Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: mTZ6nI0ZdjKUcStjP3W9b6S3A0cbvjLIiTwEzabX39A=
Subject key identifier: FF:3D:D2:5A:04:9E:A2:A2:E4:86:3A:69:B8:6E:87:45:7D:33:CB:28
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019D9A3E278AA57EAAA33B265CFA5157B9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: J8Z7D+acUQMIflpgoexZ1NKOFpZOIQ2yalgKLD+vVQ4=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:27:8a:a5:7e:aa:a3:3b:26:5c:fa:51:57:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=ff3dd25a049ea2a2e4863a69b86e87457d33cb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:44:05:c1:cb:83:16:e8:91:62:9b:dc:b7:
26:cb:67:a0:9e:68:fd:7d:89:4c:1f:45:5a:b9:b8:
5e:85:4c:c3:6f:e7:c1:de:bc:da:8c:51:3e:ab:cf:
f3:87:f5:98:53:e0:df:7e:a2:01:ac:21:3c:5a:32:
57:e0:64:fe:26:c3:bd:0a:d4:b4:d6:ec:d4:3e:40:
80:06:ac:35:56:54:87:6c:ba:5a:84:9f:ef:ea:1a:
14:ad:6d:70:b3:63:2d:71:fe:82:d5:65:66:d5:e8:
4e:91:70:42:c2:13:76:28:77:4a:ef:19:d3:13:57:
a7:e9:b9:0a:f0:44:d6:09:cd:ac:28:6a:e3:a3:99:
fe:4e:7d:79:9d:fe:41:3f:c2:71:53:42:81:ab:00:
98:ac:42:5b:91:53:a4:6a:ce:02:76:0e:7e:58:51:
96:13:83:31:0d:fe:ca:7d:cd:fa:af:d0:12:03:7f:
1f:91:32:2e:65:65:17:32:12:fb:5b:40:51:97:83:
4e:63:c0:be:17:5c:5c:66:95:0a:1b:3e:5d:1c:07:
eb:d8:39:8f:02:80:76:f2:2b:3c:67:2b:37:7c:2a:
2b:bc:94:8b:02:14:4b:cd:b6:63:07:1c:3e:5b:aa:
d2:60:79:e8:b8:1d:55:81:63:77:d7:cc:25:55:f6:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:D2:5A:04:9E:A2:A2:E4:86:3A:69:B8:6E:87:45:7D:33:CB:28
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:81:2a:4b:09:aa:2d:50:d6:4a:25:b6:aa:7a:49:40:36:c6:
c5:71:a5:87:13:b9:a1:19:fa:a8:16:1b:24:7a:43:a9:98:a3:
fe:c4:a7:29:12:28:cf:fe:3e:5e:2d:32:6c:3c:ec:66:71:bc:
e6:11:ae:c5:b3:39:b6:b6:3b:d1:07:c8:4e:cc:48:3a:54:6a:
7e:d8:e6:89:ad:2e:13:c6:2b:db:51:1d:34:d4:5b:91:76:fc:
77:94:82:00:4e:1c:16:34:11:0c:83:20:c5:f1:67:4d:b1:05:
f8:d5:b1:11:55:08:81:50:5e:67:db:ca:d5:14:70:1b:76:33:
3b:5a:49:21:37:d6:cf:41:87:12:8d:29:49:3e:4d:82:89:7d:
e8:f5:15:8c:2f:0c:1b:d6:5a:c9:b5:36:8e:52:5f:48:7b:08:
71:9c:5a:34:63:e9:02:bd:02:7e:0d:fb:20:34:92:e5:32:7a:
85:c2:3b:22:bf:ba:0f:b5:1d:97:96:1e:72:6f:5e:0b:8b:ae:
e9:89:60:4c:cd:ee:4f:af:14:39:8a:92:91:dd:dc:81:d1:48:
16:4e:5b:3b:c6:77:d8:9c:15:2f:e4:69:ff:d2:88:d6:e1:d4:
00:d7:4f:4e:2b:0e:67:a1:31:f6:bf:3a:59:bb:26:d6:15:cb:
c5:e3:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:36 2026 by rpki-client