Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: bsUtrMoJRjXxMhIOuHI04d875Q/nqfIDeSsbKt3zfjY=
Subject key identifier: 88:76:85:5B:5D:4C:E8:7E:CA:66:8F:39:3A:F4:37:E7:3D:F6:EE:82
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 019CABA24705DC035EE6D37D2C06BE6AFC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 13CF
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: +nVTDfm2ZH4oem1Rngjgbe3Gp/x1htZKYcb/0Ojba0A=)
2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:47:05:dc:03:5e:e6:d3:7d:2c:06:be:6a:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=8876855b5d4ce87eca668f393af437e73df6ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:f5:f4:d1:26:93:d1:77:32:f5:69:d5:29:
67:48:6e:d7:ce:c4:3b:f8:c5:65:83:cc:b4:08:c0:
f2:ad:60:33:08:6a:d6:f2:3d:80:f4:46:c6:da:1a:
b5:15:45:53:1f:98:3a:7d:42:6d:9a:1d:0b:c1:ae:
b5:87:5a:6b:a9:ad:18:6c:6f:61:bb:57:89:f9:6a:
9e:9e:db:f1:98:28:1e:14:19:69:43:e1:95:e3:ef:
3b:40:c3:e8:5d:ee:18:13:ff:68:c3:a0:0c:c0:9a:
6a:b5:f6:de:f7:ac:d1:1a:c1:4b:b8:cb:68:c6:84:
f2:03:04:5c:eb:a1:85:8a:fd:21:b8:ef:98:8b:81:
95:89:3c:f2:3b:30:db:39:6b:a6:ef:1c:27:96:bd:
22:8f:0a:8e:67:08:74:9e:67:d7:3d:72:b0:65:cc:
e5:08:8e:c3:10:5a:ff:24:96:c8:b3:8b:b0:fc:75:
6c:1b:eb:15:27:7e:dc:60:cd:2f:2d:10:13:fa:d3:
b1:29:c3:a5:73:00:0c:89:4b:eb:3d:dd:9a:94:52:
ff:2c:b4:4f:e3:cf:53:08:4d:b8:aa:12:1d:99:09:
a6:00:c4:8a:97:67:0f:b3:b6:f2:71:88:70:cd:e8:
dc:9d:5f:00:cb:31:98:30:4f:f1:7c:ba:46:95:a5:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:85:5B:5D:4C:E8:7E:CA:66:8F:39:3A:F4:37:E7:3D:F6:EE:82
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:80:e6:d3:fc:8f:c4:fa:c8:5e:4c:db:b1:df:00:c2:45:d2:
c4:bc:09:4c:de:9f:cc:d4:bc:c5:c2:39:5d:25:68:e9:f6:50:
d3:90:fd:94:dd:5d:19:af:7e:c7:26:e7:24:a1:71:0c:9f:60:
b0:0b:da:34:97:aa:9f:6f:16:d3:d9:19:f5:51:ec:b6:45:0f:
e2:b4:eb:f8:70:e0:1d:84:81:05:46:fd:b0:12:a0:b5:45:32:
5c:ff:6e:00:3d:2d:c6:83:3d:c7:90:c9:fc:25:d0:45:e3:3c:
06:d6:6b:9a:ad:08:7f:50:14:b4:02:c0:72:d6:ea:75:e1:99:
3b:1c:cb:90:76:7a:1e:fc:b9:83:5d:10:01:94:1e:a8:1b:29:
3d:9b:4f:4a:cd:3f:7d:ed:1d:56:22:ee:85:6d:58:69:11:3a:
2d:36:70:c7:8b:a5:1f:34:52:fe:bb:16:32:13:f6:1b:ae:87:
40:90:7c:5a:5f:2c:a5:3b:a6:9e:f9:a2:d4:47:4c:3a:4d:f7:
be:37:83:f8:ac:8d:6d:5a:b7:24:65:da:dd:ab:5f:97:23:a5:
c6:c0:c7:88:5b:02:a1:7c:d9:63:52:87:7d:c3:b2:0f:5c:08:
0d:9b:c3:0d:70:95:66:43:e1:b6:23:0d:88:6c:a6:22:a6:c2:
56:cc:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:27 2026 by rpki-client