Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: xIO2EsKEqxK4l2uhvNzspfUZ2hCFPdwo4aZRKQ4vakI=
Subject key identifier: 7D:0A:4A:FC:57:99:21:7F:63:5C:79:A6:EA:5A:89:44:E4:A8:89:DB
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 01A001701D6AA5099C6FB29EEE99A79ED9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 18:01:59 +0000
Manifest this update: Fri 14 Aug 2026 18:01:59 +0000
Manifest next update: Sat 15 Aug 2026 18:01:59 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: Lb29ju89si5tq5pb+oUEQ+0p5BnCVlzzpoxk7a7FTC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:1d:6a:a5:09:9c:6f:b2:9e:ee:99:a7:9e:d9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Aug 14 18:01:59 2026 GMT
Not After : Aug 15 18:01:59 2026 GMT
Subject: CN=7d0a4afc5799217f635c79a6ea5a8944e4a889db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:7d:8c:b6:c0:f3:32:c7:45:c7:bd:f4:d7:
99:ac:ce:a8:f6:63:7f:d9:d9:2f:83:a8:38:ae:08:
54:0d:20:75:e9:cb:f3:38:db:41:ac:55:93:48:20:
3d:83:79:df:a5:d1:53:d0:a1:3d:99:8a:7c:88:ca:
33:ce:bb:1d:fd:34:25:b3:5a:c1:9b:c4:79:cc:7f:
bd:b8:ca:6b:04:29:6d:94:f8:ea:d2:b7:7c:d4:8d:
9d:f1:2a:53:5a:bf:18:37:07:f8:11:40:26:b8:ac:
ef:57:be:87:63:3f:c1:96:f2:98:7a:0e:d8:1c:52:
d9:65:06:9d:e2:0f:dc:09:f3:4a:3e:1d:53:ca:7c:
24:a2:6f:f9:a1:55:d9:5e:cb:62:d2:b6:75:dc:d2:
95:5f:9a:ed:78:ae:7a:fa:2e:af:ec:38:bb:9c:85:
7d:6a:8d:18:c7:17:cb:fb:84:7f:08:25:e1:1f:36:
33:2c:53:49:f9:6a:52:64:8b:fe:58:fb:4c:5d:56:
89:f3:e9:34:fc:f4:c5:d4:6a:2a:71:f9:91:29:ee:
45:1d:30:4c:6d:bf:b0:72:ae:c8:4d:bd:81:80:2f:
0a:d9:a3:dd:31:32:07:b9:74:06:9e:b1:ee:25:17:
7a:54:39:aa:e8:bd:64:c3:6a:ca:84:e3:77:70:97:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:4A:FC:57:99:21:7F:63:5C:79:A6:EA:5A:89:44:E4:A8:89:DB
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:d7:16:5f:42:31:71:49:7c:33:32:92:44:83:66:c0:bf:
76:ef:34:81:9c:d3:61:de:da:ec:d0:f6:48:77:ee:33:65:0e:
11:d6:17:e3:6f:71:8f:9a:58:21:3d:7c:43:79:92:28:91:90:
6c:c5:43:9f:e0:32:fc:06:26:b9:f9:1d:39:24:36:04:d4:75:
f5:cf:30:2c:b3:a7:49:5b:3e:71:46:b0:5d:8c:a9:ac:91:f9:
e4:d3:37:10:98:01:3b:bc:42:92:06:02:a5:4c:19:9c:4f:48:
71:0b:d6:0b:dc:2a:03:d5:00:67:9a:cd:f9:c9:f1:9e:e5:e2:
42:bd:8a:8a:11:b3:14:33:d8:81:33:e9:bf:47:0c:b2:46:cb:
77:bd:ad:8b:8b:70:2b:91:ed:69:e5:47:a1:96:4d:f9:78:92:
22:d9:70:52:1d:a0:01:e4:08:c1:79:c9:99:a2:b4:4c:03:6a:
eb:7e:0c:44:d6:7e:5f:b5:59:4e:8c:4f:09:1b:b5:4a:1d:f9:
0f:f6:9c:9a:aa:0a:be:c8:0a:7d:8f:90:29:be:21:29:92:eb:
1a:0d:4e:e8:ad:cc:11:10:5a:cb:62:d0:78:5f:5b:9a:37:63:
35:e6:93:cb:d1:80:0b:a4:b5:f3:da:d9:83:4d:ab:d6:6b:44:
95:e7:d0:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcB1qpQmcb7Ke7pmnntniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I4ZjgxYjhkMzg4MmQ3ZGIxNzNhNTQ5MDA5NjYxMTU3
NDhjYmYwHhcNMjYwODE0MTgwMTU5WhcNMjYwODE1MTgwMTU5WjAzMTEwLwYDVQQD
Eyg3ZDBhNGFmYzU3OTkyMTdmNjM1Yzc5YTZlYTVhODk0NGU0YTg4OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQZ9jLbA8zLHRce99NeZrM6o9mN/
2dkvg6g4rghUDSB16cvzONtBrFWTSCA9g3nfpdFT0KE9mYp8iMozzrsd/TQls1rB
m8R5zH+9uMprBCltlPjq0rd81I2d8SpTWr8YNwf4EUAmuKzvV76HYz/BlvKYeg7Y
HFLZZQad4g/cCfNKPh1Tynwkom/5oVXZXsti0rZ13NKVX5rteK56+i6v7Di7nIV9
ao0YxxfL+4R/CCXhHzYzLFNJ+WpSZIv+WPtMXVaJ8+k0/PTF1GoqcfmRKe5FHTBM
bb+wcq7ITb2BgC8K2aPdMTIHuXQGnrHuJRd6VDmq6L1kw2rKhON3cJc3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0KSvxXmSF/Y1x5pupaiUTkqInbMB8GA1UdIwQY
MBaAFNfLj4G404gtfbFzpUkAlmEVdIy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGIt
MmU4NzFjNTk3Zjk3LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGItMmU4NzFjNTk3Zjk3
LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu3XFl9C
MXFJfDMykkSDZsC/du80gZzTYd7a7ND2SHfuM2UOEdYX429xj5pYIT18Q3mSKJGQ
bMVDn+Ay/AYmufkdOSQ2BNR19c8wLLOnSVs+cUawXYyprJH55NM3EJgBO7xCkgYC
pUwZnE9IcQvWC9wqA9UAZ5rN+cnxnuXiQr2KihGzFDPYgTPpv0cMskbLd72ti4tw
K5HtaeVHoZZN+XiSItlwUh2gAeQIwXnJmaK0TANq634MRNZ+X7VZToxPCRu1Sh35
D/acmqoKvsgKfY+QKb4hKZLrGg1O6K3MERBay2LQeF9bmjdjNeaTy9GAC6S189rZ
g02r1mtElefQig==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:38 2026 by rpki-client