Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: ybZJxloztmHL07LPjnRHkfzuE84X+rqA5R+6dPpcq9o=
Subject key identifier: A2:94:39:46:A8:57:5C:68:23:41:E4:67:5F:FF:48:96:CB:3E:24:27
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 019CC7F52D845EECE87B3AFC76E25F58F798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0F7A
Signing time: Sat 07 Mar 2026 11:00:59 +0000
Manifest this update: Sat 07 Mar 2026 11:00:59 +0000
Manifest next update: Sun 08 Mar 2026 11:00:59 +0000
Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: kKWG3+KmfYag6KO2gjzxLUjei82bYoAvgOsdOKCzIVA=)
3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:f5:2d:84:5e:ec:e8:7b:3a:fc:76:e2:5f:58:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Mar 7 11:00:59 2026 GMT
Not After : Mar 8 11:00:59 2026 GMT
Subject: CN=a2943946a8575c682341e4675fff4896cb3e2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:a2:04:6c:2b:d7:b1:53:f4:97:f8:2f:f7:
10:91:a2:e6:28:4e:1e:95:eb:82:ba:5c:2d:e6:87:
ed:e5:1a:55:ce:aa:4d:87:1b:55:bb:48:da:ab:a4:
dd:5b:0a:f8:6d:66:cc:c8:58:d9:2a:b1:12:63:57:
24:8e:25:37:0c:fa:f6:15:63:9a:e3:08:4d:f7:cc:
6e:94:93:39:2c:17:54:26:7c:01:46:3f:87:25:c8:
33:69:1f:7b:18:5e:da:b3:83:f5:df:30:21:0e:b9:
51:a6:1d:a9:ca:a8:16:ae:d8:f9:47:de:4c:26:ac:
19:0a:10:64:d4:25:17:28:b1:84:54:ab:09:14:79:
1b:84:dc:eb:ac:97:cc:e3:79:05:ca:37:7f:3e:64:
bf:03:f4:53:ff:9e:ed:56:02:71:66:f1:75:4d:33:
af:c9:4a:d5:84:db:52:7d:fd:74:1d:5b:90:02:f1:
34:d6:87:5d:d8:12:16:20:25:7c:0a:7e:7c:42:6f:
98:2f:dd:df:63:6a:ea:9a:6d:09:29:7d:a5:0a:b3:
ab:56:22:10:7c:17:ef:0e:7d:15:08:48:cb:d9:52:
75:6a:a9:54:68:28:cf:37:9a:e3:ef:51:30:c0:51:
c1:e7:88:22:84:9d:24:dc:e2:a1:1d:c0:10:26:e5:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:39:46:A8:57:5C:68:23:41:E4:67:5F:FF:48:96:CB:3E:24:27
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ec:bf:07:b3:a6:77:9b:c7:f3:4d:01:40:dd:01:fc:29:5b:
09:3d:94:fe:75:1c:06:01:c0:eb:a6:b9:6e:80:54:8d:2f:c8:
db:47:27:fa:11:dd:83:2e:9a:ff:bb:f3:6e:cd:66:01:c1:eb:
b3:cc:b1:22:48:39:0e:f6:28:4d:49:14:52:10:d8:99:a7:65:
59:bc:98:09:91:ee:d5:ed:0e:cd:a0:68:2f:30:9c:5e:ab:90:
00:f5:15:e6:52:92:cb:13:d9:26:c1:45:75:eb:8e:b9:3a:4e:
6f:05:e0:9a:f5:5e:78:02:30:8e:00:23:75:ef:c7:55:fd:8c:
f4:a3:cb:30:92:0f:0e:aa:c2:29:eb:5d:12:9d:ac:59:61:4c:
b9:1a:2f:d9:35:67:41:4c:fa:4d:ae:d2:99:67:93:10:cf:0c:
c6:4e:83:e9:25:37:a1:4d:be:de:78:18:86:dd:b9:0e:d0:a7:
ac:99:2f:36:c6:5c:93:95:ea:8b:80:59:a8:86:75:0a:3d:6c:
6b:92:bd:af:6d:11:d8:31:da:c7:23:c0:f0:16:59:c6:b7:18:
64:54:78:ca:49:fb:f1:6c:c3:7c:c1:9e:86:8c:f5:88:21:d4:
1f:f3:37:b1:0e:98:84:b6:91:83:54:82:e2:0c:43:bb:2a:a6:
7f:49:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:09:58 2026 by rpki-client