Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: KQm4U7aC3XexArXXLIrJ0Cj6pMEEXqGPca061ADqdck=
Subject key identifier: 25:77:62:03:53:11:6A:80:67:68:F9:76:70:65:72:B3:D6:AC:63:92
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019FA9758485A1038CBB3EE6BA4A88FAC0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 16:01:18 +0000
Manifest this update: Tue 28 Jul 2026 16:01:18 +0000
Manifest next update: Wed 29 Jul 2026 16:01:18 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: MEAuyiJjg9BrL7SpQVUEmLrJqyvJ2PQDebpTrE/DLDM=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:84:85:a1:03:8c:bb:3e:e6:ba:4a:88:fa:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Jul 28 16:01:18 2026 GMT
Not After : Jul 29 16:01:18 2026 GMT
Subject: CN=2577620353116a806768f976706572b3d6ac6392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:bd:66:19:51:ef:92:3c:9f:61:8c:c1:4a:
26:97:73:a3:a5:87:0b:1b:00:a6:e9:0f:fa:e7:6e:
75:da:ce:9c:a0:bd:d8:cf:60:17:67:bb:ba:de:b4:
2a:6d:7a:04:86:ac:c8:c5:6a:6a:1a:53:da:36:b9:
77:24:7f:61:13:32:8f:c3:e7:46:5d:33:de:d4:ee:
0d:16:be:46:e8:50:f6:4d:d3:5d:21:53:09:ef:a6:
e9:cd:39:04:20:0d:05:f9:1e:e4:97:09:a6:e0:a0:
b4:c6:c3:36:be:73:b6:a6:1c:b6:6f:3b:77:92:7d:
e0:20:da:6a:ff:eb:31:ac:a1:57:b5:29:41:02:0b:
6b:e0:ea:eb:71:77:92:70:2f:be:01:77:d7:17:0c:
35:06:b1:57:df:49:99:ab:ae:e5:ea:b5:d6:3b:5a:
ac:c1:c2:88:7e:9a:9e:ba:82:b2:4e:05:1f:70:b9:
15:08:02:db:2b:33:8b:a8:81:3d:06:e3:1e:08:01:
34:61:60:cb:4e:b8:b5:c6:dc:74:fd:90:f7:05:18:
12:8e:d8:9b:c4:39:f5:5e:b2:ee:90:84:ae:a2:9f:
62:81:bc:5d:68:d1:e6:42:65:9f:36:1a:9f:16:79:
ae:75:4d:f4:b8:d6:5f:ce:23:94:2a:16:92:62:c7:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:62:03:53:11:6A:80:67:68:F9:76:70:65:72:B3:D6:AC:63:92
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:d0:f4:8f:4d:59:32:10:97:92:dd:44:db:df:2a:ba:42:
8e:81:6f:13:cc:a7:66:8e:43:78:f4:90:ed:47:b4:a1:73:c4:
92:d5:4b:1c:7f:77:83:1c:df:70:36:c8:f6:55:fc:29:2b:e0:
85:c7:1b:70:72:59:b1:5e:a7:d0:05:0b:e0:d3:4e:e3:f8:b6:
26:08:43:55:e5:a5:18:6d:32:c4:19:2b:5d:c3:f0:68:19:d9:
a7:cf:93:0c:bf:99:c9:a8:b0:b7:5b:bd:46:ac:c6:c1:27:a5:
8b:d7:39:cb:bb:6f:36:35:82:38:4e:d6:15:b1:e1:fc:f9:72:
4e:c1:37:e3:c4:a0:70:a3:17:a7:1a:bf:aa:4f:8f:53:4a:fd:
30:46:60:8a:ee:3b:ad:cc:a2:c4:06:5a:cb:e2:fa:7b:0e:c5:
02:a5:f2:a1:6c:a9:81:81:97:fb:8c:b1:fe:59:a4:13:ad:b8:
9b:a3:40:3f:b6:0a:7e:40:8f:c5:73:92:74:e4:e4:f4:88:64:
e1:38:f6:36:c9:65:eb:b4:4e:7e:f7:ce:31:3f:49:8a:91:08:
4d:9b:1a:ba:17:c8:3b:bb:12:42:47:f7:b7:10:3e:75:a9:44:
bf:66:36:0e:3e:df:db:90:83:02:68:bc:30:3b:2f:01:da:91:
59:ff:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:35 2026 by rpki-client