Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: uRKLyiqXaNScZ6rzhzN8NCvyeNoSLRsMFGoi8VrXxkg=
Subject key identifier: 5A:4A:90:78:A8:FE:35:C7:3E:3C:83:5E:B6:40:C7:D6:D1:9B:89:51
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 01A0E889856DADCEF7E89C717952D94329A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0B9D
Signing time: Mon 28 Sep 2026 15:02:01 +0000
Manifest this update: Mon 28 Sep 2026 15:02:01 +0000
Manifest next update: Tue 29 Sep 2026 15:02:01 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: 0UEnayioAjYoJ+sqmiX6ULttP6gJ/Z2wGcb5Er1Wg7s=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:85:6d:ad:ce:f7:e8:9c:71:79:52:d9:43:29:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Sep 28 15:02:01 2026 GMT
Not After : Sep 29 15:02:01 2026 GMT
Subject: CN=5a4a9078a8fe35c73e3c835eb640c7d6d19b8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:8a:e0:1f:0a:47:ca:13:bc:b9:58:5a:47:
d1:fc:6a:60:11:2e:cf:62:8d:fb:c8:d6:e3:05:8f:
f5:4d:2f:9a:72:17:72:c6:80:09:88:53:1e:ea:24:
c9:db:a9:93:e8:0f:d6:82:74:b1:51:7f:c7:ec:49:
91:0d:88:6b:6d:a7:f7:fa:8c:56:da:36:5b:81:7e:
2a:77:4f:bd:8e:c7:0d:d2:94:56:f4:ae:ec:c9:2b:
a2:44:a5:bd:b1:6c:66:c1:df:72:e6:23:94:8b:6b:
f0:db:bd:ee:ac:20:f8:a8:92:2b:3d:6a:22:7f:22:
03:34:b8:95:c9:56:65:d2:22:e7:fd:e1:88:5d:0a:
5a:52:ee:ee:94:74:11:3c:24:d0:61:e5:fd:6f:79:
86:c9:0d:d2:6c:fe:a3:7a:89:70:94:8f:44:d1:87:
a7:26:2e:d2:45:fe:f4:07:7c:2c:bb:8b:e2:4a:27:
ef:e9:76:4e:a3:2a:f6:2c:d7:06:67:97:4b:ed:90:
54:4f:b9:de:dd:b4:ae:63:63:68:1a:13:1c:a8:ac:
57:73:b8:5d:41:bb:d3:e2:72:5d:b6:0e:ab:bf:2c:
bb:e6:47:1d:15:f2:51:8c:87:de:6c:95:ce:67:70:
3e:69:6b:7e:b7:94:3c:dd:58:86:ad:83:12:61:00:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4A:90:78:A8:FE:35:C7:3E:3C:83:5E:B6:40:C7:D6:D1:9B:89:51
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e3:79:a1:d1:e9:8c:fa:ad:f1:72:f9:a3:bf:21:a3:b1:03:
08:80:cc:a8:f4:4c:8a:65:b1:cd:71:08:34:db:8a:4a:1f:49:
50:e2:5d:0a:42:8f:02:8e:51:c9:0a:fe:47:ca:da:6e:67:f6:
37:a1:c9:a1:6a:43:65:72:ae:2c:a8:9b:a2:5a:79:bb:97:e8:
85:a1:56:1b:6c:04:c2:aa:87:20:a0:94:5c:90:df:88:a0:98:
2d:3e:67:bc:24:6b:a9:28:9e:fc:98:9d:b3:92:b0:8c:84:d7:
2e:24:c6:81:f4:63:f4:01:da:ef:0f:83:eb:2a:56:ca:56:c3:
8f:11:91:c4:a8:1d:2f:b4:c6:4e:95:c5:67:4d:d5:d4:82:d7:
48:5d:77:87:3e:77:f6:a6:2d:cc:9e:8a:6e:1a:7f:9e:19:bc:
8d:75:ac:8b:0c:04:af:5d:2e:a3:d2:65:4b:1f:ac:19:d2:23:
fc:ef:7f:b3:1c:be:2b:bc:67:e6:ce:d9:8a:26:fc:f8:f3:63:
09:67:3b:49:8e:42:1e:49:79:5f:db:35:c9:84:c7:d3:52:46:
a4:4c:fd:f1:a6:20:a4:29:8d:13:4a:4b:c6:b6:b4:27:af:f7:
47:3a:3f:a9:58:aa:b2:86:94:b7:22:19:5d:85:95:c7:95:7a:
a4:43:24:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiYVtrc736JxxeVLZQymhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjYwOTI4MTUwMjAxWhcNMjYwOTI5MTUwMjAxWjAzMTEwLwYDVQQD
Eyg1YTRhOTA3OGE4ZmUzNWM3M2UzYzgzNWViNjQwYzdkNmQxOWI4OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSGK4B8KR8oTvLlYWkfR/GpgES7P
Yo37yNbjBY/1TS+achdyxoAJiFMe6iTJ26mT6A/WgnSxUX/H7EmRDYhrbaf3+oxW
2jZbgX4qd0+9jscN0pRW9K7sySuiRKW9sWxmwd9y5iOUi2vw273urCD4qJIrPWoi
fyIDNLiVyVZl0iLn/eGIXQpaUu7ulHQRPCTQYeX9b3mGyQ3SbP6jeolwlI9E0Yen
Ji7SRf70B3wsu4viSifv6XZOoyr2LNcGZ5dL7ZBUT7ne3bSuY2NoGhMcqKxXc7hd
QbvT4nJdtg6rvyy75kcdFfJRjIfebJXOZ3A+aWt+t5Q83ViGrYMSYQCU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpKkHio/jXHPjyDXrZAx9bRm4lRMB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+N5odHp
jPqt8XL5o78ho7EDCIDMqPRMimWxzXEINNuKSh9JUOJdCkKPAo5RyQr+R8rabmf2
N6HJoWpDZXKuLKibolp5u5fohaFWG2wEwqqHIKCUXJDfiKCYLT5nvCRrqSie/Jid
s5KwjITXLiTGgfRj9AHa7w+D6ypWylbDjxGRxKgdL7TGTpXFZ03V1ILXSF13hz53
9qYtzJ6Kbhp/nhm8jXWsiwwEr10uo9JlSx+sGdIj/O9/sxy+K7xn5s7Ziib8+PNj
CWc7SY5CHkl5X9s1yYTH01JGpEz98aYgpCmNE0pLxra0J6/3Rzo/qViqsoaUtyIZ
XYWVx5V6pEMkbw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:08:41 2026 by rpki-client