Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: fZQ9F+i7Yb6d1WhnE66CO3eZMmAuGIND7t0kBvM/Voc=
Subject key identifier: 31:CE:E1:C4:AB:B7:76:93:FA:F1:13:A1:D2:F2:BC:14:5B:B5:D4:32
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019EBDD98ED57B3834F5E1BACFC543C90889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 22:00:12 +0000
Manifest this update: Fri 12 Jun 2026 22:00:12 +0000
Manifest next update: Sat 13 Jun 2026 22:00:12 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: +aZoM3Zbpan9rH0nYbnwcmI/XzTkVVjKSGDlDbAw8M0=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:8e:d5:7b:38:34:f5:e1:ba:cf:c5:43:c9:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Jun 12 22:00:12 2026 GMT
Not After : Jun 13 22:00:12 2026 GMT
Subject: CN=31cee1c4abb77693faf113a1d2f2bc145bb5d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:0f:66:72:49:f5:ad:66:cc:f4:61:7b:b4:
85:e7:67:45:61:c0:c2:0f:74:1d:dc:36:5b:a2:6d:
78:d9:c4:43:b6:3e:eb:ea:84:c4:6d:6e:96:00:20:
c1:13:12:bb:47:82:ac:7c:5f:31:18:e8:3b:64:be:
b9:16:51:49:e6:3f:5d:76:88:4c:7d:e7:03:95:cc:
8e:42:36:03:bb:46:b9:12:66:b4:87:b9:71:a5:3b:
6d:de:85:73:03:02:f5:06:c0:40:6e:45:05:fb:4c:
d6:2a:39:ed:48:4a:6a:7d:6b:20:fe:45:8e:66:4c:
0d:31:ab:ff:25:73:95:9e:47:46:99:78:17:76:bc:
2d:74:0f:c7:31:50:1a:6a:70:c9:10:15:ec:6e:24:
51:a2:1a:4c:11:36:46:8d:3e:10:d4:f1:68:b0:08:
4b:79:90:68:ab:2b:56:e0:c6:2b:b4:c1:d1:46:d3:
b8:f8:4f:0d:07:7a:79:7e:02:b4:08:8a:3f:40:20:
aa:04:df:25:6b:70:a6:1e:43:38:90:35:02:57:48:
1f:cf:42:6b:9a:3e:49:57:7e:e1:ee:58:55:c9:6f:
e1:a9:af:48:0b:1a:82:ab:9d:0c:f7:d1:db:dc:aa:
82:aa:14:f5:76:dc:df:ac:ca:3e:8d:59:88:7d:67:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:E1:C4:AB:B7:76:93:FA:F1:13:A1:D2:F2:BC:14:5B:B5:D4:32
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7c:8a:90:3c:84:87:83:13:e0:ea:c2:16:9f:29:5a:b8:ce:
d8:63:30:93:75:dd:96:6b:7c:82:6f:7a:ea:b9:fa:32:78:ac:
a4:05:89:60:46:15:22:51:7e:45:68:0e:3b:26:59:9b:b3:57:
61:24:a6:e7:99:5b:5f:3d:75:e3:b7:ee:1c:c6:1e:2d:fb:42:
42:1d:5c:7c:e1:e9:a3:76:40:4f:78:e9:66:cc:3c:3d:38:6a:
7b:13:cb:05:96:4e:a3:f2:50:2b:39:cd:51:02:0a:31:cf:69:
ca:e2:5a:7a:c8:12:57:7d:2f:25:30:45:10:fb:9a:1c:77:83:
dd:56:56:a6:f1:b5:88:29:e7:ef:4b:65:0c:2e:9d:e5:09:54:
25:3e:ac:e8:d4:35:99:85:85:7f:4d:68:c2:fb:2c:48:e3:de:
87:c4:cf:6b:22:d0:9e:86:0e:08:9d:fa:1b:84:08:e2:25:e2:
1d:fe:b9:54:40:1d:6c:a7:cf:74:e6:cf:ff:c9:d9:ea:ad:cd:
ff:31:c9:ce:53:43:60:34:1d:9c:9f:b0:d7:f0:9b:8c:02:12:
34:db:4a:a2:55:05:93:bd:0a:78:49:9f:e2:ef:96:b5:cb:f7:
99:00:ae:94:c8:96:b1:0e:cd:fe:17:b9:f6:cb:5c:dc:73:5d:
e0:9e:a5:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692Y7Vezg09eG6z8VDyQiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3
M2JjNDgwHhcNMjYwNjEyMjIwMDEyWhcNMjYwNjEzMjIwMDEyWjAzMTEwLwYDVQQD
EygzMWNlZTFjNGFiYjc3NjkzZmFmMTEzYTFkMmYyYmMxNDViYjVkNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9MPZnJJ9a1mzPRhe7SF52dFYcDC
D3Qd3DZbom142cRDtj7r6oTEbW6WACDBExK7R4KsfF8xGOg7ZL65FlFJ5j9ddohM
fecDlcyOQjYDu0a5Ema0h7lxpTtt3oVzAwL1BsBAbkUF+0zWKjntSEpqfWsg/kWO
ZkwNMav/JXOVnkdGmXgXdrwtdA/HMVAaanDJEBXsbiRRohpMETZGjT4Q1PFosAhL
eZBoqytW4MYrtMHRRtO4+E8NB3p5fgK0CIo/QCCqBN8la3CmHkM4kDUCV0gfz0Jr
mj5JV37h7lhVyW/hqa9ICxqCq50M99Hb3KqCqhT1dtzfrMo+jVmIfWffjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHO4cSrt3aT+vETodLyvBRbtdQyMB8GA1UdIwQY
MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt
MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0
LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3yKkDyE
h4MT4OrCFp8pWrjO2GMwk3Xdlmt8gm966rn6MnispAWJYEYVIlF+RWgOOyZZm7NX
YSSm55lbXz1147fuHMYeLftCQh1cfOHpo3ZAT3jpZsw8PThqexPLBZZOo/JQKznN
UQIKMc9pyuJaesgSV30vJTBFEPuaHHeD3VZWpvG1iCnn70tlDC6d5QlUJT6s6NQ1
mYWFf01owvssSOPeh8TPayLQnoYOCJ36G4QI4iXiHf65VEAdbKfPdObP/8nZ6q3N
/zHJzlNDYDQdnJ+w1/CbjAISNNtKolUFk70KeEmf4u+Wtcv3mQCulMiWsQ7N/he5
9stc3HNd4J6l4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:21 2026 by rpki-client