Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: VZg9cyAjLx91eGYoysMIDITztBfzewM1Vfd+w94F7O4=
Subject key identifier: 6A:D6:B8:CC:9E:92:A9:F1:10:34:0F:A6:25:26:F1:D5:85:F0:5C:93
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 01A0CA46AA002BCC5DB5ED8D9F49A43FB24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 18:00:23 +0000
Manifest this update: Tue 22 Sep 2026 18:00:23 +0000
Manifest next update: Wed 23 Sep 2026 18:00:23 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: bwSG4a1ooZK9SZNze3kpa0utJVSmMqleJy1ToDN7Pt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:aa:00:2b:cc:5d:b5:ed:8d:9f:49:a4:3f:b2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Sep 22 18:00:23 2026 GMT
Not After : Sep 23 18:00:23 2026 GMT
Subject: CN=6ad6b8cc9e92a9f110340fa62526f1d585f05c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:9a:b4:e5:11:7f:72:ac:76:0f:ac:d1:e8:
3f:e8:36:57:fc:3c:e9:a7:ce:7f:4b:90:eb:26:2b:
df:60:4d:de:ab:07:7b:99:40:ba:32:b8:12:fb:23:
b7:42:41:5a:45:0b:40:d4:a3:e8:5c:f9:b8:99:82:
36:f7:9c:76:5a:29:7d:77:0b:e1:50:85:ae:b9:9c:
04:6a:6b:9e:87:eb:c5:bc:5a:fa:75:aa:f1:75:b4:
59:dc:2b:1c:67:da:bd:a3:61:b2:c9:e1:5c:31:f5:
78:d7:36:05:9e:63:ae:6d:5c:d4:fc:8a:d9:4e:46:
f2:0f:d1:d6:f2:d4:86:56:1c:66:92:ac:ae:42:3e:
b6:60:40:65:c7:ca:cb:f0:e1:2b:da:5f:28:8b:eb:
0d:87:0c:92:4e:18:55:07:83:5e:b1:f5:64:e3:b2:
0b:d3:d3:b1:9d:e1:3d:66:00:30:f8:38:21:55:b3:
90:95:c8:5f:a1:c3:50:49:7d:04:dc:48:cc:fa:a7:
88:59:c4:75:73:f9:b3:f1:88:01:15:4e:7f:3b:11:
fa:fd:e3:1c:28:69:0c:99:9e:1c:ee:a6:62:ac:14:
15:e2:ad:c8:d1:e7:fd:f7:5b:90:33:3b:df:f8:c0:
e5:90:49:02:91:bc:2a:e8:4b:f2:39:20:7a:58:57:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:B8:CC:9E:92:A9:F1:10:34:0F:A6:25:26:F1:D5:85:F0:5C:93
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f4:1b:42:66:2e:7c:b3:77:bc:c8:cd:56:5d:74:ee:e4:d9:
57:51:88:75:d8:13:e1:7b:0a:c2:50:18:23:5d:2b:4b:8b:c8:
17:70:d3:93:4a:6b:de:c4:bb:82:30:34:c2:1f:fa:e4:d9:36:
df:9c:4c:cc:6c:03:20:7e:60:e0:7e:af:c9:d8:e6:6b:ff:38:
97:39:b0:dc:23:3e:76:46:d1:21:a4:78:87:ad:2d:88:7a:cd:
55:fc:9d:ae:4f:1b:ce:90:a7:4c:a6:45:30:c8:24:e1:18:d9:
5e:ed:9e:f0:58:08:b6:d9:71:ba:23:c6:f5:88:ce:df:9f:cb:
78:39:fa:e1:b5:0c:db:45:c8:74:55:e0:9a:a6:5f:5e:ce:38:
df:bd:d4:f4:69:d7:bf:c1:ca:18:2b:b0:33:3c:74:64:8d:05:
0b:1b:e2:f4:63:c0:9c:a5:27:cd:ce:61:71:1b:e7:ce:ff:d5:
25:80:09:cd:c2:9e:24:24:80:6e:06:31:34:a5:22:b1:47:44:
b4:85:f9:d5:93:f7:44:21:2b:47:63:15:c8:d9:07:b8:4a:e3:
3b:a9:45:06:d5:77:c6:31:c1:2f:b5:33:4b:7f:2e:37:4a:e4:
25:11:85:92:af:1e:c7:ac:8f:a2:df:c8:e3:b7:8a:21:cf:b0:
f2:31:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:01:32 2026 by rpki-client