Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: Wwo8tLAoK8Up0F2eKQrChojCFaNyO2WsPCMJFyQKo+Q=
Subject key identifier: 82:34:1A:3B:F1:44:D0:69:7D:1C:A7:AC:DF:6A:E1:18:01:14:9D:A9
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019D382E595C66369DAAA3E079B3DA46E7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 09B4
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: 58TP/bHCe5lrVqkhG/rldFlFqO65oP3unPgvyyv5fh8=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:59:5c:66:36:9d:aa:a3:e0:79:b3:da:46:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=82341a3bf144d0697d1ca7acdf6ae11801149da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:ef:69:49:91:7d:07:fb:72:a5:aa:f3:94:
5d:b6:81:79:b0:ae:dc:ba:39:6f:e5:b4:d3:e0:99:
fc:3c:73:b6:d5:69:70:a8:c4:ad:0d:2b:31:30:d2:
f9:b8:c7:3a:ba:fb:01:be:49:52:db:e1:0a:a9:e6:
bf:69:53:7e:f7:0a:b7:a9:2b:f4:0b:fb:fa:87:ae:
2b:55:2d:ac:6d:d5:b1:68:b0:86:34:c6:a7:78:aa:
12:9e:60:f2:42:ea:9a:7a:cf:63:10:33:39:65:a2:
44:7d:41:b4:4e:1b:1f:09:fe:08:17:53:dc:02:15:
86:15:32:5f:1f:11:17:a6:13:bc:fb:d9:1e:51:f3:
09:a2:46:35:91:0f:e4:84:ab:bd:25:c8:62:1c:56:
77:17:3d:85:7a:69:d6:96:55:d1:20:30:5b:cb:a2:
9e:cd:54:19:ca:7c:d0:fd:2b:3b:82:f0:b5:bf:55:
2a:25:f2:28:b4:cb:8b:a2:d3:2d:ec:10:08:30:fc:
b8:a5:04:3c:da:21:59:38:da:20:b7:c2:99:2d:01:
7c:e0:5a:91:a6:ab:27:ad:79:32:e6:08:20:7c:b6:
0d:0a:41:8e:d1:4d:4f:93:13:c5:67:28:5e:f0:48:
b2:42:53:2a:a2:cd:b6:24:82:a3:e2:2a:83:3f:85:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:1A:3B:F1:44:D0:69:7D:1C:A7:AC:DF:6A:E1:18:01:14:9D:A9
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:37:5d:f8:78:1d:5c:9a:c9:e0:ed:55:e6:7b:e3:8d:a8:85:
6c:fd:b9:e6:72:fa:33:92:c8:fe:ba:94:7a:b9:fa:29:c1:83:
b0:4c:6e:02:44:91:dd:b5:54:79:53:4e:24:bb:b1:53:88:51:
22:6e:9f:ae:2d:71:40:b1:d6:26:7c:6f:18:88:2a:1f:b8:69:
6d:fe:07:ed:b1:32:cf:fa:c8:b5:56:6d:b8:db:c3:14:68:b3:
8e:da:16:01:61:04:22:ba:62:d3:e0:d4:ae:be:9b:13:46:61:
b1:f1:02:ca:99:0a:9f:96:a2:05:26:25:2c:93:8f:66:3f:46:
97:a5:38:17:04:b2:bc:14:1d:4c:25:89:31:09:ac:ab:11:3a:
28:98:87:45:84:ad:56:36:64:68:2d:9b:e5:30:b6:e0:0f:a3:
62:c9:b4:e2:49:41:a4:46:4e:22:a0:50:26:58:98:d4:98:72:
24:94:74:56:2e:b8:c5:bd:e6:0f:18:aa:25:77:1e:31:4e:f0:
00:83:48:c3:c3:47:b5:68:6e:54:3d:80:c7:6e:af:fe:4d:3f:
1e:c6:f8:f9:cc:7e:61:d9:b9:46:4f:f4:92:ab:8d:6c:ae:5d:
ef:bd:3d:e1:b7:49:3c:63:cf:52:52:b5:5b:4a:1b:21:8c:04:
32:37:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:11 2026 by rpki-client