Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: SY87ZQwijZtgoI6QN2c00JgyEKmyPQxwrsNBxHCP46c=
Subject key identifier: 52:EF:2C:AC:1B:DA:DF:E8:4E:11:D2:F8:8F:BC:81:C9:A6:50:48:DA
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 01A154AE8AB70EF47B0EC4E514A76F656015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1ABB
Signing time: Mon 19 Oct 2026 15:01:27 +0000
Manifest this update: Mon 19 Oct 2026 15:01:27 +0000
Manifest next update: Tue 20 Oct 2026 15:01:27 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: RvxhArx4++ats62nwc18JARMo5OVShTiIsyawe7K62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:8a:b7:0e:f4:7b:0e:c4:e5:14:a7:6f:65:60:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Oct 19 15:01:27 2026 GMT
Not After : Oct 20 15:01:27 2026 GMT
Subject: CN=52ef2cac1bdadfe84e11d2f88fbc81c9a65048da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:e7:d8:8f:07:56:68:33:f7:31:33:b0:4a:
72:80:40:d2:2d:f2:f0:03:cb:40:24:0e:1c:88:50:
11:b8:77:ac:28:42:c3:6e:1d:be:a1:6b:c7:5a:99:
f0:e4:71:10:b9:98:dc:31:ee:b3:89:0c:ab:b1:79:
a2:7f:ce:4d:6d:60:e6:01:fb:01:92:9b:ff:1d:dc:
aa:f0:cb:ef:db:8b:89:6a:d2:72:9d:ee:ac:db:f9:
32:7b:9a:0c:f2:37:bc:04:fb:e0:4c:d3:bc:44:29:
97:be:6b:e0:42:44:60:47:68:f1:9c:a3:4c:34:ba:
6f:5b:50:7d:27:29:3d:84:84:4f:77:ee:5f:98:c8:
40:53:cb:8b:68:f2:66:4f:80:a6:df:b7:64:a9:94:
24:03:9c:a6:36:f9:a9:be:cd:43:07:85:08:31:4f:
00:ac:bd:af:c1:19:57:24:68:27:26:e5:18:a1:f9:
ef:48:b1:96:fb:5b:25:c1:36:27:15:df:b9:3f:f2:
98:7e:05:04:74:87:07:68:05:d7:ba:5f:e2:e8:fe:
cb:ce:93:77:cc:10:d0:44:db:93:3f:1a:19:d6:9b:
37:ee:9a:76:8c:0a:a2:0a:9a:fa:d4:51:cb:be:09:
9e:1e:a0:b5:ff:b5:ea:11:2c:da:3a:f3:7e:68:b4:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:2C:AC:1B:DA:DF:E8:4E:11:D2:F8:8F:BC:81:C9:A6:50:48:DA
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:34:1a:18:e9:8d:35:4c:d3:b2:2d:fd:fe:6d:9f:a7:50:
f6:ff:87:8b:9b:96:b5:ca:ea:9e:08:d2:9a:3f:1d:48:dd:e8:
27:50:09:68:f8:b4:b8:3f:74:92:a1:0b:92:e1:df:53:26:2f:
9b:73:53:37:06:39:b7:8d:cd:30:2f:46:e3:cd:d3:a1:74:11:
f8:52:28:56:a7:90:87:c0:43:e7:51:a5:0b:aa:17:92:a4:f8:
62:09:42:f9:ed:a2:b6:c6:da:46:06:de:cb:97:3a:4d:8e:cf:
86:e8:47:aa:6b:bb:b8:00:4b:20:4f:cd:d7:40:99:4f:cf:f2:
57:1c:e3:b2:33:2e:50:ba:78:59:40:2d:d2:00:28:42:a3:c3:
be:4b:c2:e3:bb:db:d4:73:78:6f:20:d3:db:b1:6e:eb:73:be:
f4:27:4a:38:f7:8b:2c:4e:a7:47:6b:48:40:63:87:47:05:eb:
2d:e5:2b:63:b4:12:4c:31:0f:d1:97:bb:1b:a7:3d:92:37:cf:
f7:95:99:b2:40:95:d3:0b:cf:27:e9:49:1e:0a:78:34:a9:60:
91:00:c9:41:9b:3d:11:3d:15:8e:6a:e8:63:60:aa:cf:60:f4:
6b:a3:39:a2:31:3c:42:39:65:ee:0d:6e:34:eb:05:af:3f:9e:
28:98:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:52:28 2026 by rpki-client