Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: WYWxg48lENllu1etmhcyjuZIEYKtFrUkfKhN+ByPt40=
Subject key identifier: 6B:DA:23:BD:1B:79:21:07:1A:C3:5A:88:0E:F9:D0:92:C2:06:FC:A5
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 01A0EA0981D0E3F5186CD237B7C35D9362BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 22:01:26 +0000
Manifest this update: Mon 28 Sep 2026 22:01:26 +0000
Manifest next update: Tue 29 Sep 2026 22:01:26 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: VXQ13lhs20QCN1aI1yHVqFwWE5jmeEvPQY9HXWm7r2c=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:81:d0:e3:f5:18:6c:d2:37:b7:c3:5d:93:62:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Sep 28 22:01:26 2026 GMT
Not After : Sep 29 22:01:26 2026 GMT
Subject: CN=6bda23bd1b7921071ac35a880ef9d092c206fca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:95:ba:c8:5f:11:2f:54:1c:51:20:c1:20:
5b:5e:b6:e5:84:09:f5:f6:f9:f1:f7:fc:a7:86:16:
9c:f5:65:a7:92:65:b4:8f:15:b0:7f:43:62:fa:c6:
b4:aa:21:0f:47:d4:48:0c:04:5f:40:82:b9:56:17:
43:4c:27:3c:05:a0:a7:02:14:bd:d1:1d:5a:34:97:
4c:6d:a8:99:5d:07:a4:2f:7e:4b:cc:2f:b0:72:b4:
28:e5:8c:91:bf:32:59:9f:74:eb:f1:a4:c7:d0:4a:
59:f5:6a:4a:4e:9f:af:a5:f0:4d:1c:ea:9a:d4:3b:
46:2c:5a:0d:06:c4:0b:70:56:1e:17:db:9e:31:89:
3d:54:7e:d7:f8:2e:71:29:7a:8e:db:85:58:32:4a:
07:a4:7b:14:91:8a:54:aa:55:af:91:ea:b6:73:5f:
a3:1c:d7:98:82:cc:4a:c7:21:a6:85:aa:fd:65:df:
b1:5d:1d:41:9d:f2:7d:47:c1:c2:93:44:fb:80:d5:
d5:7f:0d:d5:87:f7:f2:f7:89:1f:46:ad:80:ce:c4:
f9:15:2d:b0:8f:8d:1c:ed:5f:01:66:1e:91:f6:88:
80:3b:1b:0b:c2:5b:61:68:f4:0f:bd:f4:f1:a1:ff:
eb:11:ec:a6:15:5f:49:da:97:20:f3:12:67:ad:d2:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:23:BD:1B:79:21:07:1A:C3:5A:88:0E:F9:D0:92:C2:06:FC:A5
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:3d:43:6a:6e:e1:87:d5:10:21:17:5b:c8:fd:bd:0f:2d:
86:f0:ed:6b:6d:cc:ed:9f:80:9a:27:15:c7:c1:42:d5:eb:68:
e1:fc:f2:76:eb:0d:db:6f:9c:70:b9:bd:9e:23:3d:c0:de:83:
e6:8d:f1:86:50:51:21:56:a3:d4:85:5b:32:c7:ed:b8:f8:bb:
c3:33:ee:97:14:1a:99:74:cb:e8:eb:79:4c:7f:c0:a1:de:30:
a0:40:ee:6e:20:40:c5:fa:13:2c:59:2c:24:8b:54:73:bd:70:
a5:81:fb:a7:44:86:0e:9d:58:04:e6:1f:9c:be:88:a9:ce:16:
b1:f2:7b:51:94:3d:ff:f0:73:04:e2:d4:a5:69:98:ca:af:9b:
54:b4:75:16:ff:88:f8:88:f6:7f:ec:81:71:ed:ea:67:74:1b:
85:35:f9:f4:ad:2f:ba:0b:c3:4b:98:33:5b:7b:6c:f3:8b:09:
a2:2f:c5:e6:13:af:5d:d3:91:6b:7a:4e:e4:e5:e6:ff:a3:43:
c7:93:08:57:4a:f8:fa:07:d2:ce:eb:e0:f7:8a:f8:ed:50:1a:
2f:0c:ad:98:80:38:d6:a8:b8:0f:3b:34:64:cc:82:0c:16:db:
3a:01:ef:75:83:cf:24:4a:1f:6b:33:97:fb:e0:d0:fa:a2:11:
07:01:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:23:04 2026 by rpki-client