Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: B8LsaQT01l21UTF5KCBNCS+Iv0j7LbZXYGQ/X9Rvx/I=
Subject key identifier: 3E:B6:77:6C:81:CA:17:D8:8B:33:FF:95:AB:B6:73:29:84:62:12:75
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019EC22504D3D9A981AB0046443425360891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0A80
Signing time: Sat 13 Jun 2026 18:01:06 +0000
Manifest this update: Sat 13 Jun 2026 18:01:06 +0000
Manifest next update: Sun 14 Jun 2026 18:01:06 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: yr47JPmdVPHqqVkS/z4NBg8YMdS41KhTnHSCpLtGRCo=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:25:04:d3:d9:a9:81:ab:00:46:44:34:25:36:08:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jun 13 18:01:06 2026 GMT
Not After : Jun 14 18:01:06 2026 GMT
Subject: CN=3eb6776c81ca17d88b33ff95abb6732984621275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:8d:60:8c:86:0e:f6:d5:f6:51:94:bb:a5:
3a:fc:9f:ec:49:4d:68:1b:58:5f:98:67:bc:0b:56:
ea:0a:ea:78:53:2d:5c:af:f2:00:a5:c3:d1:42:40:
d0:a0:ac:e1:f6:68:56:36:66:b9:9e:25:c2:b7:68:
68:9e:67:7c:2a:80:55:11:f5:64:d7:7d:78:60:8d:
86:7f:2a:c1:df:d3:ed:2a:01:6e:b6:fe:db:f5:07:
cc:ed:ac:9b:d3:a8:ea:02:e3:7f:0e:da:b1:64:ab:
88:4e:13:e5:93:7b:04:de:33:7d:2e:39:53:bc:c6:
66:e2:43:96:e5:86:cb:71:7e:9c:24:61:23:60:b0:
20:0d:ab:4c:bc:dd:73:14:cc:72:0a:22:44:ad:9f:
b5:86:00:2d:a5:d3:ca:4f:a6:5b:a7:cd:82:96:25:
ec:8f:a0:07:c2:dc:c2:62:e6:be:60:36:11:6c:a2:
3d:ae:c2:74:60:7c:25:84:ee:cd:57:ac:5f:22:6d:
9b:6d:29:c9:59:70:c1:04:f0:ed:63:a6:67:99:c7:
1f:4e:40:bb:4e:a5:23:75:50:d1:16:f9:80:16:9f:
89:07:62:06:3b:dc:d9:53:db:66:8a:a5:af:e3:76:
dc:4c:8a:b8:70:40:22:d0:34:72:33:17:95:5b:8a:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:77:6C:81:CA:17:D8:8B:33:FF:95:AB:B6:73:29:84:62:12:75
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e4:13:18:1a:ef:db:c3:69:66:95:4d:97:ea:2a:f3:f2:c2:
d1:e2:d4:64:63:cf:f0:8b:51:1c:0f:90:51:9a:f7:d5:87:41:
58:41:b9:84:cf:a4:dd:44:d2:90:01:9b:08:fb:4d:13:eb:fb:
ec:23:8a:b9:66:d0:16:70:03:09:39:ca:79:4d:64:7c:46:10:
d1:fa:0f:5c:4d:2f:e4:de:f3:8f:d5:0c:31:53:58:3d:92:a4:
3f:10:7d:b2:fd:49:15:18:b7:c4:20:0e:2a:13:6c:cd:92:67:
49:d2:14:cd:38:c3:0a:d3:fd:d7:5d:1e:0b:81:9d:3d:41:8c:
b7:59:7d:40:aa:9f:69:ee:23:23:88:6b:90:d0:8c:62:d6:22:
4c:80:94:70:10:4a:0f:f4:10:7a:11:e3:d4:ea:7c:cc:c0:82:
d2:81:49:b4:7c:6b:9f:78:1f:61:85:ae:ae:d4:8d:4e:e1:c4:
a1:1d:2e:ea:94:5e:10:8b:f2:84:e5:2d:f7:47:b5:db:8f:23:
3e:d6:c6:4a:0f:23:ca:71:19:b6:22:29:d2:d4:65:e4:d0:d0:
1f:94:e1:fa:3e:90:bb:c7:02:f8:d8:43:ef:87:5d:d4:b9:72:
ed:dd:30:e6:7d:87:49:04:f8:a5:6b:58:f5:db:82:77:2c:5b:
83:8b:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:38:40 2026 by rpki-client