Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: dZp+bKtcDyJPf2MhiJWwCBSgBR9xKIYcqR7O4uxnIw0=
Subject key identifier: 8E:73:81:7D:2B:F8:B9:93:FC:2B:C5:E2:DC:AB:FE:02:3C:F0:B4:58
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 019FA899C0736516CA46071764D379CA62FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 12:01:16 +0000
Manifest this update: Tue 28 Jul 2026 12:01:16 +0000
Manifest next update: Wed 29 Jul 2026 12:01:16 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: IdzV4tFsJdjfnOQdU+XkmfI1v72MRBPVRLlOjKo2rHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c0:73:65:16:ca:46:07:17:64:d3:79:ca:62:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Jul 28 12:01:16 2026 GMT
Not After : Jul 29 12:01:16 2026 GMT
Subject: CN=8e73817d2bf8b993fc2bc5e2dcabfe023cf0b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:44:3f:d7:fb:93:22:0a:ef:82:86:68:d9:
db:6d:c2:e7:42:dc:89:66:5c:3c:10:51:45:a4:78:
9d:d3:1e:bc:77:ce:04:44:2c:ae:49:4a:d3:05:1c:
52:2f:62:0c:c1:44:ee:0c:50:a3:6b:36:a3:bc:d4:
95:aa:b4:54:8f:76:22:1d:00:d2:fa:68:58:15:bd:
08:b7:5a:d6:f7:14:ed:2b:52:52:92:ab:70:68:0f:
7e:49:83:e1:90:f4:8f:3a:7a:3d:dc:8e:18:64:24:
ae:9a:5c:00:17:e2:88:b6:4b:1c:08:b5:48:12:5b:
50:50:2c:fe:f0:96:20:57:dd:2d:4f:29:c8:4a:fd:
90:44:c3:bd:9a:90:63:8b:8a:c9:16:a9:4b:96:26:
90:7f:73:84:d6:ce:04:fe:b0:da:b8:a4:eb:9e:4b:
59:3c:60:1b:10:ec:e6:a7:f7:b0:34:c5:dc:a0:d9:
3a:e7:df:0d:a5:00:68:73:0d:85:33:16:ba:54:3d:
76:fa:0f:9c:0a:88:e9:7e:5b:cd:1c:36:a2:b4:24:
d2:e0:24:b8:a9:d0:c1:19:38:0e:bc:07:5e:83:03:
ad:24:36:8c:3c:6b:66:7e:d8:06:46:33:54:f4:8b:
84:66:be:be:3d:24:c4:3c:ea:6b:56:b1:63:8b:05:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:73:81:7D:2B:F8:B9:93:FC:2B:C5:E2:DC:AB:FE:02:3C:F0:B4:58
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:9f:a4:9b:10:47:0a:f9:8f:f5:7a:a0:37:e6:cd:bb:98:
40:e6:f5:59:5b:82:8d:c9:c7:0b:38:bd:b5:4e:ce:61:7f:91:
41:78:8e:50:22:e4:69:f4:40:4e:ca:92:4a:0f:59:1b:bf:2d:
2b:3f:4c:42:a1:e3:2d:55:9c:2f:bf:61:9d:87:42:f3:cd:61:
fe:35:c9:8d:f0:10:d9:35:1c:be:b9:20:34:72:34:04:11:dc:
68:88:ff:64:a6:17:11:2e:be:8d:b2:ac:c5:2a:e8:a0:48:c4:
43:1a:0b:04:7d:0c:19:a4:7f:01:51:c0:66:08:ff:fb:69:c2:
2c:59:3c:76:e8:a6:97:2d:92:97:f3:2b:2a:56:90:fc:8e:6d:
d5:86:cc:75:96:65:5a:f5:a2:ae:ef:81:9f:97:0f:48:23:7f:
d2:52:33:e6:53:2b:69:a8:0f:0e:7a:ea:5e:a0:d2:79:6d:38:
61:3b:8e:a5:7a:73:de:2e:76:f8:b8:bf:af:05:bc:03:e6:08:
49:c9:94:ad:f9:e4:ae:35:76:b2:54:4a:c2:04:35:9e:4d:6a:
1c:b4:99:92:b2:8d:7c:7f:88:b4:cc:78:6b:5f:8a:d0:40:a0:
3b:08:cf:67:94:96:8c:99:f9:9d:db:88:a7:50:4a:36:1d:ad:
88:f8:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:11 2026 by rpki-client