Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: 9k80oLM6J7gvU4ukavUxipg2ZHX1L688ET/X2WgAEt0=
Subject key identifier: C1:7E:75:18:FA:BE:FE:A5:64:BE:E3:7D:BF:4B:24:2A:1D:09:9D:93
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 01A1491814C9969723AA31A7BA381FDFB6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0BCF
Signing time: Sat 17 Oct 2026 09:01:17 +0000
Manifest this update: Sat 17 Oct 2026 09:01:17 +0000
Manifest next update: Sun 18 Oct 2026 09:01:17 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: hqouogB31L724Uot+h32Fny+JC3k2T39vtnivVjHOzI=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:18:14:c9:96:97:23:aa:31:a7:ba:38:1f:df:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Oct 17 09:01:17 2026 GMT
Not After : Oct 18 09:01:17 2026 GMT
Subject: CN=c17e7518fabefea564bee37dbf4b242a1d099d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:7d:10:95:f5:22:e6:d1:b0:ee:f4:9f:59:
69:3f:21:e2:87:ae:c2:34:75:11:b3:b8:9d:28:c3:
7d:75:12:3b:d9:76:87:6a:4d:af:35:33:7e:c6:90:
9d:a1:36:14:42:30:e6:28:5f:07:35:d8:1c:c6:7f:
2f:88:8b:40:8e:a7:b9:5d:89:d0:c5:f7:c8:8f:d9:
a6:e2:98:51:26:c0:66:b1:2a:09:0f:09:99:c6:70:
65:73:aa:64:0d:53:ce:78:69:1e:74:9d:8c:d6:36:
85:9a:28:f2:c1:e4:0c:b8:76:69:f6:ad:92:86:27:
5c:3a:d3:e1:24:22:23:98:68:21:42:57:14:df:41:
65:34:c2:5e:fa:b7:a2:da:fe:b9:15:7d:99:07:b5:
60:55:3f:a3:ec:7b:e5:75:74:4b:ab:10:e5:02:2b:
55:05:bb:7b:96:99:4c:b4:75:16:93:fe:8c:0e:90:
d3:ba:ab:fe:99:9d:21:6d:bf:f9:fc:23:48:1f:f1:
0e:97:07:be:17:ee:1e:49:c2:83:d7:62:d6:5f:90:
45:e8:9a:61:34:03:c5:80:06:34:ac:e4:5b:11:2b:
3d:08:2e:6c:c1:18:aa:e0:57:01:64:8f:d9:e1:4e:
32:d9:57:61:2f:74:22:31:f3:14:1e:f2:c2:2c:a3:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:75:18:FA:BE:FE:A5:64:BE:E3:7D:BF:4B:24:2A:1D:09:9D:93
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7e:08:b6:d3:55:d1:c7:35:45:2a:01:5c:62:4b:9e:9e:f8:
5e:de:ac:a0:cb:10:00:99:b1:20:ff:9c:64:a5:5c:ae:50:15:
51:71:a8:4b:1f:3e:50:09:29:c1:1c:46:04:cf:35:76:57:40:
32:82:15:3c:ea:fb:d6:89:3b:9d:aa:cd:19:2e:ca:2a:4c:2b:
08:a3:43:31:ec:7c:ec:21:6e:26:65:cd:93:52:82:12:95:c9:
04:f3:74:7f:c7:5a:e9:fa:aa:67:ba:f1:50:92:24:2c:bf:e0:
a4:1b:80:c5:ab:86:85:8d:47:4a:58:bc:81:47:6c:48:c2:7d:
a7:c9:0d:8a:82:45:76:f6:70:e1:43:86:47:03:52:91:ba:4e:
b3:56:c6:b4:3c:ff:c1:0f:35:a4:f9:47:01:49:59:87:6a:68:
7d:85:63:4b:a9:47:32:fa:33:8c:fb:6a:99:19:e5:5d:93:42:
49:5c:5f:3d:03:9b:ef:89:d2:ba:71:d7:d8:5f:12:33:59:43:
1c:ab:09:aa:dd:ba:df:32:f1:9d:79:74:ec:7e:32:f2:78:a9:
8d:d0:8b:3b:31:4e:be:05:43:14:0d:4a:65:13:ef:2f:a2:b8:
64:a1:73:ad:e8:94:5c:95:26:d9:4b:af:01:88:f8:25:af:98:
44:69:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:47:34 2026 by rpki-client