Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: /XuES6fANsEoQWcAL5TUtIw0etfMrSg7b7d38rUgWaE=
Subject key identifier: 3A:30:BD:4B:C9:10:87:18:A8:C8:56:78:D0:35:50:12:8A:B5:22:AB
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 01A0E9D2C06A7DA3653ABD913CCFBC1F8ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 119E
Signing time: Mon 28 Sep 2026 21:01:38 +0000
Manifest this update: Mon 28 Sep 2026 21:01:38 +0000
Manifest next update: Tue 29 Sep 2026 21:01:38 +0000
Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: hvkmvZLO7Xq51TzXajmUmz7C1hw7Jy1ktQSGbOjA118=)
3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
4: tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa (hash: /3YflutobnpMb4cvv5YYiqUDPoXca6VxOl9t+YmVV6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:c0:6a:7d:a3:65:3a:bd:91:3c:cf:bc:1f:8a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Sep 28 21:01:38 2026 GMT
Not After : Sep 29 21:01:38 2026 GMT
Subject: CN=3a30bd4bc9108718a8c85678d03550128ab522ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:a0:d3:c0:e9:f4:9a:7e:87:f5:17:3f:31:
1e:0a:a1:5c:7b:c5:7c:43:eb:62:a1:cc:dd:84:6b:
d2:79:39:77:fa:d3:7e:14:a5:ea:d6:0f:a3:48:e0:
74:f4:c0:b8:ae:8e:db:b4:b4:30:e2:1e:82:22:04:
7b:d3:1c:9e:98:e0:b6:5c:91:fc:c0:af:20:36:64:
74:d3:dc:06:a6:d8:82:56:38:5c:68:cb:a6:2a:84:
18:ff:da:3f:67:e1:41:e9:61:ba:1a:72:be:d7:78:
a1:63:0a:7c:ae:a2:f0:f6:12:73:01:74:a2:92:03:
6c:0e:5c:80:4b:2f:30:ee:4c:91:a5:c5:73:6a:f7:
49:c6:af:e3:6b:f8:e4:b4:80:04:98:c2:0e:da:05:
51:d4:de:64:64:7b:10:5f:14:52:47:10:6e:de:91:
37:f4:e6:8a:c4:e9:42:1a:16:07:a8:b2:65:c7:65:
a0:47:99:52:84:11:58:6b:ce:9f:9e:38:ff:be:8e:
ca:0e:9a:63:86:46:66:b3:8c:00:0f:13:72:c8:ee:
71:9d:89:b4:c6:71:1e:49:cd:32:76:74:33:7a:cf:
88:c8:56:65:8d:12:1d:a1:f7:17:92:72:d6:df:f2:
38:20:45:8c:8d:37:78:19:03:48:2d:6e:c3:b5:d2:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:BD:4B:C9:10:87:18:A8:C8:56:78:D0:35:50:12:8A:B5:22:AB
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:83:30:ae:43:fa:22:55:05:06:5f:ac:3d:ef:b4:ce:b4:c2:
e7:67:82:99:f2:21:11:bb:9b:30:7f:95:35:70:a8:c0:0a:26:
14:b0:12:f4:1e:1f:93:8e:55:e9:4c:23:7a:b5:2c:52:8a:82:
cf:02:1e:44:23:7d:76:12:71:8d:a1:69:59:93:c6:91:77:2c:
fd:fb:f2:07:2d:37:21:88:9a:f5:c3:25:f6:66:bd:4b:76:cf:
6d:4c:17:7c:c6:87:8a:11:9c:37:51:a6:cb:8b:72:39:4f:89:
fc:82:1d:2c:c7:81:0d:35:23:b2:a9:95:4f:34:ef:dc:62:5e:
5f:e7:9a:e8:0e:0f:21:43:81:34:ea:95:76:fc:4a:dc:2a:3e:
9d:9a:35:fd:dc:2a:8d:3e:83:74:38:8d:07:fd:9f:6d:12:a2:
1f:3d:a9:83:7c:49:81:a5:f1:65:16:2d:c6:bb:38:bf:86:06:
20:32:06:b5:34:f3:50:46:a5:cf:86:7e:52:36:45:5e:29:23:
c1:02:31:be:70:e3:c8:dd:d6:89:59:19:ba:81:a5:c9:20:e6:
c7:0a:0d:16:0c:99:6d:a1:16:86:65:95:f7:eb:df:44:90:2c:
ea:fc:b2:10:a2:76:7b:ad:f4:52:39:d5:5c:3f:34:36:77:dd:
84:f7:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:25:40 2026 by rpki-client