Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: VPSVNM6GcFBf2oznCTaLTAx9NHuQ8Cc0Qmk1MobvCZE=
Subject key identifier: F7:DE:02:C2:28:80:6C:B2:E6:8A:4D:23:CC:71:6F:42:81:F7:27:A7
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019F190C5BC708C1238BB30E01031FD3613D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0AAD
Signing time: Tue 30 Jun 2026 15:01:07 +0000
Manifest this update: Tue 30 Jun 2026 15:01:07 +0000
Manifest next update: Wed 01 Jul 2026 15:01:07 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: SbxD4UEZcGhKht7R+wbZoK96r5mDuk+zGq4Y6A6FoQ8=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:5b:c7:08:c1:23:8b:b3:0e:01:03:1f:d3:61:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jun 30 15:01:07 2026 GMT
Not After : Jul 1 15:01:07 2026 GMT
Subject: CN=f7de02c228806cb2e68a4d23cc716f4281f727a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:60:e2:56:d5:15:cc:ab:4b:a0:14:08:0f:
59:2f:b8:04:98:d2:c3:ee:f5:95:98:bc:2b:84:6a:
43:26:f1:75:f6:67:9a:1e:be:37:3d:72:11:09:a7:
d3:47:88:e7:a2:91:a0:c7:04:96:67:6d:7d:01:8a:
80:e9:31:96:e1:d8:40:83:65:11:d4:63:d2:1f:6e:
b8:54:d4:78:b8:71:7a:77:c1:27:73:28:bd:92:43:
3c:d7:d1:b7:f7:7d:29:7c:fe:e8:f4:93:25:3b:b2:
62:6e:32:89:43:26:bd:ef:bd:7c:23:7c:1b:f5:f5:
7d:81:d1:83:10:b0:d7:bf:d4:e3:d3:85:06:cb:d8:
12:a7:40:ef:5a:bf:8f:95:bd:40:34:59:5d:a7:d9:
03:d4:88:4e:a3:ee:88:2e:ec:e4:78:7a:5f:9f:4a:
0a:f0:67:fb:34:34:4c:f7:bc:d2:0f:ca:61:67:34:
2d:29:bf:fa:73:63:70:60:af:55:8f:55:d6:da:0d:
51:34:da:b2:d7:3c:23:18:c7:14:31:e7:83:91:c0:
f3:8c:fd:ce:85:78:d4:72:dd:35:0d:46:8d:46:fb:
a3:07:26:b5:6c:87:b8:0f:fc:d1:0d:53:27:d1:72:
89:a0:87:2a:d1:12:fe:d6:14:1e:77:fb:53:1e:57:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:02:C2:28:80:6C:B2:E6:8A:4D:23:CC:71:6F:42:81:F7:27:A7
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b8:54:20:71:9b:80:42:a2:7b:db:cd:19:8c:41:1b:6b:24:
6b:4e:a6:ab:d5:cb:b6:f4:ff:69:99:a9:85:89:34:80:d4:bc:
e6:84:ed:0e:78:f4:7d:0e:08:a9:fe:30:4f:82:83:28:22:21:
72:02:fb:14:2c:5a:33:45:94:b7:79:65:98:54:b4:f8:7e:1b:
51:9c:68:b1:29:1f:f6:8b:8e:ec:89:00:0a:0e:bb:f0:3e:30:
63:93:37:70:e5:a2:92:6a:ca:94:d5:08:f0:c6:7e:af:5a:fc:
75:37:0f:45:7b:d3:7b:43:db:94:b6:0b:03:80:8c:cf:32:b5:
3b:0a:59:85:12:42:54:d1:66:9d:81:c3:cc:80:20:d3:a4:d0:
78:61:d0:e1:ac:73:60:60:bb:3f:dc:2a:1c:f1:31:de:ea:7a:
e9:4d:c6:c1:a4:d9:32:7a:8c:e1:46:f8:4c:b2:fb:dc:2b:42:
11:37:fc:9b:37:bb:c8:ac:3c:17:70:09:3a:19:a3:cb:6d:c1:
76:fb:52:73:d1:08:a7:b7:8a:e1:3e:49:dd:68:0f:72:c9:98:
5b:75:4d:21:a7:53:a4:e2:2c:c7:4a:0f:66:f4:c0:6f:78:3c:
a7:52:c1:2f:81:8d:34:81:40:58:0a:44:3d:c9:11:27:2c:c5:
95:f8:4e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDFvHCMEji7MOAQMf02E9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjYwNjMwMTUwMTA3WhcNMjYwNzAxMTUwMTA3WjAzMTEwLwYDVQQD
EyhmN2RlMDJjMjI4ODA2Y2IyZTY4YTRkMjNjYzcxNmY0MjgxZjcyN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75tg4lbVFcyrS6AUCA9ZL7gEmNLD
7vWVmLwrhGpDJvF19meaHr43PXIRCafTR4jnopGgxwSWZ219AYqA6TGW4dhAg2UR
1GPSH264VNR4uHF6d8Encyi9kkM819G3930pfP7o9JMlO7JibjKJQya97718I3wb
9fV9gdGDELDXv9Tj04UGy9gSp0DvWr+Plb1ANFldp9kD1IhOo+6ILuzkeHpfn0oK
8Gf7NDRM97zSD8phZzQtKb/6c2NwYK9Vj1XW2g1RNNqy1zwjGMcUMeeDkcDzjP3O
hXjUct01DUaNRvujBya1bIe4D/zRDVMn0XKJoIcq0RL+1hQed/tTHlcIfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfeAsIogGyy5opNI8xxb0KB9yenMB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7hUIHGb
gEKie9vNGYxBG2ska06mq9XLtvT/aZmphYk0gNS85oTtDnj0fQ4Iqf4wT4KDKCIh
cgL7FCxaM0WUt3llmFS0+H4bUZxosSkf9ouO7IkACg678D4wY5M3cOWikmrKlNUI
8MZ+r1r8dTcPRXvTe0PblLYLA4CMzzK1OwpZhRJCVNFmnYHDzIAg06TQeGHQ4axz
YGC7P9wqHPEx3up66U3GwaTZMnqM4Ub4TLL73CtCETf8mze7yKw8F3AJOhmjy23B
dvtSc9EIp7eK4T5J3WgPcsmYW3VNIadTpOIsx0oPZvTAb3g8p1LBL4GNNIFAWApE
PckRJyzFlfhO7Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:13 2026 by rpki-client