:1b:96:91:56:73:
23:f6:ee:53:56:c3:0f:09:7b:86:98:30:b8:14:b6:
6c:cd:a0:66:61:fc:52:0b:dd:af:06:9c:ed:4b:df:
f1:44:d8:38:1d:c8:b4:5a:05:fd:34:08:db:11:00:
bd:ac:41:3f:72:59:7c:d8:19:cb:fe:ba:49:07:6a:
4e:c5:aa:ed:76:5b:a6:f2:bb:76:d1:42:5e:e7:8b:
d9:ae:68:b8:be:4c:4f:91:66:e5:89:e8:89:ef:1b:
dd:63:22:e1:86:7a:42:aa:a4:2d:69:82:79:52:85:
4a:72:8d:f3:58:fd:fb:99:35:69:f7:ac:92:8b:51:
bc:93:ac:69:20:43:61:7e:e8:fa:e7:8e:42:b1:78:
25:a8:cb:3b:4a:04:e9:74:a2:22:b1:ef:f8:f7:cf:
f6:ac:8d:30:3a:45:b5:b8:ec:43:37:a2:e6:61:46:
22:6a:12:cd:73:fb:8f:b5:74:82:1b:d3:74:5c:cc:
af:85:62:b9:18:86:30:24:86:f8:d7:53:a7:0a:1a:
06:be:9a:65:be:48:7d:35:3f:c2:c0:ee:2e:e5:a5:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:0C:D2:2A:33:EA:A4:9E:85:B8:D2:23:BA:3C:91:D8:C2:0D:A3
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:ae:50:0c:60:b8:fd:e1:a0:9d:b9:6a:02:2f:d8:86:19:
42:32:b0:37:03:af:67:3f:ae:ce:72:36:4d:24:b1:14:9d:dd:
1c:28:73:bd:96:84:1a:06:d0:c1:b4:c8:20:2c:56:7c:d8:02:
ee:42:22:5a:80:32:27:6d:6d:19:55:d9:f9:74:2d:35:fa:bd:
6f:16:6f:34:af:fa:69:47:5f:2e:d8:cc:84:51:ed:b9:be:fb:
79:94:4b:91:02:23:d1:8b:97:d8:3b:2b:4a:f6:14:02:e5:50:
23:7f:1a:68:9a:2c:86:4d:2f:83:c6:04:e2:22:13:8c:05:6a:
46:a3:06:9f:58:f2:a8:bb:ab:95:70:1e:02:4c:9a:e9:48:ca:
58:a7:57:99:b1:12:d6:d8:25:4c:69:77:06:ef:86:00:18:9b:
0b:c0:35:54:21:8c:ce:ab:ca:98:d5:46:eb:1d:f7:2a:1a:06:
4a:ef:d1:49:45:de:e0:c6:7b:e3:43:90:04:a5:5d:43:64:b7:
85:52:50:24:7f:9b:98:99:13:e9:36:51:0c:68:b7:69:10:79:
e4:40:c7:4f:c0:fb:26:37:6d:11:39:58:aa:f0:d6:cf:24:c8:
77:3f:e2:41:cd:ab:dc:79:e8:60:30:c8:bc:9a:f6:b5:2c:55:
a6:39:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:52 2026 by rpki-client