Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: IJjlAdwHQ9Iwjz7pAJQTzvrPaBS+vaJDRNWrYOrYXDQ=
Subject key identifier: A5:C1:78:B3:EC:29:BB:9B:B6:F9:38:A1:0B:83:70:08:63:0B:D9:58
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 019CABD8F4552B4DA78F1EFDC8CC9F0ED403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: hNunE6rnLe0AGxcFsrq8xA5sS/oA+BgwZnVlC36UrbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f4:55:2b:4d:a7:8f:1e:fd:c8:cc:9f:0e:d4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=a5c178b3ec29bb9bb6f938a10b837008630bd958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:ff:92:21:8a:37:81:b7:6a:1e:e0:dd:d0:
af:5b:1d:36:37:aa:04:22:b1:0d:a5:05:ef:91:db:
cf:a8:23:fd:64:ff:e5:9a:0e:ef:b4:60:c6:2a:a1:
84:ad:82:1d:ff:ed:25:04:df:95:6e:27:d2:16:a1:
0e:50:13:3f:a8:98:c0:e4:d0:fd:a8:68:5f:00:d2:
e9:46:3e:29:32:7b:a1:64:fe:e4:aa:0b:bf:71:50:
d0:d9:8e:7c:03:e2:aa:01:dd:9e:d4:e9:68:78:41:
cf:08:12:df:6c:61:69:31:9e:3c:b9:ed:36:3d:34:
98:de:51:1f:86:6c:5b:21:b0:fc:49:ac:44:70:24:
40:4c:54:e0:c3:f8:a8:82:9a:f4:bb:ed:1a:49:e6:
4f:94:bb:a8:c4:7d:e8:5c:67:ea:c0:8a:51:68:7c:
cf:bb:45:02:06:77:c1:22:15:2c:53:1c:90:4c:47:
99:0d:2c:f2:e5:ad:d6:44:90:56:f1:24:cd:f6:2f:
40:3a:07:e8:fe:7a:38:d1:bd:a3:11:22:61:3b:d2:
b4:52:ae:61:57:1f:a6:61:4c:84:ce:2c:97:a8:4d:
18:60:7f:b9:30:17:41:62:2f:ee:7f:dc:0e:3e:9a:
f0:4e:be:5e:db:4d:a4:18:fa:88:08:28:d2:0f:4e:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:78:B3:EC:29:BB:9B:B6:F9:38:A1:0B:83:70:08:63:0B:D9:58
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:9c:5f:dc:e7:06:ad:94:a7:b2:6d:dc:8d:51:05:c5:68:
a9:00:5b:97:f3:38:81:62:c5:85:8f:91:a1:31:79:47:df:02:
e3:43:a1:22:23:bd:80:f4:9d:e8:17:22:27:1c:c8:20:18:17:
95:c9:f6:d0:36:58:82:f0:95:a0:a2:1b:e9:5e:27:c3:a3:17:
ee:ba:db:d3:d0:1b:80:58:45:fc:83:23:a7:ea:4a:40:47:aa:
51:a3:c8:ac:9d:32:f7:ae:ea:b0:58:0b:7b:56:5b:99:14:99:
af:dc:87:ab:db:75:17:f6:92:ac:78:18:b6:ad:66:ee:b0:cc:
76:b6:94:15:da:b7:49:cb:7f:31:1b:81:4c:8f:d5:45:c9:4b:
37:6b:9b:d9:69:85:25:8f:d2:57:da:ba:a8:b7:1f:93:c3:e1:
6b:97:60:58:c5:51:c7:eb:88:1a:aa:03:9e:c0:0a:ea:2b:db:
04:56:81:52:e5:1c:2c:82:9d:e8:b5:63:74:2e:b3:10:04:f6:
b3:c6:01:86:41:a1:73:7f:e9:c8:dd:91:48:2c:e3:ee:e9:98:
af:0a:f0:47:b6:2c:27:bd:c3:4d:4f:f3:6e:e2:28:7f:4c:c2:
03:3a:60:aa:f5:7e:b1:f6:ce:b4:dd:e6:50:d2:6f:82:05:7c:
8a:44:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:54 2026 by rpki-client