Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: pru72D7CIScJ90YKqwU1IzbKUoSFEeqNCrzxF132JaE=
Subject key identifier: E3:C7:7F:2A:90:00:9D:53:0A:B7:54:42:B8:60:A8:5D:82:40:51:9F
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019D9A750C61425B15194D39EDEE87F99260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: z89HZNUkonXyxcI3zIcj9kby5uQbnUIgK9NkdgYUsoM=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0c:61:42:5b:15:19:4d:39:ed:ee:87:f9:92:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=e3c77f2a90009d530ab75442b860a85d8240519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c6:7a:53:93:99:74:26:fe:0e:8e:51:43:3c:
9a:54:b1:64:48:9c:82:c2:66:7d:f5:1d:0c:6f:f5:
19:71:94:dc:89:d7:63:e6:28:0f:d3:6a:45:08:ea:
0b:6d:33:b8:d2:36:8b:9c:f6:cc:8f:63:f4:fc:e3:
66:b2:6a:68:b3:c9:a9:84:6d:82:35:a9:d9:7f:09:
2d:05:e6:4b:4b:39:f0:b3:3b:3c:96:e1:2e:54:c7:
bc:45:73:25:74:e8:79:77:26:62:90:33:86:4a:a3:
cb:e2:94:f9:df:40:d4:64:59:18:f6:e0:c2:e7:9d:
69:ca:7e:38:3b:23:2c:b1:9e:2a:04:aa:18:68:31:
4e:1b:fb:10:94:36:33:89:c8:ba:ad:47:4e:fb:1b:
23:00:58:58:da:8b:cf:61:55:f7:d0:10:ba:ad:6f:
11:10:73:14:33:e0:d2:dc:91:25:f9:58:8f:eb:9c:
c7:a3:c8:a4:31:8d:27:5d:7b:98:19:c2:31:1c:73:
1f:2b:da:31:4e:24:44:85:c1:ab:80:5f:79:41:9f:
82:f4:a8:9c:c9:56:e0:40:cf:b8:f6:77:1e:45:35:
fa:76:ee:2e:ab:68:ef:33:63:62:48:1c:32:25:b7:
ef:58:7a:c1:28:a5:d2:22:6d:8f:b4:cc:67:62:33:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:7F:2A:90:00:9D:53:0A:B7:54:42:B8:60:A8:5D:82:40:51:9F
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:50:a5:26:3d:d6:81:b9:5f:6c:a6:f4:2b:65:4f:a9:49:
25:f6:ec:26:f3:da:d8:2b:c9:61:f7:44:1e:6a:19:6b:8a:50:
26:c7:33:c0:62:c1:e3:c8:3f:52:d8:c3:ef:11:38:cb:4c:ab:
5a:1a:d9:df:5d:ed:f2:01:b2:a2:a2:38:20:1c:62:f1:48:be:
78:29:5f:0b:42:02:5b:e8:c0:24:42:0a:ed:f2:88:6d:69:4f:
22:32:2c:b2:1d:4c:b5:32:f1:af:9f:6b:f3:1c:da:77:a3:74:
f2:97:e5:6d:16:c1:7f:ed:60:f9:2b:63:e8:03:fe:a1:b0:48:
23:f8:86:10:0b:a5:31:f6:f9:4b:e6:ed:e3:f4:ca:9b:6c:65:
91:4c:39:86:19:f1:54:34:ab:14:cb:19:a0:43:80:43:a5:8f:
ed:9d:f5:aa:5b:9d:54:d2:8a:aa:1a:71:4e:d1:d2:1a:a4:43:
13:03:62:08:94:0e:43:76:fb:25:99:2c:c7:e3:e8:db:53:68:
52:c1:13:25:e6:de:07:72:6b:2c:cd:32:4f:04:cf:cb:e9:47:
b1:e2:9f:24:9e:9b:f4:65:0c:18:ab:43:1f:c0:9e:96:0d:f8:
20:94:48:0e:25:52:9b:d4:62:63:d5:bf:13:69:64:31:c4:dc:
ae:63:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:41 2026 by rpki-client