Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: H+sUmYz3/KvxJrIP0lLLcA/pfC43zG3UQYrJlo3livw=
Subject key identifier: 78:6F:BA:09:92:63:66:AF:96:B3:4C:DC:06:B8:57:D6:C6:08:FB:48
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 019DB1A1F0B40E3E485AFD2B6C56233FE50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0FF3
Signing time: Tue 21 Apr 2026 20:01:13 +0000
Manifest this update: Tue 21 Apr 2026 20:01:13 +0000
Manifest next update: Wed 22 Apr 2026 20:01:13 +0000
Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: QE0+AmyPeHJSfIVigE4ku5XHy5hGEbV1Bx0K8AO4aSg=)
3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:f0:b4:0e:3e:48:5a:fd:2b:6c:56:23:3f:e5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Apr 21 20:01:13 2026 GMT
Not After : Apr 22 20:01:13 2026 GMT
Subject: CN=786fba09926366af96b34cdc06b857d6c608fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:ce:16:6d:e4:aa:97:e3:f7:85:8e:4e:a3:
f1:53:28:45:e8:14:29:71:48:ec:0b:21:8d:a2:76:
f3:5b:8f:e3:b3:90:7d:65:8a:2d:87:e3:e7:03:f5:
30:25:d4:de:f3:08:e1:3e:b9:5f:49:5a:34:6d:cc:
70:1b:dc:2e:b9:a9:30:06:51:27:aa:e8:c9:c5:a9:
89:22:ee:1b:72:6f:ff:87:7f:8e:ce:76:3a:5a:f2:
a8:c7:1d:0d:f8:1e:99:08:3d:36:65:b1:99:d1:e4:
2f:61:f1:0b:5b:ab:02:12:e0:3f:cf:93:a7:1a:a8:
5d:3f:b0:72:0c:98:b2:92:d1:58:17:b2:bf:b1:38:
f3:b1:3e:7a:90:35:58:f5:6f:ac:8a:b5:8e:6a:44:
5a:9c:45:48:7a:76:14:cd:e7:88:e8:f7:b1:42:89:
38:c1:b0:06:78:68:e9:27:89:d6:47:a1:c9:55:1d:
25:59:f2:59:a1:6e:15:3c:1e:27:4e:a6:2e:13:2e:
4b:16:85:2c:4a:66:5c:d5:7d:18:50:4e:7e:e2:11:
fd:fd:55:9a:19:23:0f:77:f7:51:c3:e6:d8:86:7c:
13:c4:f2:9b:a9:f2:77:f3:72:e0:5f:7f:c6:2a:1a:
a5:1d:90:dc:a1:ed:b8:82:8a:29:eb:e5:4f:70:2e:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:BA:09:92:63:66:AF:96:B3:4C:DC:06:B8:57:D6:C6:08:FB:48
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:12:8b:69:6d:98:71:66:4e:72:7b:a0:94:33:b4:88:24:
93:cf:ad:4e:ff:95:39:62:1d:a8:36:76:67:d1:57:3a:f9:b9:
e0:0c:af:25:08:2e:02:a3:45:53:b5:72:c5:cd:c1:fd:ed:d2:
a5:f7:e1:30:75:5e:e9:51:05:82:9c:a5:81:dd:b5:26:4e:45:
1c:95:88:f6:ad:ca:71:31:80:ad:fb:5d:32:7e:17:79:54:df:
7f:03:76:d0:ac:38:65:4c:1f:7c:5b:a9:1e:c9:58:9c:e7:8a:
ad:39:17:11:01:81:76:de:09:e2:c3:7f:10:ac:26:6c:2a:43:
b8:07:9a:73:d5:a8:4d:05:a3:77:c3:97:43:73:63:e0:20:4c:
4d:64:eb:ba:39:e7:25:2f:8b:76:04:01:f6:ae:e7:7f:87:b6:
85:62:df:c6:dc:66:15:af:f8:d4:4c:72:37:8c:a7:96:0d:38:
8d:65:93:3a:71:6e:0f:53:33:ca:c1:79:74:b8:a8:3a:c4:a2:
50:af:06:77:45:62:08:d2:18:21:8b:35:e2:4b:2c:bd:23:66:
b8:26:59:cd:9b:b6:6d:90:7d:1c:f6:f9:e1:1b:c9:ac:91:3f:
e6:eb:00:0c:c9:a4:4a:85:6f:68:2b:fc:4b:dc:79:d3:09:a1:
24:df:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:44:50 2026 by rpki-client