Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: W4UdzaGbT8AGn3dgkif2iH+o1b6o43LJQ85tqjCRiCw=
Subject key identifier: 07:C3:D7:40:0A:FA:E1:EA:4E:24:5A:93:05:52:E3:5A:33:AF:B0:2A
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019CAD2292F4CA002C88890E2DA479DF0A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 096C
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: oDfr+HC+X11apriM3uv/LyldprUWdABJIcKvwM9r77M=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:92:f4:ca:00:2c:88:89:0e:2d:a4:79:df:0a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=07c3d7400afae1ea4e245a930552e35a33afb02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:ea:ab:8c:fa:6c:35:99:08:f4:65:f6:55:
4d:e3:04:6b:7e:42:9d:7d:87:ef:f4:f9:a9:8b:4e:
fb:0b:b6:6f:6e:b1:4b:dc:51:af:f8:4a:02:5a:19:
b3:d6:77:c1:04:4e:86:ea:84:40:d2:38:c8:dd:68:
b0:a6:da:d4:ab:3d:06:db:83:b8:5f:ca:be:25:bd:
8b:9b:f5:05:bb:47:1c:08:d8:fe:1d:89:c6:87:ae:
f1:bb:a5:ba:e2:79:e5:f8:cb:cd:30:aa:90:c6:af:
bb:18:91:b6:5b:8b:f3:44:20:da:7a:76:5d:33:f1:
d3:cb:21:05:bf:7a:85:15:e3:54:aa:ca:8b:0f:9b:
ac:63:59:a2:a2:4d:59:c1:95:e4:9c:51:5c:14:a4:
2f:20:f1:38:60:27:c3:76:b6:93:61:d7:af:34:d4:
05:cf:02:17:32:ae:73:32:23:48:e2:e1:f7:3a:01:
4a:f9:3f:2e:94:aa:22:b5:f2:25:a2:df:21:ac:ec:
90:b5:78:a1:20:62:57:25:5a:c6:af:f9:3f:3e:af:
29:02:73:fd:92:4b:98:e5:7d:ce:16:29:d1:b1:da:
6e:d4:42:7b:9b:66:d5:7a:d3:28:f1:df:08:26:4c:
6c:8d:5d:7f:c2:0a:eb:c3:16:05:bd:fb:2b:57:5b:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C3:D7:40:0A:FA:E1:EA:4E:24:5A:93:05:52:E3:5A:33:AF:B0:2A
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9c:c4:b2:59:c9:e5:fb:f6:c3:fa:75:d0:de:e5:0c:c5:21:
c4:20:34:e8:a9:e6:86:78:56:8e:c3:ba:de:ff:0e:48:fb:54:
f1:d3:d9:09:da:1a:31:b6:72:eb:4c:20:e9:df:4a:e2:73:cc:
fc:b1:7b:21:97:34:90:ca:52:b2:6a:9e:24:ce:84:30:07:93:
ae:cf:1d:7b:ee:7a:bd:fc:04:46:87:29:cb:b3:fa:9a:17:e9:
d3:c3:9d:06:4c:8a:b0:ef:d9:29:f6:bc:16:af:9f:3c:e6:be:
ae:82:95:45:e4:4f:55:5b:07:90:b3:7b:3b:6b:69:72:03:fd:
b6:a5:dc:e3:37:4a:09:67:a5:1a:57:2c:ab:c8:41:ce:d4:12:
2e:91:47:fe:1e:89:be:be:0b:e6:c4:fa:2c:58:6f:f7:e6:2f:
11:19:07:23:58:9b:79:69:48:ca:ed:21:30:01:df:75:92:ed:
09:56:44:42:46:4f:9b:27:18:73:09:24:43:7f:b6:fd:09:36:
c0:55:b6:4a:d3:86:d4:a4:86:d9:d6:96:ed:0e:d7:3c:a2:05:
20:00:84:b5:19:22:23:0a:2a:7f:5f:0d:60:f4:71:30:eb:de:
65:d4:d4:f5:18:b2:04:cf:16:90:8f:10:f4:ac:1e:9a:f1:df:
4f:67:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:51 2026 by rpki-client