Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: Q1w1uUGImKGAoVO/zjhcThmUM7NYSiqbSECVltoTk+4=
Subject key identifier: AC:10:DF:55:FD:E9:37:7B:EE:B8:A6:8B:5E:06:47:68:31:EF:CB:E9
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 019D9962BA5C684A92F11596782D8D7CE778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: tLHaMTYAC3OFHHuVoAz3n2WeQ9J2puMJLjD607VIc7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ba:5c:68:4a:92:f1:15:96:78:2d:8d:7c:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=ac10df55fde9377beeb8a68b5e06476831efcbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:45:52:c9:f6:52:44:e6:43:a6:9c:1f:32:
c2:fb:ba:21:c6:5e:6d:8f:9f:11:55:6c:7c:39:11:
ea:30:86:a2:fd:0c:f6:ad:b4:dd:83:6b:b4:61:92:
f7:8e:02:46:1e:b4:96:ea:26:a1:b8:62:df:18:37:
4f:fc:56:d3:81:21:b6:bb:07:60:e4:2b:16:7c:06:
9d:75:5b:f3:f2:de:42:63:f3:4c:9c:e4:5e:58:c1:
d6:f8:e3:1a:79:36:b4:cb:31:18:7c:46:71:12:30:
35:fb:89:fe:20:48:3b:3b:da:72:c0:bb:f3:e9:d0:
f2:41:fe:3b:95:1c:11:28:24:9e:6b:d2:7a:29:ea:
29:e5:f7:3b:dc:eb:cb:56:c5:6a:58:82:12:98:be:
f8:34:f0:e9:fc:dd:c0:a9:a2:3e:13:ae:e3:ba:e2:
e2:2b:1d:3c:7b:42:c9:95:e0:a0:79:80:f1:e4:1b:
d0:75:1d:26:72:40:f3:93:cb:e4:fa:7f:8d:78:5a:
5e:15:c4:16:98:3d:17:c2:4a:f2:3b:ea:1c:05:d8:
b4:8e:96:1b:a6:9e:a7:9d:27:61:56:5d:b7:ef:2b:
65:9b:21:4b:8b:65:2d:41:b0:b5:b2:76:55:4c:eb:
8b:03:4a:4c:d0:02:8e:6c:f0:ec:cb:f9:ff:73:ec:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:DF:55:FD:E9:37:7B:EE:B8:A6:8B:5E:06:47:68:31:EF:CB:E9
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:5a:55:93:9a:d6:55:71:97:17:e9:f4:80:3c:3a:8b:62:
72:c6:7e:89:45:f4:20:9c:43:86:61:ce:19:44:b5:e6:14:ad:
ae:74:8f:13:1c:de:49:c0:29:ce:ad:06:15:33:f0:4e:b6:a0:
1a:e7:88:3e:0f:9e:8f:d4:7f:f3:af:95:e9:3b:44:45:25:3c:
d7:4b:63:4b:89:88:f0:46:be:04:64:fe:0d:84:5f:af:35:5b:
a8:0d:b0:fa:8a:fb:bb:b1:7b:10:b4:94:f9:c4:2e:b1:6c:93:
dc:de:34:e4:d7:01:a8:b7:21:8e:65:f3:d0:51:67:d3:01:c2:
88:bb:b4:09:0d:de:ed:63:b9:20:25:a7:3e:d9:2f:f5:be:e8:
57:67:42:3a:3a:bf:4f:75:84:f1:8f:f2:6a:3e:97:84:1c:a6:
d1:47:6d:3c:7a:42:df:84:81:9f:41:4e:b4:be:91:b8:2f:30:
44:a6:32:8b:5e:ec:80:eb:fe:ac:c8:fe:f6:26:8f:99:14:04:
18:4c:b3:2b:d1:f7:38:69:06:28:02:64:a0:57:d3:f3:93:9b:
1a:3d:08:da:e8:08:ec:c6:b7:e0:34:44:92:cc:24:68:a3:cc:
01:0f:ea:35:59:ac:1f:0e:65:da:22:17:c0:2a:82:b9:36:bc:
c1:05:91:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrpcaEqS8RWWeC2NfOd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I4ZjgxYjhkMzg4MmQ3ZGIxNzNhNTQ5MDA5NjYxMTU3
NDhjYmYwHhcNMjYwNDE3MDMwMTE3WhcNMjYwNDE4MDMwMTE3WjAzMTEwLwYDVQQD
EyhhYzEwZGY1NWZkZTkzNzdiZWViOGE2OGI1ZTA2NDc2ODMxZWZjYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJFUsn2UkTmQ6acHzLC+7ohxl5t
j58RVWx8ORHqMIai/Qz2rbTdg2u0YZL3jgJGHrSW6iahuGLfGDdP/FbTgSG2uwdg
5CsWfAaddVvz8t5CY/NMnOReWMHW+OMaeTa0yzEYfEZxEjA1+4n+IEg7O9pywLvz
6dDyQf47lRwRKCSea9J6Keop5fc73OvLVsVqWIISmL74NPDp/N3AqaI+E67juuLi
Kx08e0LJleCgeYDx5BvQdR0mckDzk8vk+n+NeFpeFcQWmD0XwkryO+ocBdi0jpYb
pp6nnSdhVl237ytlmyFLi2UtQbC1snZVTOuLA0pM0AKObPDsy/n/c+yKcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwQ31X96Td77rimi14GR2gx78vpMB8GA1UdIwQY
MBaAFNfLj4G404gtfbFzpUkAlmEVdIy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGIt
MmU4NzFjNTk3Zjk3LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGItMmU4NzFjNTk3Zjk3
LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwRaVZOa
1lVxlxfp9IA8OoticsZ+iUX0IJxDhmHOGUS15hStrnSPExzeScApzq0GFTPwTrag
GueIPg+ej9R/86+V6TtERSU810tjS4mI8Ea+BGT+DYRfrzVbqA2w+or7u7F7ELSU
+cQusWyT3N405NcBqLchjmXz0FFn0wHCiLu0CQ3e7WO5ICWnPtkv9b7oV2dCOjq/
T3WE8Y/yaj6XhBym0UdtPHpC34SBn0FOtL6RuC8wRKYyi17sgOv+rMj+9iaPmRQE
GEyzK9H3OGkGKAJkoFfT85ObGj0I2ugI7Ma34DREkswkaKPMAQ/qNVmsHw5l2iIX
wCqCuTa8wQWRgA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:57 2026 by rpki-client