Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: Z1gRu5BPkKsA4E92iud8Gw+VqqEb52L/qw8C6LZM09I=
Subject key identifier: B3:A0:8C:4E:E3:64:F9:8B:56:9B:8F:7E:6A:CE:60:C0:2D:4B:A8:B0
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 01A000CA99CB6B5681AC64B3304FF4A96BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0B25
Signing time: Fri 14 Aug 2026 15:01:12 +0000
Manifest this update: Fri 14 Aug 2026 15:01:12 +0000
Manifest next update: Sat 15 Aug 2026 15:01:12 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: /7+PlqB11/i02kOa9CbqohhRZ+TzadE3qeymGRLG9AE=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:99:cb:6b:56:81:ac:64:b3:30:4f:f4:a9:6b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Aug 14 15:01:12 2026 GMT
Not After : Aug 15 15:01:12 2026 GMT
Subject: CN=b3a08c4ee364f98b569b8f7e6ace60c02d4ba8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:de:34:e2:e6:98:b9:64:34:71:fa:2e:36:
0e:a1:b5:47:4e:98:dc:86:4f:04:5c:e1:cf:0a:08:
bc:6c:be:ad:8e:54:ab:ee:2d:04:7a:ee:f7:a8:07:
01:30:55:b0:05:07:52:68:26:3d:ca:e0:5b:4f:68:
5e:2e:36:d9:60:08:39:52:42:db:89:a0:e0:b6:48:
c7:18:af:5b:b3:d6:96:a8:ef:f5:0d:fa:28:8e:7f:
59:08:df:97:3a:9d:21:b0:56:5e:4c:61:da:1f:09:
12:5a:21:c8:48:a7:b4:f1:0f:96:dc:b0:94:2e:e1:
b1:8a:c0:5b:87:72:a9:f6:d0:58:ca:8f:a3:b8:23:
0e:a8:57:c3:ca:62:36:1c:91:6c:44:cd:1b:a8:08:
8b:85:c9:b9:0d:47:25:90:bf:1a:fe:ea:99:2e:17:
77:a8:c0:db:46:b8:83:71:39:eb:94:b3:2b:3d:43:
af:3d:4c:93:6f:90:05:91:ed:81:e2:53:81:30:69:
e1:ca:b0:5b:46:8d:07:15:3b:e5:90:74:26:6c:ff:
75:4c:8a:4b:b6:9f:cd:ae:bc:58:95:15:cd:f9:46:
fd:78:a1:d8:57:f9:7c:31:4a:1d:0a:aa:21:fd:38:
9a:b3:53:86:1d:b8:40:39:84:c6:36:09:05:f2:ee:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:8C:4E:E3:64:F9:8B:56:9B:8F:7E:6A:CE:60:C0:2D:4B:A8:B0
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1d:6b:94:ae:e0:5d:7b:8b:ca:c1:0f:ec:5c:6f:a3:d8:8d:
32:a1:9a:21:de:6f:4d:cd:53:a7:c9:9e:4e:d5:8f:f5:cc:ab:
aa:3b:6f:e2:db:77:b9:07:a0:d8:33:cf:77:67:3b:aa:6f:e9:
83:39:8f:06:b8:04:2f:33:ad:08:cf:c1:b1:1d:15:c2:2b:78:
35:e4:4a:66:ac:68:44:82:09:af:85:9a:23:59:0b:f0:3b:4f:
b6:70:18:ee:c0:d0:a5:99:39:4b:47:cd:b3:9a:6e:66:bd:8d:
a3:a2:1f:bd:57:65:52:04:f2:b0:69:3a:7f:8f:81:8f:88:70:
63:c4:2b:74:9c:f4:e2:a2:a8:91:39:13:de:07:7a:d4:e0:96:
ce:e5:44:cc:d1:c8:f4:fc:6e:34:6a:b7:69:69:11:a8:8c:88:
24:3a:7a:66:a6:9b:00:d1:e7:1c:fd:2a:91:e6:8f:9f:b4:f0:
8b:ec:1e:e1:2c:ca:27:18:87:b6:7a:7c:97:eb:83:bb:cd:71:
83:59:22:fd:49:a9:e4:ac:40:d7:7e:60:df:41:23:fe:5a:de:
4e:5a:c7:b4:5a:5a:20:e9:c6:56:fa:c1:9c:dd:a6:02:72:77:
d6:93:d1:3d:f8:86:d6:19:ab:ab:1a:ae:fd:e4:0f:93:ba:b3:
39:ae:89:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:25 2026 by rpki-client