Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File: 18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier: 2vrJl5+ytQsIN0tJMqzN/CjSb2YtxooaG0rVFjQtmSI=
Subject key identifier: B2:E5:19:40:BD:A8:A4:E3:D6:1A:23:A1:7D:22:F5:BE:A7:2B:2C:76
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 019D99CFC51D157B6A63427CCE95497D7A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number: 0EBF
Signing time: Fri 17 Apr 2026 05:00:23 +0000
Manifest this update: Fri 17 Apr 2026 05:00:23 +0000
Manifest next update: Sat 18 Apr 2026 05:00:23 +0000
Files and hashes: 1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: tVThrQq9TzLu4IXVXdSczRWxD8dLLDLwcqhQbKkVDW0=)
2: 42BFHGjX0bzPkKLzW4nj7c5jtTc.roa (hash: n6bWVgGKzyz1m/NGMgopOR2F2jnCFtpr5dDWpPXcm0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c5:1d:15:7b:6a:63:42:7c:ce:95:49:7d:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Apr 17 05:00:23 2026 GMT
Not After : Apr 18 05:00:23 2026 GMT
Subject: CN=b2e51940bda8a4e3d61a23a17d22f5bea72b2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:f9:24:d7:61:3f:c2:df:a4:e8:bf:b2:cc:
b4:09:2e:3f:57:b7:08:1e:88:11:ea:6d:00:41:2f:
4b:14:f5:54:bc:de:a4:a8:5d:65:b1:df:55:2c:0f:
2a:81:f5:fb:6a:c6:18:47:4b:9d:9d:1d:fe:00:ad:
76:84:83:71:75:f4:31:65:f9:4f:b5:67:3d:76:1e:
cd:a6:96:e2:a2:50:b9:eb:6c:74:b6:dd:e9:c5:66:
9b:9c:36:e2:fd:c1:ee:c6:1d:d1:8b:be:40:e8:fe:
c1:4f:66:86:3c:d3:39:88:e3:a2:03:40:c1:9c:6d:
98:f9:d8:5a:05:de:40:bd:0b:da:8d:05:a7:94:13:
e4:c3:a3:f5:62:f2:ea:8a:df:0d:9f:b7:76:89:a4:
fc:16:31:32:1c:88:90:29:e8:1e:b5:86:e7:c5:f1:
c8:b3:d9:9a:33:16:d9:5e:fe:e5:04:a0:8b:89:40:
1d:9f:dd:80:13:7e:52:15:80:49:0b:e7:b8:61:e1:
b8:da:93:f7:60:74:c5:ee:61:fc:72:df:93:f1:5a:
ba:6e:ab:15:29:d4:29:24:86:f3:6d:5c:88:50:04:
63:a4:6b:a2:27:3f:53:92:ae:59:55:a4:58:77:ac:
fb:a0:a0:7f:da:f3:71:4a:ec:05:70:0d:e0:63:d3:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E5:19:40:BD:A8:A4:E3:D6:1A:23:A1:7D:22:F5:BE:A7:2B:2C:76
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b4:16:ac:84:dc:9b:e2:d2:88:aa:3c:1c:3b:7d:7d:f8:ac:
69:aa:d6:48:ee:ec:d4:a3:72:d4:52:df:0c:f0:40:3a:97:f8:
3c:98:f3:b3:43:e8:f1:9e:31:e0:7e:1e:60:9c:b6:d9:a7:e9:
d3:a8:35:55:8a:39:dd:f4:d5:01:ee:18:95:f9:30:eb:ff:f2:
96:c8:8d:58:55:95:1b:5a:ec:c8:b6:31:55:f0:4e:4a:d9:a7:
78:81:bf:cc:dd:a7:b4:69:68:0a:9c:a3:06:29:79:00:8f:2e:
83:82:4f:c6:ca:c6:65:6c:20:a6:43:c6:a1:88:df:b0:b4:bd:
2b:47:07:4c:37:f7:5f:5e:75:86:f1:ff:d9:a2:f8:d7:ff:31:
ff:b2:f5:5c:b9:53:98:6d:e4:53:30:06:40:3f:ec:96:ed:d6:
1e:c7:71:98:e1:b8:53:fc:45:78:ca:1f:29:92:57:0e:21:dd:
b7:62:9c:c2:81:21:56:47:d7:52:6f:29:33:ef:11:59:8d:dc:
9a:27:49:23:f1:2f:56:a1:f8:0d:7a:74:55:40:46:67:1b:87:
49:95:8a:c7:c0:b0:41:0a:4b:55:ad:0b:8d:77:8b:89:a3:c6:
d7:e9:0f:35:de:53:f8:18:e6:72:f9:eb:fa:7a:f6:18:13:0f:
91:8d:59:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8UdFXtqY0J8zpVJfXpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi
NTQyNjAwHhcNMjYwNDE3MDUwMDIzWhcNMjYwNDE4MDUwMDIzWjAzMTEwLwYDVQQD
EyhiMmU1MTk0MGJkYThhNGUzZDYxYTIzYTE3ZDIyZjViZWE3MmIyYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gL5JNdhP8LfpOi/ssy0CS4/V7cI
HogR6m0AQS9LFPVUvN6kqF1lsd9VLA8qgfX7asYYR0udnR3+AK12hINxdfQxZflP
tWc9dh7NppbiolC562x0tt3pxWabnDbi/cHuxh3Ri75A6P7BT2aGPNM5iOOiA0DB
nG2Y+dhaBd5AvQvajQWnlBPkw6P1YvLqit8Nn7d2iaT8FjEyHIiQKegetYbnxfHI
s9maMxbZXv7lBKCLiUAdn92AE35SFYBJC+e4YeG42pP3YHTF7mH8ct+T8Vq6bqsV
KdQpJIbzbVyIUARjpGuiJz9Tkq5ZVaRYd6z7oKB/2vNxSuwFcA3gY9PABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLlGUC9qKTj1hojoX0i9b6nKyx2MB8GA1UdIwQY
MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt
OWM5MDJjNjZlZTk5LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5
LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrQWrITc
m+LSiKo8HDt9ffisaarWSO7s1KNy1FLfDPBAOpf4PJjzs0Po8Z4x4H4eYJy22afp
06g1VYo53fTVAe4Ylfkw6//ylsiNWFWVG1rsyLYxVfBOStmneIG/zN2ntGloCpyj
Bil5AI8ug4JPxsrGZWwgpkPGoYjfsLS9K0cHTDf3X151hvH/2aL41/8x/7L1XLlT
mG3kUzAGQD/slu3WHsdxmOG4U/xFeMofKZJXDiHdt2KcwoEhVkfXUm8pM+8RWY3c
midJI/EvVqH4DXp0VUBGZxuHSZWKx8CwQQpLVa0LjXeLiaPG1+kPNd5T+Bjmcvnr
+nr2GBMPkY1Zjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:48 2026 by rpki-client