Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: nsIBEQXt61Rkizf2WAsd/JDxdyzxF+Uf2VYFVrK9Qnk=
Subject key identifier: 76:E5:4B:B9:B0:58:6A:F5:11:25:B5:A5:A3:11:12:F3:2D:2C:64:4E
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019D6650C78EA6B7B01B409D5B6E67A71A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 18AD
Signing time: Tue 07 Apr 2026 05:01:03 +0000
Manifest this update: Tue 07 Apr 2026 05:01:03 +0000
Manifest next update: Wed 08 Apr 2026 05:01:03 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: IdSmfXTmLH/eIjOMeNTGYYcqWn/4kYfSDdpA7BHQTUA=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:50:c7:8e:a6:b7:b0:1b:40:9d:5b:6e:67:a7:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Apr 7 05:01:03 2026 GMT
Not After : Apr 8 05:01:03 2026 GMT
Subject: CN=76e54bb9b0586af51125b5a5a31112f32d2c644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:95:01:cd:89:17:22:4d:4b:99:1c:47:1d:
0e:ab:5a:dd:47:53:7d:97:88:a2:8e:9d:56:04:97:
47:29:14:03:2b:6b:bc:0e:12:f1:2b:2b:93:0b:99:
8e:51:c0:62:3b:90:0d:d5:bc:55:8a:ef:47:3f:ba:
e8:fe:c9:f4:cd:d2:49:19:bd:21:61:bb:3e:a3:db:
bc:e2:5a:8d:48:f6:26:9a:7d:09:48:6f:e3:3c:56:
0b:27:20:9d:ef:d7:ce:52:52:f3:04:d1:26:73:94:
f8:85:a2:0a:52:dc:6d:33:61:85:19:89:1e:af:76:
b3:fc:da:43:91:cd:38:e6:cd:37:53:74:d5:9e:e1:
99:7e:71:9f:ab:87:08:32:9e:85:d2:d1:33:7c:27:
e6:47:20:0b:e7:20:9a:c6:20:04:7a:1b:45:d3:b5:
b9:e7:fa:cb:7b:eb:69:e6:91:bf:77:ef:6f:a2:01:
ca:d4:c6:13:1d:64:d5:a4:0c:7b:71:fd:34:79:9e:
ea:c8:b8:ce:74:73:5c:9b:79:47:ac:b3:93:de:7f:
94:cf:ea:fe:9c:dd:2e:13:93:34:de:52:da:56:df:
c6:12:0b:56:3d:4a:69:8c:89:08:da:96:2e:6a:69:
6f:3c:16:d2:7c:e0:e4:8a:41:92:46:4d:de:c1:16:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:4B:B9:B0:58:6A:F5:11:25:B5:A5:A3:11:12:F3:2D:2C:64:4E
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e5:8c:65:6f:2e:8f:41:67:3d:56:6a:01:3e:e1:cc:77:5c:
6a:ee:98:6a:b6:2d:c3:5e:4c:37:2e:80:62:64:ad:2f:9f:ff:
6b:0c:6b:2a:34:7e:95:21:9a:1a:5f:30:c8:0b:39:09:ca:2a:
a8:3a:fa:d8:ef:34:7b:f6:f6:5a:a9:77:4d:1e:bf:51:cd:d4:
79:82:8a:99:48:3e:40:d1:18:8e:fb:c5:20:c9:91:53:66:3a:
d4:4d:ea:c7:57:a8:67:40:3e:bf:41:4b:2c:7e:84:46:cb:f2:
e5:57:3d:12:d8:43:45:b8:75:ae:2e:58:08:56:86:8d:cb:44:
ed:7f:71:75:cd:0c:92:10:91:53:20:0f:7e:d2:8a:5d:0b:ad:
f1:03:de:1e:48:b2:25:db:1f:99:f4:5a:d1:49:94:d6:63:17:
95:6e:f9:35:0f:61:ff:75:b0:13:5f:c0:5c:20:33:11:00:0e:
29:5f:93:8f:32:5f:4f:e4:3a:b4:7f:0a:15:5b:e2:13:fe:0e:
23:bf:cc:41:33:f6:c9:ad:bf:19:65:38:95:e9:13:59:b4:4d:
66:42:7a:2e:e1:e7:5b:54:fc:11:c6:7b:78:a1:12:6d:85:6e:
ce:6f:22:a5:d1:b0:a8:8a:ad:9f:4e:14:0b:1a:f8:5c:c8:7a:
95:07:ab:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1mUMeOprewG0CdW25npxqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjYwNDA3MDUwMTAzWhcNMjYwNDA4MDUwMTAzWjAzMTEwLwYDVQQD
Eyg3NmU1NGJiOWIwNTg2YWY1MTEyNWI1YTVhMzExMTJmMzJkMmM2NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPmVAc2JFyJNS5kcRx0Oq1rdR1N9
l4iijp1WBJdHKRQDK2u8DhLxKyuTC5mOUcBiO5AN1bxViu9HP7ro/sn0zdJJGb0h
Ybs+o9u84lqNSPYmmn0JSG/jPFYLJyCd79fOUlLzBNEmc5T4haIKUtxtM2GFGYke
r3az/NpDkc045s03U3TVnuGZfnGfq4cIMp6F0tEzfCfmRyAL5yCaxiAEehtF07W5
5/rLe+tp5pG/d+9vogHK1MYTHWTVpAx7cf00eZ7qyLjOdHNcm3lHrLOT3n+Uz+r+
nN0uE5M03lLaVt/GEgtWPUppjIkI2pYuamlvPBbSfODkikGSRk3ewRaj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHblS7mwWGr1ESW1paMREvMtLGROMB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOWMZW8u
j0FnPVZqAT7hzHdcau6YarYtw15MNy6AYmStL5//awxrKjR+lSGaGl8wyAs5Ccoq
qDr62O80e/b2Wql3TR6/Uc3UeYKKmUg+QNEYjvvFIMmRU2Y61E3qx1eoZ0A+v0FL
LH6ERsvy5Vc9EthDRbh1ri5YCFaGjctE7X9xdc0MkhCRUyAPftKKXQut8QPeHkiy
JdsfmfRa0UmU1mMXlW75NQ9h/3WwE1/AXCAzEQAOKV+TjzJfT+Q6tH8KFVviE/4O
I7/MQTP2ya2/GWU4lekTWbRNZkJ6LuHnW1T8EcZ7eKESbYVuzm8ipdGwqIqtn04U
Cxr4XMh6lQerKw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:46 2026 by rpki-client