Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: miPgENenTLGTra6+dTb0D+/E50OQgT59h70PL78yonw=
Subject key identifier: 0E:84:06:DC:02:45:7F:EA:1C:A5:D2:D0:07:6F:68:56:09:2D:26:68
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019D9C9A95AD61297E381FAC1AA03A2BF98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 18CE
Signing time: Fri 17 Apr 2026 18:01:09 +0000
Manifest this update: Fri 17 Apr 2026 18:01:09 +0000
Manifest next update: Sat 18 Apr 2026 18:01:09 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: ZRhUuBAjxsCEeMEGqejsP9iJUYqMu0qipKt1tZ2iUZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:95:ad:61:29:7e:38:1f:ac:1a:a0:3a:2b:f9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Apr 17 18:01:09 2026 GMT
Not After : Apr 18 18:01:09 2026 GMT
Subject: CN=0e8406dc02457fea1ca5d2d0076f6856092d2668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:79:a8:f9:a0:27:7e:b1:f3:00:68:a1:44:
1f:1a:57:6d:24:32:7d:e6:6f:c7:8a:ea:25:97:87:
8a:3e:13:38:84:d8:73:79:48:b2:2d:0d:7d:ac:2d:
97:cd:8c:a0:5f:50:97:c8:93:de:a6:6b:15:d9:a4:
6f:5b:75:11:46:27:c9:61:ad:5a:db:cd:4d:15:b4:
bf:6d:52:1f:bc:35:ae:e2:43:8b:d6:30:4e:69:de:
bb:47:54:dd:f3:15:bf:5c:e9:a5:fc:9c:9a:c4:ca:
29:12:a4:63:27:9f:6c:6e:3a:af:d2:13:80:40:58:
04:1e:4c:d3:b7:64:06:4b:67:45:b7:24:ab:fb:64:
4a:85:26:88:67:80:6e:1c:c3:0e:66:63:2f:87:4a:
ca:ac:11:93:3b:00:44:f5:30:04:fb:88:5e:b8:c4:
eb:fa:8d:74:07:ba:c3:09:a0:8c:2d:85:21:d3:da:
a6:68:bd:d9:ee:1a:6c:86:6b:cf:68:30:d2:12:dc:
24:81:dc:22:66:23:9f:20:ff:9f:66:d0:e3:c6:a2:
ca:f4:f4:50:62:c8:fb:28:1b:6d:19:40:4b:62:7a:
79:b8:2e:f8:34:7e:aa:b9:9b:39:a6:d2:5e:f7:cf:
1a:dd:0b:ea:00:62:a1:b7:fd:3f:4e:3b:98:2a:66:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:06:DC:02:45:7F:EA:1C:A5:D2:D0:07:6F:68:56:09:2D:26:68
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:da:ac:da:de:1b:3d:99:f1:2f:0e:e4:66:87:02:b9:80:49:
8f:66:db:1d:a7:1e:44:17:1f:36:52:94:6b:90:3e:3a:c5:e5:
1e:86:b8:21:48:76:cf:f8:18:80:ca:9b:5f:ab:30:0b:20:47:
f2:aa:99:cf:95:0f:53:dc:31:49:c2:26:e6:03:9f:b3:cb:da:
cf:48:c7:99:f8:bb:a3:46:5f:3c:7d:90:60:de:fc:83:3c:b9:
0b:73:24:e8:a4:b0:4f:3b:96:8e:3e:08:4c:68:70:f6:b1:f3:
64:e0:af:24:53:c6:35:8f:29:56:c7:35:f6:8c:74:77:ed:8b:
be:98:ed:fe:0d:bd:0f:43:2a:1f:89:cf:75:91:1a:55:86:00:
5a:c4:de:a8:77:3a:a0:29:e2:f2:8d:01:22:dd:f8:b1:b9:b5:
8b:af:18:78:e8:d6:31:db:7a:74:72:b7:98:18:4f:13:38:4d:
91:92:78:46:ce:28:49:54:cd:c1:fd:5f:a1:3c:df:52:1d:e4:
34:c0:75:85:bb:75:ff:61:2c:bb:bc:9b:2f:ee:2a:6f:5f:7f:
79:43:37:da:ae:a2:ce:0f:e2:c6:9f:ad:98:8b:ba:de:e3:12:
1f:ec:c1:2b:55:6a:95:1a:88:ed:63:cb:2a:cf:da:89:21:34:
46:ef:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:11 2026 by rpki-client