Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: f7Ryp8mFyoxfvAEyXEvS81HUeEsIt+TaEVQJ4HsBWLA=
Subject key identifier: 7A:6D:18:D9:56:2E:2D:87:9B:22:E5:08:75:E9:37:32:82:22:DF:AB
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019DA41CCD655A368514AECA471C6FE49B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 05:00:44 +0000
Manifest this update: Sun 19 Apr 2026 05:00:44 +0000
Manifest next update: Mon 20 Apr 2026 05:00:44 +0000
Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: QKSmsZ+GxOdNHWj7wkUw8rB4t958R1sB0sDe/0LlkQE=)
2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:cd:65:5a:36:85:14:ae:ca:47:1c:6f:e4:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Apr 19 05:00:44 2026 GMT
Not After : Apr 20 05:00:44 2026 GMT
Subject: CN=7a6d18d9562e2d879b22e50875e937328222dfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:8c:7f:94:a5:73:ff:82:53:04:cf:e8:95:
84:e7:d4:7f:b5:56:f2:61:d1:e8:7e:12:9b:de:6d:
3d:79:6d:e7:45:09:18:26:65:86:7d:8b:fd:2e:db:
b2:88:1b:3f:30:2b:8b:73:64:dc:28:9d:02:46:57:
5a:9c:f9:03:fd:52:79:73:97:74:22:3a:0e:ce:1a:
24:c8:16:99:1d:03:17:e3:29:48:c7:1b:a9:9b:26:
80:ca:73:fc:f2:2e:08:8f:c3:b9:a3:3a:91:30:4a:
96:dd:6c:cd:e7:95:f6:28:20:ca:df:17:ff:99:df:
5d:1a:8e:6c:44:57:38:2e:48:c3:d9:5e:2a:1f:98:
dd:cb:ea:b3:3b:35:18:69:66:bf:f7:b9:06:5e:8b:
73:85:6e:ab:4b:79:aa:ee:0e:fc:5d:0b:62:0d:a2:
e4:3f:43:e6:6e:7a:2b:2c:49:e8:49:6c:05:99:37:
14:66:4c:58:5d:ec:90:3a:a9:a9:eb:94:12:c5:59:
83:5f:62:b6:ce:67:4b:3d:46:9e:24:3a:22:e6:a8:
99:ac:34:55:38:1c:41:f8:eb:74:50:d7:59:00:bc:
61:93:b8:85:60:75:0c:82:13:7c:a4:5b:ca:3f:cd:
68:ab:86:33:7e:3f:3a:20:1d:7b:f3:96:d5:fd:36:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:18:D9:56:2E:2D:87:9B:22:E5:08:75:E9:37:32:82:22:DF:AB
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:66:08:2b:4b:cf:23:6a:60:a6:6a:c3:34:3e:70:a8:96:35:
2f:a4:74:c1:47:eb:ea:8c:39:2c:76:a4:7e:31:68:05:c8:49:
be:82:ab:fb:ad:03:09:5f:d3:99:5e:e6:5a:cf:e1:42:98:30:
ea:11:4d:ab:a5:c8:c3:a6:91:8c:27:67:41:76:4a:df:5f:b1:
29:ef:76:e3:b9:02:26:72:e7:2c:60:6a:10:52:a2:56:e6:08:
5d:96:20:e2:ee:ea:3b:1c:28:76:64:c1:d1:0b:20:e4:3c:37:
02:9b:b5:fd:c1:42:e2:93:72:71:3f:af:3a:d0:79:63:fd:dc:
5f:95:b5:39:3d:23:f2:69:a9:28:fc:53:76:ba:4b:a3:61:61:
18:d7:66:9a:ed:af:45:fd:5b:21:74:e4:9f:c2:94:4e:77:7e:
0b:d1:2c:ff:d7:cc:0f:ff:e0:6d:20:7a:4d:9c:bc:44:35:7e:
bb:2a:31:f3:90:4e:4a:ba:e2:be:da:03:a4:3c:81:b7:b0:f3:
91:3c:9e:3f:fb:1d:f8:b0:cc:27:35:89:18:6c:9d:ff:a5:42:
50:2f:73:bd:fe:5a:37:51:13:76:5a:44:5f:aa:77:78:db:9d:
ea:a3:1c:d2:8d:0d:1b:00:34:c1:d7:64:71:b4:34:5d:61:4b:
44:80:7f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHM1lWjaFFK7KRxxv5Jt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1
OTcxYjUwHhcNMjYwNDE5MDUwMDQ0WhcNMjYwNDIwMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg3YTZkMThkOTU2MmUyZDg3OWIyMmU1MDg3NWU5MzczMjgyMjJkZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst6Mf5Slc/+CUwTP6JWE59R/tVby
YdHofhKb3m09eW3nRQkYJmWGfYv9LtuyiBs/MCuLc2TcKJ0CRldanPkD/VJ5c5d0
IjoOzhokyBaZHQMX4ylIxxupmyaAynP88i4Ij8O5ozqRMEqW3WzN55X2KCDK3xf/
md9dGo5sRFc4LkjD2V4qH5jdy+qzOzUYaWa/97kGXotzhW6rS3mq7g78XQtiDaLk
P0PmbnorLEnoSWwFmTcUZkxYXeyQOqmp65QSxVmDX2K2zmdLPUaeJDoi5qiZrDRV
OBxB+Ot0UNdZALxhk7iFYHUMghN8pFvKP81oq4Yzfj86IB1785bV/TayXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHptGNlWLi2HmyLlCHXpNzKCIt+rMB8GA1UdIwQY
MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt
MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy
LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2YIK0vP
I2pgpmrDND5wqJY1L6R0wUfr6ow5LHakfjFoBchJvoKr+60DCV/TmV7mWs/hQpgw
6hFNq6XIw6aRjCdnQXZK31+xKe9247kCJnLnLGBqEFKiVuYIXZYg4u7qOxwodmTB
0Qsg5Dw3Apu1/cFC4pNycT+vOtB5Y/3cX5W1OT0j8mmpKPxTdrpLo2FhGNdmmu2v
Rf1bIXTkn8KUTnd+C9Es/9fMD//gbSB6TZy8RDV+uyox85BOSrrivtoDpDyBt7Dz
kTyeP/sd+LDMJzWJGGyd/6VCUC9zvf5aN1ETdlpEX6p3eNud6qMc0o0NGwA0wddk
cbQ0XWFLRIB/7g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:00 2026 by rpki-client