Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: ng+BN+uzMAOYkPVk6T89WTThOQoMufBEr43wjZgJBFk=
Subject key identifier: CB:94:C9:0D:F3:A0:C9:5E:08:EF:CD:D1:F7:77:81:F0:DA:00:AC:FF
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 01A13D133BD95B5310F63491E80F986F7930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 01:00:32 +0000
Manifest this update: Thu 15 Oct 2026 01:00:32 +0000
Manifest next update: Fri 16 Oct 2026 01:00:32 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: lBGL9QyToxTHJ67YmcgzwkHmek1qRJaCLmFKHptlUz0=)
2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:3b:d9:5b:53:10:f6:34:91:e8:0f:98:6f:79:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Oct 15 01:00:32 2026 GMT
Not After : Oct 16 01:00:32 2026 GMT
Subject: CN=cb94c90df3a0c95e08efcdd1f77781f0da00acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:e7:22:03:1d:57:0a:0e:26:5b:49:f9:07:
7e:2b:54:97:20:ab:12:a8:2f:3a:0e:74:11:ac:d9:
8d:af:a5:74:68:e2:d4:98:a6:f7:cf:de:ac:25:54:
80:55:e0:69:7f:4f:7e:61:c0:73:43:de:10:76:be:
cb:47:0a:62:f2:a7:eb:cc:a7:c9:29:d6:64:fc:2d:
06:57:b9:09:35:7b:c1:5f:f9:c6:ca:c2:f5:73:21:
38:58:1a:b1:41:3f:15:65:1e:21:ff:1b:d3:f1:67:
fb:21:94:33:7a:d8:b3:c7:18:ab:50:96:6b:9d:e5:
ad:2d:8d:37:d6:42:0b:e5:11:2d:fd:64:f9:ac:7e:
bf:0d:66:ad:c6:9a:9b:88:19:0f:1c:ac:d0:62:df:
58:f3:d3:8e:7d:d6:28:56:b9:78:26:d2:bb:a7:3d:
63:6f:7f:54:a0:b2:f0:8f:dc:2e:d7:e2:35:8b:76:
6e:c4:ce:e4:f3:7d:16:7c:e6:40:f1:45:18:df:9d:
59:af:b3:49:09:fe:ab:a9:41:5e:36:be:c1:f8:7b:
67:c4:6f:8a:46:cb:97:85:34:fe:fa:4f:3c:93:1b:
09:bf:e6:45:46:7f:3c:76:10:e5:59:26:82:60:5c:
e0:f7:8b:6b:a0:fe:b8:4a:04:f0:e6:35:81:67:1c:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:C9:0D:F3:A0:C9:5E:08:EF:CD:D1:F7:77:81:F0:DA:00:AC:FF
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:54:54:4d:12:0d:32:f9:c3:5f:8c:ce:6d:8b:49:72:8f:35:
e4:64:b9:46:ee:0e:18:a1:e7:59:85:72:53:2a:fa:73:19:af:
a2:4c:85:d9:4d:ba:df:34:d9:94:95:3f:c8:5d:ea:fc:e1:3e:
ea:7e:86:6b:f0:0f:96:94:59:2a:42:8c:2e:7c:29:a0:8c:97:
68:f3:f7:04:4c:77:e6:4b:3b:15:54:43:73:0c:ef:9f:2b:53:
d1:72:ab:97:ee:74:c7:53:5d:f0:c1:c8:9d:a8:77:3b:fd:83:
09:fe:d4:5c:4e:60:91:5f:0f:a9:c3:eb:89:3c:d4:2a:bd:d2:
43:bb:0b:d7:16:05:8f:91:c9:e8:82:47:a9:90:2d:0c:64:60:
bd:fa:73:a6:59:c1:07:13:4b:2e:68:82:6c:53:b7:48:2c:b6:
3f:cb:ff:5a:fb:7f:06:a6:98:2b:b9:60:8b:76:41:68:f4:5f:
85:85:76:20:71:76:a8:97:85:65:b1:47:65:9a:36:25:e7:eb:
a2:82:3a:34:9f:f9:89:53:b7:f8:33:85:b7:7f:4c:bf:d4:1f:
85:59:d1:6b:3b:48:99:c3:15:41:04:46:09:d1:f1:f3:11:87:
13:bc:88:41:b3:ea:10:cb:4b:0b:5e:79:69:46:d9:52:24:24:
ad:f4:7f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9EzvZW1MQ9jSR6A+Yb3kwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3
M2JjNDgwHhcNMjYxMDE1MDEwMDMyWhcNMjYxMDE2MDEwMDMyWjAzMTEwLwYDVQQD
EyhjYjk0YzkwZGYzYTBjOTVlMDhlZmNkZDFmNzc3ODFmMGRhMDBhY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVDnIgMdVwoOJltJ+Qd+K1SXIKsS
qC86DnQRrNmNr6V0aOLUmKb3z96sJVSAVeBpf09+YcBzQ94Qdr7LRwpi8qfrzKfJ
KdZk/C0GV7kJNXvBX/nGysL1cyE4WBqxQT8VZR4h/xvT8Wf7IZQzetizxxirUJZr
neWtLY031kIL5REt/WT5rH6/DWatxpqbiBkPHKzQYt9Y89OOfdYoVrl4JtK7pz1j
b39UoLLwj9wu1+I1i3ZuxM7k830WfOZA8UUY351Zr7NJCf6rqUFeNr7B+HtnxG+K
RsuXhTT++k88kxsJv+ZFRn88dhDlWSaCYFzg94troP64SgTw5jWBZxydGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuUyQ3zoMleCO/N0fd3gfDaAKz/MB8GA1UdIwQY
MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt
MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0
LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFRUTRIN
MvnDX4zObYtJco815GS5Ru4OGKHnWYVyUyr6cxmvokyF2U263zTZlJU/yF3q/OE+
6n6Ga/APlpRZKkKMLnwpoIyXaPP3BEx35ks7FVRDcwzvnytT0XKrl+50x1Nd8MHI
nah3O/2DCf7UXE5gkV8PqcPriTzUKr3SQ7sL1xYFj5HJ6IJHqZAtDGRgvfpzplnB
BxNLLmiCbFO3SCy2P8v/Wvt/BqaYK7lgi3ZBaPRfhYV2IHF2qJeFZbFHZZo2Jefr
ooI6NJ/5iVO3+DOFt39Mv9QfhVnRaztImcMVQQRGCdHx8xGHE7yIQbPqEMtLC155
aUbZUiQkrfR/Sw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:59 2026 by rpki-client