Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: n1344/FoFFU6/66alUHTkiSnjjqhGjb80hOB8GeiOII=
Subject key identifier: B0:1E:B9:6F:15:36:26:5C:0B:B4:15:19:7D:97:4B:69:09:F6:36:9F
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019FABD11AA227A92CDAD52B9A0DB7A69C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0AF9
Signing time: Wed 29 Jul 2026 03:00:35 +0000
Manifest this update: Wed 29 Jul 2026 03:00:35 +0000
Manifest next update: Thu 30 Jul 2026 03:00:35 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: yDAx+8svTuoOoY6SDZdj5rzMj0pRqsszz8OOHW1Cfzc=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:1a:a2:27:a9:2c:da:d5:2b:9a:0d:b7:a6:9c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jul 29 03:00:35 2026 GMT
Not After : Jul 30 03:00:35 2026 GMT
Subject: CN=b01eb96f1536265c0bb415197d974b6909f6369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:78:a6:48:07:03:ab:d2:39:23:79:ac:57:
b8:a7:49:63:e3:77:a0:ce:41:3e:80:b5:5f:f8:49:
c5:07:96:58:ca:a7:0f:ce:ac:d2:4a:ab:f5:59:66:
17:32:ee:cd:71:d1:db:90:19:db:70:a4:66:aa:86:
86:d2:57:0a:4a:f7:58:38:a5:39:40:c0:ff:45:18:
3d:a8:8c:61:15:80:d7:3d:d2:94:67:ec:c1:26:db:
fc:27:9f:97:c4:cb:c4:68:22:cb:9a:36:92:9c:98:
fb:d6:3d:01:c9:02:c0:17:85:81:63:06:e4:51:64:
ed:b4:ce:41:a6:2c:e6:31:ac:51:82:e1:fb:5f:98:
ed:f7:82:be:29:7c:8e:bc:aa:14:e4:2d:63:47:18:
c2:64:7c:0d:cf:92:1b:95:35:cb:c6:42:c9:3b:8d:
ef:cf:f6:a7:7f:b6:68:fe:33:00:9c:58:32:a2:ee:
f8:77:f5:a6:9b:af:6e:b7:ff:8b:0c:61:19:b2:45:
d1:9f:12:76:c8:c3:70:04:95:25:1f:ed:7f:4e:e0:
86:8d:fc:86:6a:0e:7e:5e:20:84:15:93:db:82:4a:
9d:6c:a4:b6:68:45:27:43:19:45:4e:22:b1:42:f9:
2e:c9:bc:8a:7e:75:95:75:b4:5c:48:10:e3:45:e5:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:B9:6F:15:36:26:5C:0B:B4:15:19:7D:97:4B:69:09:F6:36:9F
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:30:ed:68:fe:bf:0e:83:19:53:0a:9f:40:b5:ff:f9:c3:
8f:dd:a2:73:75:5a:2c:07:00:34:9d:1e:6a:9f:d1:9b:80:d9:
63:bd:ca:ad:a0:b5:e7:f5:82:46:5b:eb:65:c0:9b:91:84:c1:
36:c2:59:f6:40:08:ce:27:a7:91:32:33:5c:c2:d9:08:c3:e2:
02:ce:c2:e3:d8:6d:26:21:11:0c:ad:4e:20:31:0b:21:d9:dd:
12:0f:7a:6f:af:c9:1c:a3:34:28:70:e5:0a:39:b2:ea:2e:43:
ae:f6:4f:97:56:a1:54:5a:99:9d:8e:8a:9a:ca:cf:17:12:0c:
66:02:5a:cc:b1:ee:a5:12:4a:3d:a2:b9:84:c7:9c:ff:ed:14:
dc:39:79:23:93:41:f4:de:94:8b:90:4c:7f:f5:a4:a9:c3:68:
a7:d4:37:24:32:fc:e1:56:87:92:dc:de:99:11:e8:50:67:a1:
b1:0e:ae:cd:91:d4:69:6f:e0:9f:c7:c8:33:16:60:4d:e5:86:
a8:05:49:ce:c1:81:74:4c:1f:18:09:96:b4:ec:8a:6d:01:cc:
f3:9c:2e:33:c4:ca:1f:96:9d:0f:ac:e5:a2:1b:c8:cb:73:16:
4d:ea:ae:97:e5:3e:82:cc:70:9f:38:4d:5e:7a:bd:ef:22:d8:
6d:b6:ae:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0RqiJ6ks2tUrmg23ppyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjYwNzI5MDMwMDM1WhcNMjYwNzMwMDMwMDM1WjAzMTEwLwYDVQQD
EyhiMDFlYjk2ZjE1MzYyNjVjMGJiNDE1MTk3ZDk3NGI2OTA5ZjYzNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll14pkgHA6vSOSN5rFe4p0lj43eg
zkE+gLVf+EnFB5ZYyqcPzqzSSqv1WWYXMu7NcdHbkBnbcKRmqoaG0lcKSvdYOKU5
QMD/RRg9qIxhFYDXPdKUZ+zBJtv8J5+XxMvEaCLLmjaSnJj71j0ByQLAF4WBYwbk
UWTttM5BpizmMaxRguH7X5jt94K+KXyOvKoU5C1jRxjCZHwNz5IblTXLxkLJO43v
z/anf7Zo/jMAnFgyou74d/Wmm69ut/+LDGEZskXRnxJ2yMNwBJUlH+1/TuCGjfyG
ag5+XiCEFZPbgkqdbKS2aEUnQxlFTiKxQvkuybyKfnWVdbRcSBDjReUB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAeuW8VNiZcC7QVGX2XS2kJ9jafMB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAY8w7Wj+
vw6DGVMKn0C1//nDj92ic3VaLAcANJ0eap/Rm4DZY73KraC15/WCRlvrZcCbkYTB
NsJZ9kAIzienkTIzXMLZCMPiAs7C49htJiERDK1OIDELIdndEg96b6/JHKM0KHDl
Cjmy6i5DrvZPl1ahVFqZnY6KmsrPFxIMZgJazLHupRJKPaK5hMec/+0U3Dl5I5NB
9N6Ui5BMf/WkqcNop9Q3JDL84VaHktzemRHoUGehsQ6uzZHUaW/gn8fIMxZgTeWG
qAVJzsGBdEwfGAmWtOyKbQHM85wuM8TKH5adD6zlohvIy3MWTequl+U+gsxwnzhN
Xnq97yLYbbau+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:29 2026 by rpki-client