
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: A2clf90I+W8RenVyKPJmlp3l+K7B2vnjhA76PPlmfnY=
Subject key identifier: 1E:E5:9F:7C:BE:46:92:B7:23:9C:58:3E:61:3A:0E:DC:61:72:85:B9
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019CE5233FD7A8FFB26ADEE4D523826A012F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 186F
Signing time: Fri 13 Mar 2026 03:00:18 +0000
Manifest this update: Fri 13 Mar 2026 03:00:18 +0000
Manifest next update: Sat 14 Mar 2026 03:00:18 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: f8Cb71sUXRkcdHmPiNgwJ8aufD/EjymT2Ifa/QMazj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:3f:d7:a8:ff:b2:6a:de:e4:d5:23:82:6a:01:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Mar 13 03:00:18 2026 GMT
Not After : Mar 14 03:00:18 2026 GMT
Subject: CN=1ee59f7cbe4692b7239c583e613a0edc617285b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:d7:c9:80:56:ec:79:84:b0:aa:79:06:68:
74:1c:82:f3:f9:00:cc:9a:be:5b:aa:9c:e1:07:33:
c8:b0:f3:bf:bf:1b:96:03:8a:71:33:6c:62:fc:e4:
28:8c:24:8d:3a:37:83:98:be:37:35:e9:72:2d:58:
30:79:7f:d7:f8:94:1e:58:fd:89:b9:f8:a9:fe:66:
80:40:02:f0:71:b9:f8:3a:3f:4d:e4:8b:08:e6:3f:
5f:41:e4:1b:36:93:b9:f0:fb:7f:83:44:f7:5f:19:
84:cf:b6:bb:3e:97:ae:8b:be:35:5f:91:9a:5e:89:
48:90:77:d8:94:04:ca:bc:e7:3c:bf:68:41:0a:52:
90:71:76:66:65:93:91:af:45:88:c0:2f:0e:01:dc:
b2:f2:22:8b:5c:1e:0c:26:fc:04:fe:bd:65:96:69:
6a:70:0e:b3:33:00:4e:82:48:a3:aa:f9:fd:9b:6c:
83:c7:3c:ff:d8:bc:96:ab:c8:df:73:46:08:47:e3:
1b:04:ac:01:74:f5:0a:d5:f6:6e:f5:b3:8e:26:fb:
36:f1:c0:ca:3c:2a:a2:f3:8f:63:d9:3a:68:b4:0d:
7b:27:fe:fc:fb:65:20:30:de:02:25:d7:2d:23:44:
0b:68:7b:2e:d2:03:25:d5:95:18:db:e4:fd:b3:d6:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:9F:7C:BE:46:92:B7:23:9C:58:3E:61:3A:0E:DC:61:72:85:B9
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:62:56:f5:ab:27:48:6e:53:8f:43:04:19:52:ed:77:8f:
ed:9a:b0:55:03:26:24:b6:81:ea:df:0c:ca:75:e1:3e:35:8c:
47:05:7d:4c:70:f3:7f:d4:6c:8c:fa:30:06:fe:da:84:b4:fd:
5b:05:1c:b8:71:9d:ef:be:88:8c:f4:53:bd:ed:32:6e:a1:00:
38:ee:9a:d2:a9:2c:63:fd:ac:aa:86:1f:d0:39:41:e2:32:eb:
ee:ab:de:11:7c:87:ef:0f:54:dd:98:02:6e:26:6f:ea:8b:55:
5c:3e:28:4a:7a:2c:e7:88:5b:fa:a7:3c:9f:51:91:4f:f5:40:
ae:9f:91:94:f2:00:a1:1e:16:8d:7e:82:9b:6f:d1:cc:7c:d0:
44:0b:66:f1:25:92:5c:c0:f3:23:0d:38:5d:ab:af:c9:d0:2f:
50:8a:c6:8b:30:9f:b0:94:93:da:e4:dc:e4:29:23:dd:79:67:
bf:b4:03:3f:8c:78:50:c5:2c:ef:1a:e5:89:50:f0:0c:59:50:
53:37:65:ea:2b:79:55:70:b9:c7:a6:6f:47:25:64:42:9f:03:
35:50:86:2f:6b:52:fc:18:b0:fe:66:6e:f9:8f:12:b7:cb:52:
c2:97:8c:11:5d:84:e8:ca:2e:e2:11:00:57:a4:fe:66:df:96:
46:29:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:41 2026 by rpki-client