Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: 9dR6IJ1fTh2hDxDsX/4LuGdYtVglywHkQwJqT00XjKw=
Subject key identifier: 61:C7:B2:34:9F:00:91:14:13:AA:FB:21:B6:8B:A5:D0:E4:90:40:22
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019CACB4FB542938E9F47881892E5843893E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: 6CXyQmggK2FbxB+tvg9BnikVslbm/HNKAfdwn5tfDYo=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:fb:54:29:38:e9:f4:78:81:89:2e:58:43:89:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=61c7b2349f00911413aafb21b68ba5d0e4904022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:11:d2:52:85:3e:14:c8:c0:bf:7d:09:df:
0a:e6:19:ae:d6:40:bf:ac:48:bb:c0:9e:db:cf:40:
30:ca:aa:d4:ce:9b:1d:fc:69:c0:2e:cd:2c:a4:1d:
d7:14:e2:dd:9d:b0:f0:cd:4c:b1:6d:33:db:39:e2:
bc:0a:1a:07:b2:19:ea:be:5b:88:42:e7:77:11:bb:
dc:47:c9:6e:d8:6e:b7:af:b8:84:f1:3d:ee:28:a6:
ef:a8:6c:94:34:7b:b9:db:e4:59:67:02:64:fe:ea:
1b:bb:1a:95:04:c9:d8:7e:cb:2d:92:56:58:9f:d3:
30:39:bd:dc:5d:ca:46:87:55:ff:ff:70:ee:1a:b0:
15:87:93:7b:61:da:b0:37:f5:9f:ca:03:a4:c9:91:
ac:c9:eb:51:e5:ba:33:ca:ad:60:51:36:f4:96:d4:
21:16:04:6b:21:c9:e0:b2:cf:71:15:24:74:03:d8:
27:e1:30:a9:c6:0d:f7:c5:d7:2f:66:80:7a:9f:3a:
14:ab:ea:a6:6d:c2:69:b3:9d:56:e4:98:e6:5b:96:
f3:68:47:d8:3d:98:a7:43:19:09:2a:d7:5d:5f:e2:
d4:0c:2c:bc:4c:93:6d:0e:ce:13:a3:0d:29:a7:8c:
66:8b:ee:30:d9:b5:6a:65:bf:5d:6e:c0:ab:03:ca:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:B2:34:9F:00:91:14:13:AA:FB:21:B6:8B:A5:D0:E4:90:40:22
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:cf:4c:8e:85:b3:60:8a:f7:b0:2a:3f:01:e8:c6:bf:c4:
b9:1e:52:96:51:30:bd:53:65:2c:75:7c:f2:a3:4c:5b:9d:ce:
65:bc:a5:69:34:0f:f4:64:a4:24:71:1b:d3:c0:63:14:29:93:
14:b8:2a:f3:6c:0c:48:b0:a6:9c:d6:f7:13:57:eb:b2:81:00:
75:3f:75:ea:a2:0f:ed:63:f1:d2:49:c8:d8:52:7a:5e:0c:e0:
35:6c:da:c0:5c:f9:23:03:cc:87:e1:a7:df:0f:88:21:46:0c:
f1:f0:3d:27:e9:41:a1:54:a9:07:ab:c9:1c:38:4a:53:68:4c:
63:77:8d:bc:0b:69:1a:69:53:14:c0:51:50:60:69:12:12:65:
e2:73:75:38:14:a6:28:a8:11:a0:1e:63:b3:a3:d0:bd:8c:a2:
62:65:c3:d6:09:33:e2:b3:d6:23:51:3e:9b:04:de:45:5a:7c:
d7:eb:41:ad:2d:36:f8:02:40:cd:32:7d:3a:7b:d7:4f:20:98:
ef:5c:ae:db:a5:3f:1d:82:3a:83:13:48:ee:92:b6:07:dd:0b:
61:38:fa:7e:05:de:50:d4:43:8b:70:d9:29:b0:ef:d0:d6:d8:
46:d6:bd:14:ec:b9:c4:c0:09:da:f5:26:af:d6:92:95:80:d7:
73:42:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:57 2026 by rpki-client