Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
File: 18670561BFA9D2336DFAA180C44342B046E19ABC.mft (raw, json)
Hash identifier: nhQE4JHLE/McJ6mn+b2yr07zXIyfxxu6SckwMLyFacE=
Subject key identifier: DD:44:A6:BA:34:41:49:7D:84:AA:10:91:E5:8C:2A:2E:61:4A:54:07
Authority key identifier: 18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
Certificate issuer: /CN=18670561bfa9d2336dfaa180c44342b046e19abc
Certificate serial: 73319472DBF5E2C3D99178CD680BD69F083DF27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
Manifest number: 41
Signing time: Wed 07 Oct 2026 10:22:17 +0000
Manifest this update: Wed 07 Oct 2026 10:17:17 +0000
Manifest next update: Thu 08 Oct 2026 13:54:17 +0000
Files and hashes: 1: AS204464.asa (hash: 2PCJGP/4Ki50381rjrEHlPjppnpXzxcouZLOIhoy8+s=)
2: AS199746.asa (hash: NoXtq8bJrGUN5hpXsuaHgog5KFegWFt2ayB5yOjjj5A=)
3: 18670561BFA9D2336DFAA180C44342B046E19ABC.crl (hash: g2GcyS9hblCqoIFTgXO0URqgpm2aDVs7KqhjjV0kdU8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:31:94:72:db:f5:e2:c3:d9:91:78:cd:68:0b:d6:9f:08:3d:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18670561bfa9d2336dfaa180c44342b046e19abc
Validity
Not Before: Oct 7 10:17:17 2026 GMT
Not After : Oct 8 13:54:17 2026 GMT
Subject: CN=DD44A6BA3441497D84AA1091E58C2A2E614A5407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:1a:c7:46:96:ee:f4:5d:4e:2c:63:c4:50:
47:5c:3a:6e:6b:4c:74:6a:6b:00:10:f9:cc:a8:2d:
b0:83:a1:81:6d:38:99:29:80:d4:0c:04:fb:67:dc:
b7:92:30:89:0a:cb:be:31:e9:e9:80:42:8c:08:65:
ac:ad:b0:42:7e:da:9c:36:46:75:c1:48:19:a7:7e:
49:4d:df:a0:32:4e:c5:3f:69:a9:bc:b4:39:bf:ff:
fb:ab:32:72:63:76:29:e0:42:a5:7b:eb:3f:78:ee:
09:5b:88:04:9c:15:84:93:fa:4d:17:8d:d3:e5:6e:
46:2e:42:46:1b:06:b6:8c:51:78:07:2e:f4:e6:50:
1e:de:67:5a:87:24:48:dc:83:49:22:58:c5:05:3b:
2f:d0:a5:3f:d8:85:38:d4:59:4e:db:23:0a:a7:52:
77:1f:7c:ec:10:ef:91:7d:b3:43:85:51:a5:7f:6c:
43:f1:a1:03:1b:fd:ab:b2:7b:0c:4d:e4:e8:21:b0:
21:a5:82:c2:ad:e2:ab:f0:64:40:7f:68:9a:05:05:
8b:cb:8d:c8:39:08:04:ff:82:4f:d2:c5:14:99:26:
63:29:87:eb:7e:1b:37:c0:19:bf:fe:57:0e:90:be:
1d:c4:52:31:7e:43:a7:81:a4:63:aa:62:d3:ca:22:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:A6:BA:34:41:49:7D:84:AA:10:91:E5:8C:2A:2E:61:4A:54:07
X509v3 Authority Key Identifier:
keyid:18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:38:df:e3:89:c0:02:b9:75:92:3e:5e:d8:aa:fe:1d:ac:84:
37:7e:62:55:14:bb:63:a8:0d:d0:13:e3:26:eb:cf:c0:90:88:
4f:85:40:d4:b0:fe:d5:75:6e:2e:bc:89:67:2f:1e:44:6c:32:
b3:1a:8a:b9:b9:9c:eb:06:81:9b:e6:13:ff:36:d7:9f:84:f2:
45:5e:84:a9:0f:6f:8b:55:7b:b6:b4:bf:70:e5:c1:e1:93:e7:
8b:83:58:d3:79:17:ea:ad:61:5d:36:35:76:f3:bc:a6:28:b8:
65:e1:d8:fc:6a:04:e1:d1:d5:f9:84:3f:99:3e:fa:19:b8:06:
f3:1e:a8:b3:5d:48:50:3f:8e:e2:96:bb:72:18:65:bf:02:dd:
1f:5b:d0:4c:bd:1f:ba:15:29:76:bb:af:ab:b4:7d:ec:cb:67:
d6:0b:57:1e:d3:4d:8e:19:64:49:62:c9:96:ca:5f:4c:37:d1:
57:c1:ab:29:24:f1:cb:47:7c:9e:4e:08:f7:44:8a:d1:5b:d3:
2f:2f:21:77:5a:e0:c2:21:ed:e3:26:4e:cf:31:03:ef:a9:12:
1f:02:a4:86:be:77:6a:d2:01:75:6e:7b:02:2d:f5:a1:4e:d1:
4a:19:54:cf:74:1a:b6:75:c4:81:7d:0d:04:19:3a:fc:68:76:
b7:06:c8:d8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUczGUctv14sPZkXjNaAvWnwg98nswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg2NzA1NjFiZmE5ZDIzMzZkZmFhMTgwYzQ0MzQyYjA0
NmUxOWFiYzAeFw0yNjEwMDcxMDE3MTdaFw0yNjEwMDgxMzU0MTdaMDMxMTAvBgNV
BAMTKERENDRBNkJBMzQ0MTQ5N0Q4NEFBMTA5MUU1OEMyQTJFNjE0QTU0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIrBrHRpbu9F1OLGPEUEdcOm5r
THRqawAQ+cyoLbCDoYFtOJkpgNQMBPtn3LeSMIkKy74x6emAQowIZaytsEJ+2pw2
RnXBSBmnfklN36AyTsU/aam8tDm///urMnJjdingQqV76z947glbiAScFYST+k0X
jdPlbkYuQkYbBraMUXgHLvTmUB7eZ1qHJEjcg0kiWMUFOy/QpT/YhTjUWU7bIwqn
UncffOwQ75F9s0OFUaV/bEPxoQMb/auyewxN5OghsCGlgsKt4qvwZEB/aJoFBYvL
jcg5CAT/gk/SxRSZJmMph+t+GzfAGb/+Vw6Qvh3EUjF+Q6eBpGOqYtPKIqSrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3USmujRBSX2EqhCR5YwqLmFKVAcwHwYDVR0j
BBgwFoAUGGcFYb+p0jNt+qGAxENCsEbhmrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi
ZDQyLzAvMTg2NzA1NjFCRkE5RDIzMzZERkFBMTgwQzQ0MzQyQjA0NkUxOUFCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dHY0ZZYi1wMGpOdC1xR0F4RU5Dc0Vi
aG1ydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zY2JmYWQ5Ni03
OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvMC8xODY3MDU2MUJGQTlEMjMzNkRG
QUExODBDNDQzNDJCMDQ2RTE5QUJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDjf44nAArl1kj5e2Kr+
HayEN35iVRS7Y6gN0BPjJuvPwJCIT4VA1LD+1XVuLryJZy8eRGwysxqKubmc6waB
m+YT/zbXn4TyRV6EqQ9vi1V7trS/cOXB4ZPni4NY03kX6q1hXTY1dvO8pii4ZeHY
/GoE4dHV+YQ/mT76GbgG8x6os11IUD+O4pa7chhlvwLdH1vQTL0fuhUpdruvq7R9
7Mtn1gtXHtNNjhlkSWLJlspfTDfRV8GrKSTxy0d8nk4I90SK0VvTLy8hd1rgwiHt
4yZOzzED76kSHwKkhr53atIBdW57Ai31oU7RShlUz3QatnXEgX0NBBk6/Gh2twbI
2A==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:50 2026 by rpki-client