Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: WXnLf5yFxMxh6HstaEPzZH2IuzMME68mz2cX5JLMHl0=
Subject key identifier: BE:15:DF:B0:D1:1A:CE:52:B2:25:B5:AE:6B:E0:42:27:89:B5:61:8B
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019FA97523E4E13ED462DF9B4ED5AB23CA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0FFF
Signing time: Tue 28 Jul 2026 16:00:54 +0000
Manifest this update: Tue 28 Jul 2026 16:00:54 +0000
Manifest next update: Wed 29 Jul 2026 16:00:54 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: iA9UhrZa13x801Jq1Hwqw0vHv0X33aFUammG+bCekBg=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:23:e4:e1:3e:d4:62:df:9b:4e:d5:ab:23:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Jul 28 16:00:54 2026 GMT
Not After : Jul 29 16:00:54 2026 GMT
Subject: CN=be15dfb0d11ace52b225b5ae6be0422789b5618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:4f:72:f1:2c:1a:d2:14:af:be:b4:ef:83:
e6:6f:4b:20:1f:6d:30:73:c4:8a:93:5d:ce:43:6b:
76:d5:74:80:8e:12:fb:de:30:0c:d0:5e:b2:89:52:
0f:3e:0a:d2:f5:ed:91:9d:70:5b:f2:94:75:28:cb:
b9:bf:6a:90:be:b7:17:3b:59:bd:bf:92:5b:03:97:
b8:5a:fa:32:32:49:2b:1e:64:a5:52:95:be:87:df:
c4:bc:73:d8:a1:2f:43:e8:a4:08:c8:0d:f8:b6:a3:
ed:35:fd:31:f4:a9:a8:a8:2c:b6:b0:63:90:4c:a2:
9f:35:9e:3a:c5:cf:2e:e4:54:8c:3f:b9:24:ff:7a:
34:dd:84:d2:32:ef:70:ff:8d:86:a1:39:9e:9e:f9:
ea:21:d3:79:52:45:bf:92:15:9e:0b:b6:ef:12:9e:
11:c3:7c:90:b7:7c:f9:d3:02:fb:9e:fd:76:57:03:
1a:82:bb:61:b3:b5:17:e3:1b:0d:5a:e6:e8:4b:c6:
ff:2f:77:45:07:28:07:07:9b:ff:e6:f6:e2:58:da:
b4:6b:91:06:7f:c2:61:f0:1f:be:37:a0:af:36:87:
a1:bf:bc:47:c9:78:89:35:96:a0:30:6d:ee:8e:2c:
dd:2b:25:dd:b7:37:e3:b7:1c:a0:ba:e8:c2:a8:71:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:DF:B0:D1:1A:CE:52:B2:25:B5:AE:6B:E0:42:27:89:B5:61:8B
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:ba:e2:80:10:d5:f8:16:e9:b5:1c:05:94:ed:a7:96:c5:
00:c3:75:90:ac:a0:07:86:f6:71:6b:b7:2b:26:99:ac:00:0d:
00:ab:0f:8e:1c:1b:41:87:9d:ec:5a:c3:3b:99:ce:ae:e6:b4:
a4:7c:b3:43:16:02:a7:44:56:38:b5:07:b0:4e:ea:07:b1:82:
5a:4f:19:61:db:ee:32:2d:76:46:1a:56:e7:29:58:87:a0:0c:
01:ff:e1:d6:3a:d1:45:b6:9e:6c:e3:4e:75:60:77:8e:28:d8:
47:82:07:78:45:0b:3a:14:31:2e:a3:3d:2a:c1:c4:a7:86:6f:
6e:c1:2a:54:12:15:e7:38:af:50:11:01:78:69:02:86:24:f0:
7d:38:57:85:11:fd:58:8e:cc:0e:62:72:2c:28:be:12:eb:98:
c0:fe:36:3d:ee:d2:2c:6e:67:30:9a:9e:0f:db:f2:88:be:94:
bc:93:a0:ed:45:5e:8e:28:56:9d:71:46:1e:8d:48:46:cf:12:
24:6b:95:5e:ab:a4:d4:64:46:ec:87:8f:2c:63:35:2b:d6:34:
ca:80:26:fb:3f:29:8b:d8:df:c6:cb:74:de:47:c2:1f:4f:73:
d9:1c:3c:d4:36:82:8b:23:1c:4f:3b:52:57:93:fa:94:78:09:
aa:52:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:35 2026 by rpki-client