Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: 24PJ2zm/xy6jZ6GIFEaAAm2MsSvDd1IpJCqCko/Lp5g=
Subject key identifier: 66:FB:32:E8:50:02:E6:8C:35:A1:18:8D:0B:56:1A:35:C8:B1:D9:7C
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 01A111171C4096A2CAB62E62292282448253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1A98
Signing time: Tue 06 Oct 2026 12:01:29 +0000
Manifest this update: Tue 06 Oct 2026 12:01:29 +0000
Manifest next update: Wed 07 Oct 2026 12:01:29 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: is8PLdWaRXCuISUkQg4O9Ls3vNSc2+EWrhFumdIik+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:17:1c:40:96:a2:ca:b6:2e:62:29:22:82:44:82:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Oct 6 12:01:29 2026 GMT
Not After : Oct 7 12:01:29 2026 GMT
Subject: CN=66fb32e85002e68c35a1188d0b561a35c8b1d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:de:14:fa:10:e0:d4:4c:4f:72:fa:75:f4:
8f:00:0c:3d:39:f8:12:54:83:dc:3c:51:66:7b:4c:
92:ab:7e:cc:1a:42:05:1a:90:81:0e:97:ae:7f:9d:
ca:ce:26:a1:07:1a:ac:11:a0:75:60:15:d8:22:7e:
07:53:f6:d8:87:d9:57:40:25:3e:93:ac:01:53:24:
20:9d:27:bb:69:e8:bc:aa:fd:6c:30:4d:59:c1:0d:
39:01:52:ba:b9:4e:b1:ce:fc:68:e8:cd:4d:08:81:
6c:c6:41:42:0c:27:71:a2:24:aa:f5:66:df:fa:40:
d9:80:27:cf:d6:d4:58:20:af:21:7c:1f:18:2e:ef:
c6:63:f1:84:ec:e6:ce:28:04:05:f0:58:d1:e1:d6:
32:70:49:f6:79:12:fe:4c:a6:ea:65:d9:9a:14:55:
0f:38:98:d1:ca:03:c1:19:89:ce:03:af:9a:d8:6d:
10:ae:1d:96:d8:ab:6e:b5:5a:94:2e:21:a1:a4:bd:
5f:75:49:ed:c3:d4:57:5d:82:59:7e:29:11:94:07:
25:71:6e:ed:c6:57:d4:2e:9d:6e:a8:82:67:2b:ba:
73:0d:21:76:b2:df:cd:1b:cd:18:62:9f:63:11:7e:
aa:d9:1d:26:26:2b:ca:09:9f:55:fc:67:73:9f:fd:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:32:E8:50:02:E6:8C:35:A1:18:8D:0B:56:1A:35:C8:B1:D9:7C
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:25:17:4b:39:c4:04:e2:9d:d5:b9:be:63:2b:70:3c:74:
5b:3b:33:81:95:5b:f0:dc:df:73:c4:f0:de:18:cd:83:be:1a:
70:aa:a9:54:45:c8:e5:33:ab:42:ae:58:c5:f8:a3:af:8b:0e:
7c:dd:e0:ae:6f:7c:94:83:6d:a9:8b:54:c3:22:57:c1:a6:a4:
fe:80:e7:15:2b:e0:14:8b:9b:ce:62:2f:b5:7c:6f:23:f4:d3:
a8:da:3d:c9:0f:2c:52:e8:b0:0f:1f:d2:ad:25:e6:ea:d8:4b:
26:8f:55:dd:f6:04:80:7d:fc:57:84:89:c5:66:12:5d:8a:5e:
bd:5a:40:b0:cd:a6:50:43:33:30:eb:cb:0e:40:1e:60:4a:d7:
f4:62:db:58:8d:14:ae:c1:b2:34:57:15:3e:1a:e7:e2:19:dd:
68:ea:94:93:85:9c:1d:63:95:23:8d:0c:52:9a:61:1c:b6:43:
62:1a:2f:92:fd:37:4d:24:f6:7d:58:2b:74:92:80:5a:94:67:
38:40:b3:f7:58:be:06:c4:25:5d:b0:47:48:6a:e0:93:04:c6:
b6:99:e2:52:3a:79:47:07:7d:f4:f1:54:52:85:83:85:2c:4d:
60:e7:74:fb:4c:ae:7c:b0:8c:4a:4b:6e:9d:87:f3:bc:ab:70:
22:89:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:01:31 2026 by rpki-client