Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: Q+8sJcQEnMevyPSSEKHNLcMvO/CXs7AWqx8n9A6T/cs=
Subject key identifier: C3:62:FB:DD:C7:4B:E1:3C:BD:28:38:33:2A:C7:05:02:2B:8D:60:31
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019D37C0983F9D18EDA0E95A69AF6F308590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0EBB
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: dtNDE5JFiDLtCFVX0C2sDDi4ERJ90Nmn+5TftOkp8Jc=)
2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:98:3f:9d:18:ed:a0:e9:5a:69:af:6f:30:85:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=c362fbddc74be13cbd2838332ac705022b8d6031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:2a:2e:51:32:d3:af:fc:f5:ac:da:2d:33:
cc:10:19:05:ee:41:3b:d4:39:c7:e1:0f:0a:47:8f:
5a:70:c4:3d:a0:1c:d7:81:73:7a:05:43:e1:a6:70:
15:9b:72:d7:2f:24:e4:5b:03:f2:fb:40:c3:cd:d8:
2f:ab:05:a7:56:7a:cb:21:5b:fd:f7:6c:74:46:d2:
fe:4a:a7:b9:a2:cd:db:f3:84:44:5f:84:e2:86:04:
d9:38:20:8d:b7:89:39:fe:11:f5:8d:af:3c:60:db:
e3:c3:a8:46:34:ee:b4:99:2a:6c:55:83:1a:7a:50:
dc:32:95:d6:0d:4a:54:9f:d7:c1:40:53:ee:92:ce:
c7:41:81:7f:2d:e3:b0:4a:9c:e9:2c:af:fd:41:af:
f9:a7:50:2f:da:a6:26:79:e7:a3:29:85:8c:4a:99:
05:f5:1a:df:69:80:7f:77:3f:9a:0c:00:ca:d9:da:
f0:cf:82:3e:c2:2c:b5:b6:89:fd:f3:9e:5a:95:1c:
83:8f:2d:90:2e:72:e9:0f:06:cb:40:74:80:5b:2d:
4b:27:6a:7d:65:23:94:c7:85:81:3c:b8:12:4e:a8:
94:37:c2:14:f1:8b:8f:0b:3d:1b:35:1e:64:32:85:
13:6d:fd:cf:0b:ea:fa:7e:44:4e:d4:ad:a2:41:24:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:FB:DD:C7:4B:E1:3C:BD:28:38:33:2A:C7:05:02:2B:8D:60:31
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:3f:d4:d8:04:09:d9:db:37:32:92:c0:79:21:a5:9a:ee:
9d:78:9d:4f:4f:1c:c0:77:0b:e0:ca:89:1d:b4:dc:22:f5:08:
87:de:54:9f:09:c9:26:da:32:c0:0c:9b:4d:fe:e7:06:53:ef:
dd:5c:cc:ca:d8:a4:17:cc:9e:c9:5c:61:84:60:25:1a:c2:d7:
3c:07:57:80:9a:f5:be:f0:80:bf:ff:8f:45:68:ec:41:39:1c:
ff:01:39:c5:48:3e:3e:5a:ef:78:ea:0c:de:a9:dd:e3:df:da:
24:e3:54:8f:fe:a4:67:35:f6:1c:7b:2f:f0:5c:62:03:25:d8:
4d:5a:bd:79:94:0f:e4:ee:3f:93:75:03:d0:40:75:74:ed:fe:
af:22:23:60:6c:77:a7:dc:bd:40:83:b3:c1:e5:2a:94:a6:1a:
d0:24:15:4c:0c:4d:86:db:b7:01:d0:b9:1f:2d:17:bb:d4:61:
17:fd:f2:3c:01:52:33:bf:65:fb:8e:63:07:6a:7f:f6:f2:46:
99:19:7e:85:83:30:00:69:ec:f3:c3:63:49:92:82:e0:c5:2c:
f6:52:2e:a6:48:64:b2:f1:e4:66:c1:db:5a:b3:1c:2c:a9:6c:
71:32:df:5b:66:8f:27:be:2f:2f:d5:25:d3:21:5f:3e:64:20:
ec:79:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client