Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
File: 18670561BFA9D2336DFAA180C44342B046E19ABC.mft (raw, json)
Hash identifier: cOr2HTGOJlbeyA+EZutdI54SsIDJOt1uqqvoOj5o67I=
Subject key identifier: 20:DD:C0:E0:48:61:8C:04:0E:E3:4E:63:79:B8:B3:4F:DC:29:99:47
Authority key identifier: 18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
Certificate issuer: /CN=18670561bfa9d2336dfaa180c44342b046e19abc
Certificate serial: 4931C98D45F31539329E467B9A7890D7F8A6CEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
Manifest number: 2A
Signing time: Mon 21 Sep 2026 05:39:41 +0000
Manifest this update: Mon 21 Sep 2026 05:34:41 +0000
Manifest next update: Tue 22 Sep 2026 09:28:41 +0000
Files and hashes: 1: AS204464.asa (hash: 2PCJGP/4Ki50381rjrEHlPjppnpXzxcouZLOIhoy8+s=)
2: 18670561BFA9D2336DFAA180C44342B046E19ABC.crl (hash: W4I63e8cqmJ/O66J2BhBKi0wcHcVfnIldXXvyJSeNB0=)
3: AS199746.asa (hash: 6phOsnbPp+kfdXunJCauvtcNnYa9yG3rIH0ws06Ggt8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:31:c9:8d:45:f3:15:39:32:9e:46:7b:9a:78:90:d7:f8:a6:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18670561bfa9d2336dfaa180c44342b046e19abc
Validity
Not Before: Sep 21 05:34:41 2026 GMT
Not After : Sep 22 09:28:41 2026 GMT
Subject: CN=20DDC0E048618C040EE34E6379B8B34FDC299947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:11:ed:9b:40:2b:47:26:29:99:f8:6c:0f:
21:41:aa:68:be:e6:fe:5e:f4:28:2c:59:5f:7f:85:
cd:0f:84:38:45:e5:e9:3a:b9:7d:01:6a:bb:1e:8b:
4b:f3:8a:34:ff:12:ed:1b:c8:a6:a1:08:f6:9c:e4:
16:ba:a0:be:6a:a2:74:da:c4:77:13:8c:1f:0f:3e:
05:ed:f0:6d:ce:8d:20:63:f2:4f:6c:b9:3e:e8:39:
bf:ab:e8:56:b1:d8:fa:d8:f9:53:cc:9c:d0:31:12:
0c:54:7d:5b:d7:2a:cb:68:fe:a4:de:08:79:aa:22:
5d:d5:92:1e:c2:fb:c9:c2:1b:60:51:29:da:6d:5e:
95:e4:7d:10:3a:c5:e6:70:b4:d4:b1:0f:1b:8d:99:
db:a2:d6:7d:9d:89:a4:ba:c3:7d:a3:0b:7b:d0:0a:
f9:99:a1:84:f9:00:7c:60:60:a1:05:1c:3e:47:66:
47:6c:4c:f8:3e:42:91:1f:ec:69:bb:d5:61:88:03:
e5:cb:6a:29:83:a8:af:43:83:59:61:78:72:49:8e:
4b:59:2c:46:37:21:30:1f:5c:a3:c8:fd:6f:e9:f0:
b3:32:5e:1a:29:48:9b:24:ce:85:4a:b7:a9:b6:6a:
9f:c6:e3:b1:dc:3a:8c:35:10:55:a1:1b:7a:43:94:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:C0:E0:48:61:8C:04:0E:E3:4E:63:79:B8:B3:4F:DC:29:99:47
X509v3 Authority Key Identifier:
keyid:18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a1:ab:c0:7f:9c:74:f9:62:36:cc:d0:04:55:e7:ca:f0:ae:
cf:d6:ae:26:29:ae:22:df:f9:c9:9e:9f:4e:a0:8d:8c:6f:d3:
c5:fa:8f:ee:42:85:32:34:56:6b:b6:f2:5a:fe:cd:7e:41:b7:
ad:51:07:74:6d:0b:80:55:5c:ee:69:5b:c8:3e:34:6c:f3:93:
44:03:6a:7a:96:fa:22:75:10:ec:db:37:ed:68:b7:ce:19:47:
27:42:b8:04:35:2b:81:f8:d3:94:8f:78:08:78:37:ef:91:d9:
72:19:f3:91:59:1e:33:a6:aa:e3:b7:f2:c2:b0:19:73:f2:cd:
c1:30:22:7a:8f:a5:eb:98:fd:de:13:58:92:59:9d:95:11:02:
b3:39:21:51:1e:81:22:a4:34:cb:1e:8c:01:01:58:fb:cc:33:
62:04:d0:80:81:78:80:94:a2:36:d6:54:2c:43:11:48:45:83:
e7:d5:1f:af:36:d3:13:07:33:80:db:0b:3e:c1:33:aa:a5:f4:
2d:ca:f5:0b:27:07:fd:d1:1b:5b:07:0a:f2:8e:d0:fa:f6:46:
75:8e:30:8e:da:1f:a6:da:d5:e1:2d:60:4e:54:2e:ee:e0:c1:
f7:76:97:7e:14:a7:13:4c:4e:36:bb:7e:eb:cf:ed:0b:b5:58:
b2:95:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:52 2026 by rpki-client