Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: vLNFW/zaTq8yGL6bTkL7qFBzE1KgQXH1DOIJuUfeiX4=
Subject key identifier: BA:A6:C2:8A:FD:1C:90:64:35:23:B7:13:46:6F:B5:3A:B5:23:F3:49
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019CAD22548DA4C87B20F5E6D90A4CD02F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: vQzYDB92T1gKtnFOjYDOePXp4ZUDmUEYCYJ5y2BzxVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:54:8d:a4:c8:7b:20:f5:e6:d9:0a:4c:d0:2f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=baa6c28afd1c90643523b713466fb53ab523f349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:ff:de:4b:1d:f9:01:16:87:b9:e2:fe:42:
c2:c8:eb:7c:73:61:41:c7:27:6e:3a:b2:f0:22:ab:
05:fb:b7:12:af:b4:de:0f:69:e3:3b:52:ff:e0:ec:
88:d5:35:06:83:f9:81:fd:1e:fc:86:ff:95:b3:73:
36:f5:c2:6a:a1:db:70:4b:ca:42:34:7c:76:3e:9f:
45:55:66:b6:a1:b1:ee:02:d9:33:25:eb:c3:4b:4a:
c2:77:53:f8:32:4c:d7:65:e4:04:b4:86:9c:f6:0f:
f1:6f:eb:86:81:e5:27:b5:43:4d:46:7e:33:4a:88:
fa:e2:d2:bf:40:1d:be:65:d2:76:f2:1a:4c:ab:2f:
2a:37:9b:c7:fb:23:b7:27:ef:03:bd:c6:ac:d6:2b:
6f:af:0f:7d:42:d4:54:70:8c:cf:cd:47:91:b1:d5:
c6:a6:1e:04:ce:25:7d:81:f3:96:12:de:b7:6c:94:
bc:d9:6a:9e:8e:99:19:f9:3e:ee:95:3c:be:a6:fc:
8e:d3:f0:0c:aa:77:58:1b:98:97:4c:e1:b6:e1:e7:
93:16:57:1c:cb:be:92:e6:c7:56:07:d0:e3:bf:cb:
17:0c:38:3f:3e:54:20:b2:98:2d:53:ca:04:72:55:
20:40:08:a0:2b:93:11:71:54:40:e2:fe:98:3b:02:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:C2:8A:FD:1C:90:64:35:23:B7:13:46:6F:B5:3A:B5:23:F3:49
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:c5:ef:d4:fb:d8:ae:07:10:4c:b5:6c:02:91:1a:97:23:
fb:fb:ea:cf:71:43:e5:05:65:a3:b2:b4:68:02:1b:17:04:01:
65:5c:39:4f:3c:da:9b:08:bc:5a:65:1b:10:1f:8d:6d:2f:de:
71:9b:24:9f:0d:2e:94:43:57:2d:5a:88:b4:55:9a:f0:54:10:
ff:e3:44:6e:eb:6b:8e:87:4e:20:4c:e6:1f:c3:19:72:e6:81:
0c:97:68:94:53:32:c4:64:af:99:66:71:40:1d:95:ac:09:ed:
d9:9c:6e:19:d3:e5:9b:89:58:0b:c1:56:b3:00:42:f2:fc:9b:
84:10:b0:66:bb:e2:7f:3c:e5:a2:73:a1:2d:c6:10:fd:57:f7:
20:46:9c:1e:43:28:cf:91:d7:80:6b:33:cd:a4:e3:0f:cc:98:
fc:18:4e:ad:0a:5f:1b:9f:3f:3e:75:60:68:02:47:8f:1b:f9:
ce:e4:93:73:47:96:8b:1d:a3:3d:e4:d5:60:b3:6a:cc:88:ca:
33:a8:b8:1a:3b:4a:4b:e2:9d:66:7b:53:0d:c8:33:a7:96:3b:
25:f5:08:f2:cd:34:67:26:3b:37:e8:38:3c:ff:77:59:90:61:
c1:66:e3:1e:0b:01:ef:e9:ec:d6:79:f8:07:1c:aa:f7:71:fc:
91:ca:4f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlSNpMh7IPXm2QpM0C9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx
YzRlYWYwHhcNMjYwMzAyMDYwMDM0WhcNMjYwMzAzMDYwMDM0WjAzMTEwLwYDVQQD
EyhiYWE2YzI4YWZkMWM5MDY0MzUyM2I3MTM0NjZmYjUzYWI1MjNmMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLz/3ksd+QEWh7ni/kLCyOt8c2FB
xyduOrLwIqsF+7cSr7TeD2njO1L/4OyI1TUGg/mB/R78hv+Vs3M29cJqodtwS8pC
NHx2Pp9FVWa2obHuAtkzJevDS0rCd1P4MkzXZeQEtIac9g/xb+uGgeUntUNNRn4z
Soj64tK/QB2+ZdJ28hpMqy8qN5vH+yO3J+8Dvcas1itvrw99QtRUcIzPzUeRsdXG
ph4EziV9gfOWEt63bJS82WqejpkZ+T7ulTy+pvyO0/AMqndYG5iXTOG24eeTFlcc
y76S5sdWB9Djv8sXDDg/PlQgspgtU8oEclUgQAigK5MRcVRA4v6YOwJ7swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqmwor9HJBkNSO3E0ZvtTq1I/NJMB8GA1UdIwQY
MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt
Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz
LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV7F79T7
2K4HEEy1bAKRGpcj+/vqz3FD5QVlo7K0aAIbFwQBZVw5Tzzamwi8WmUbEB+NbS/e
cZsknw0ulENXLVqItFWa8FQQ/+NEbutrjodOIEzmH8MZcuaBDJdolFMyxGSvmWZx
QB2VrAnt2ZxuGdPlm4lYC8FWswBC8vybhBCwZrvifzzlonOhLcYQ/Vf3IEacHkMo
z5HXgGszzaTjD8yY/BhOrQpfG58/PnVgaAJHjxv5zuSTc0eWix2jPeTVYLNqzIjK
M6i4GjtKS+KdZntTDcgzp5Y7JfUI8s00ZyY7N+g4PP93WZBhwWbjHgsB7+ns1nn4
Bxyq93H8kcpPkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:27 2026 by rpki-client