Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: W8KDJs8GeX/Y1ze47QATO9K4u193b3S+2K6tpHEYiUE=
Subject key identifier: 58:9C:6E:93:82:1D:D5:FE:E9:1B:A3:63:75:35:0A:29:8B:57:EE:93
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019D9AAC3E920A8B54B7467036A2A0948318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 09E7
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: eit9O2+gNNHS2pRB0NffrXv/ClHuCKkQfACLtlQbCxs=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3e:92:0a:8b:54:b7:46:70:36:a2:a0:94:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=589c6e93821dd5fee91ba36375350a298b57ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:99:8c:22:a9:b5:20:9f:be:16:7e:ce:43:
17:d5:2c:fb:f9:bb:45:27:6e:0a:ad:0a:46:30:80:
62:1f:7f:51:5c:71:ff:d3:48:8a:02:01:cb:fa:c6:
e6:5b:5e:2a:1d:75:85:5d:97:0c:8d:24:8a:15:61:
79:ad:96:85:47:27:87:9b:75:2c:a3:8d:1e:9f:6f:
38:d6:41:16:81:ea:7a:2f:c9:ef:62:fb:e8:51:45:
5f:d6:93:c7:ca:92:17:f3:47:b6:fd:02:c3:6d:f0:
05:c7:fc:a0:02:f0:ac:59:17:d4:f2:f8:24:ed:d9:
35:fd:36:15:20:a9:48:cc:8a:3a:fa:25:9a:a2:68:
48:63:ef:63:e4:64:7f:b9:c8:c7:8f:52:21:ef:86:
ab:58:fb:ef:95:61:f1:5e:fe:5e:93:68:c9:5b:b8:
ec:08:f7:41:96:33:a3:c9:3d:58:73:a6:e8:18:b6:
4c:88:b8:d9:a0:39:66:ba:f6:8e:1e:26:a8:40:aa:
c3:76:be:42:84:99:f0:f3:57:3b:68:10:10:66:cc:
10:57:d7:a2:c3:4a:5f:ca:66:9e:71:c4:a8:da:df:
04:37:7f:3c:35:79:c6:4a:3e:f7:44:2c:85:7d:81:
59:59:a8:9a:e7:72:c1:f9:30:8a:3c:27:d0:7a:88:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:6E:93:82:1D:D5:FE:E9:1B:A3:63:75:35:0A:29:8B:57:EE:93
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b5:ef:be:41:32:ae:9e:2e:25:dd:f8:ea:88:e6:a9:ab:62:
a7:fe:67:b6:8e:c6:44:a5:eb:67:b9:28:67:58:c3:7c:dc:60:
23:30:c6:eb:ab:d3:d4:16:59:ef:bf:6e:4d:64:ed:af:2a:28:
fa:22:c1:b6:ba:ec:7e:c7:07:64:b3:7b:6b:9a:c8:3e:c2:85:
d1:ea:2b:57:5a:e3:8d:e2:28:07:24:f3:c3:50:36:45:60:66:
04:18:04:0b:bd:01:db:94:79:7a:00:e0:12:fa:1e:d3:6b:c3:
7b:0f:a9:d9:02:0c:0d:7d:90:62:4a:3d:d5:d9:2e:49:58:f1:
4a:bc:8b:44:05:09:f7:96:a9:d7:7e:f0:52:7b:c0:c2:df:87:
d1:dc:ac:08:d9:74:76:06:f3:54:be:06:6d:42:7d:b3:9a:a1:
96:7c:a3:d3:c7:7e:5e:18:a5:75:49:be:78:76:4b:59:4a:2a:
95:e3:e2:42:c7:b1:52:a5:0d:8d:e3:17:0e:ce:cb:7c:8e:d7:
bf:f6:4c:a7:54:ff:a6:bc:a0:56:bb:6d:84:ed:1e:15:01:c9:
90:d3:3b:fb:ca:73:47:26:7a:39:06:79:43:44:34:a4:67:51:
13:2e:4d:fd:a6:7f:e9:46:84:3d:73:bc:59:42:21:84:de:3f:
2b:dc:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:48 2026 by rpki-client