Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: rIGvYdBbO/rqdg5GqyOqcGOde6LJZplwnpnVXUimuGw=
Subject key identifier: 97:27:E1:FB:00:39:B6:07:D3:DA:FF:82:39:B1:C4:07:7A:BF:7A:23
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019E2F601754C620E57561418CCF981CDC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0A34
Signing time: Sat 16 May 2026 06:01:26 +0000
Manifest this update: Sat 16 May 2026 06:01:26 +0000
Manifest next update: Sun 17 May 2026 06:01:26 +0000
Files and hashes: 1: 0Qg084LIycuJHhj0t1rGsdiZv88.roa (hash: xbG9gdZf0w/JhHblkXXfJ67hEku8xIgE6j/fKCQ5A/w=)
2: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: k7qDaMncxptrM/aknJMYEnoLmhfAe5mQzGpyTL7G89k=)
3: T_8jZhMHn7PA9h3JJVSlYl2Srkc.roa (hash: gUv7l8BSt9VnsrxLwRFuebA3qtQxX3bqZy1Q9pq47AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:60:17:54:c6:20:e5:75:61:41:8c:cf:98:1c:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: May 16 06:01:26 2026 GMT
Not After : May 17 06:01:26 2026 GMT
Subject: CN=9727e1fb0039b607d3daff8239b1c4077abf7a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:55:4d:89:25:50:ed:41:f1:d3:a2:75:91:
04:4e:93:e2:d5:78:c4:cd:e8:82:2c:e8:9b:01:8e:
97:1f:54:35:11:5a:8f:36:88:a7:c2:a1:10:af:a6:
45:b2:3a:76:25:f5:54:76:31:3e:56:3e:ca:08:f1:
4e:c6:cf:63:0c:85:62:3b:28:51:24:18:25:ce:0b:
19:c8:b6:04:e2:d7:80:99:8a:9c:f4:be:a3:92:fc:
25:07:16:f7:7e:9f:38:c4:e3:12:88:77:a0:b0:8e:
e6:0d:e6:ee:e2:e6:30:45:d5:68:e8:c8:e9:0d:19:
63:49:1d:81:68:c7:64:84:6f:db:2e:f0:b3:09:49:
c6:9d:c6:69:0b:3e:a7:a4:bc:86:3d:ac:13:24:b3:
33:3b:3e:7a:0a:ed:e0:a5:10:cb:ac:4c:85:fa:b2:
a6:2a:02:5d:ff:6b:af:63:92:9c:64:4f:ed:7a:ff:
3f:99:19:0f:96:8b:41:b7:6e:0a:ad:2e:c7:b4:3f:
42:4e:38:35:79:06:f8:24:4b:57:c3:4b:71:ff:09:
eb:34:64:da:09:b2:44:3f:15:14:7d:03:03:5d:e4:
c4:16:92:60:fb:be:ee:96:96:11:67:4e:44:c1:8f:
e0:ff:0f:28:7f:7c:6b:2a:95:16:41:9a:11:ba:aa:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:E1:FB:00:39:B6:07:D3:DA:FF:82:39:B1:C4:07:7A:BF:7A:23
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6e:17:e2:c8:1e:bf:0c:2a:0b:42:c4:9e:35:c6:3b:59:da:
d0:a8:3b:ae:1c:3f:27:bc:d5:74:40:ed:70:46:6b:6c:ee:29:
e2:61:77:cb:a6:4a:25:e1:14:2b:2d:b1:87:d8:af:de:91:56:
5b:3e:9b:50:46:6b:d7:4e:b6:ed:5d:16:f7:7e:c5:38:4b:73:
c0:dc:25:60:ab:bd:c3:10:c1:cb:6f:50:d5:ae:36:5f:4f:0d:
27:6d:7a:d6:bb:dd:fd:24:2d:85:ee:74:c0:8c:e0:2b:4a:ec:
7f:aa:3d:db:dc:9d:15:f9:0e:44:62:e9:d7:fe:36:11:ce:dd:
5d:79:d8:eb:41:f4:9c:40:53:55:71:cc:9f:c1:34:b9:7f:f4:
19:ba:4c:a9:b2:85:f3:4b:5f:1a:a4:99:b2:12:73:b7:8c:32:
98:73:7b:9b:03:1f:fc:70:65:aa:af:b4:4f:44:93:95:70:bd:
17:00:00:d2:49:cd:6f:41:9a:15:3a:8d:5d:36:80:64:98:ee:
06:54:51:51:50:76:65:d5:d6:2b:ff:34:bc:f7:2e:7f:81:84:
46:8b:78:a3:45:de:49:16:82:e5:22:b8:94:b3:41:72:dd:eb:
d5:ac:26:e4:35:0f:ef:20:75:b4:b6:b0:89:0b:2c:e2:85:1a:
29:32:aa:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vYBdUxiDldWFBjM+YHNw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjYwNTE2MDYwMTI2WhcNMjYwNTE3MDYwMTI2WjAzMTEwLwYDVQQD
Eyg5NzI3ZTFmYjAwMzliNjA3ZDNkYWZmODIzOWIxYzQwNzdhYmY3YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweFVTYklUO1B8dOidZEETpPi1XjE
zeiCLOibAY6XH1Q1EVqPNoinwqEQr6ZFsjp2JfVUdjE+Vj7KCPFOxs9jDIViOyhR
JBglzgsZyLYE4teAmYqc9L6jkvwlBxb3fp84xOMSiHegsI7mDebu4uYwRdVo6Mjp
DRljSR2BaMdkhG/bLvCzCUnGncZpCz6npLyGPawTJLMzOz56Cu3gpRDLrEyF+rKm
KgJd/2uvY5KcZE/tev8/mRkPlotBt24KrS7HtD9CTjg1eQb4JEtXw0tx/wnrNGTa
CbJEPxUUfQMDXeTEFpJg+77ulpYRZ05EwY/g/w8of3xrKpUWQZoRuqpRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcn4fsAObYH09r/gjmxxAd6v3ojMB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApW4X4sge
vwwqC0LEnjXGO1na0Kg7rhw/J7zVdEDtcEZrbO4p4mF3y6ZKJeEUKy2xh9iv3pFW
Wz6bUEZr10627V0W937FOEtzwNwlYKu9wxDBy29Q1a42X08NJ2161rvd/SQthe50
wIzgK0rsf6o929ydFfkORGLp1/42Ec7dXXnY60H0nEBTVXHMn8E0uX/0GbpMqbKF
80tfGqSZshJzt4wymHN7mwMf/HBlqq+0T0STlXC9FwAA0knNb0GaFTqNXTaAZJju
BlRRUVB2ZdXWK/80vPcuf4GERot4o0XeSRaC5SK4lLNBct3r1awm5DUP7yB1tLaw
iQss4oUaKTKqZw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:47 2026 by rpki-client