Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: aJgh8/RDkciWrl5V6p+BH3f8u+JflllkkDWnImz7mI0=
Subject key identifier: 3A:CC:0A:02:5C:42:93:EB:AD:88:CC:11:B5:80:05:8D:15:22:74:5A
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019D2C2A7DDB33EA3E6A49A1993C928DEAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: 53
Signing time: Thu 26 Mar 2026 22:01:15 +0000
Manifest this update: Thu 26 Mar 2026 22:01:15 +0000
Manifest next update: Fri 27 Mar 2026 22:01:15 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: PuGNURJmKIVzC3FkwP9LfZUZf9u2V6n/MfSGGaSDQ4g=)
2: pKEJ7DFWHbBkVzp3bQLrdzxNPJY.roa (hash: TMTD7mh7ooZTdBqCU8hqfvjG3It5Zy3T0eHIJx3jzjI=)
3: yk3NAuQ0NoST9PEW0vgb3LGhviE.roa (hash: VQ5a/vSth0KQuphYV4DJB31TjGhP1sRfoX91QXXY+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:7d:db:33:ea:3e:6a:49:a1:99:3c:92:8d:ea:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Mar 26 22:01:15 2026 GMT
Not After : Mar 27 22:01:15 2026 GMT
Subject: CN=3acc0a025c4293ebad88cc11b580058d1522745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:1f:23:5a:d0:80:0e:41:7d:c0:f2:fd:93:
6c:3e:da:35:b1:21:ec:01:df:ce:77:ac:4c:50:cb:
f3:bc:37:dc:97:4f:aa:67:58:38:2d:1f:67:fb:ac:
14:16:f9:31:0d:26:2e:60:a8:23:3b:56:e2:d3:45:
d4:77:4a:c5:7c:78:05:b3:43:53:f5:17:15:b9:2c:
16:77:51:d4:2f:a6:de:9d:b2:6d:76:3b:8b:e3:04:
3a:4c:79:fb:bb:f1:63:2b:7f:ef:d2:38:2b:8d:38:
9b:d3:81:11:6d:43:5e:ee:ae:fe:e5:fd:aa:16:e7:
62:04:b3:6a:de:99:20:53:ec:be:37:34:6f:9d:c6:
da:b9:8b:af:07:6d:26:a8:32:e9:ec:b1:9e:49:f2:
85:eb:38:d6:35:81:87:9d:bc:3f:e1:ab:e4:a9:08:
57:58:2c:54:c6:06:16:be:16:c9:2c:d5:50:7d:a4:
97:00:cc:05:44:73:37:16:d0:63:f4:96:a8:a9:fe:
16:54:e3:38:f9:c0:40:00:01:b6:c8:77:93:82:17:
01:88:e8:4f:2a:16:2e:97:92:8d:76:3e:99:05:2f:
4b:cd:8b:fd:ec:e2:b0:f2:c7:c3:c7:05:7c:4d:91:
62:fe:0b:e0:83:33:ee:24:89:ec:78:76:bb:d2:72:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:0A:02:5C:42:93:EB:AD:88:CC:11:B5:80:05:8D:15:22:74:5A
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8f:1c:c8:17:b3:d6:66:0f:ab:06:32:ad:e0:8f:3c:63:be:
a4:bc:30:21:3f:9f:7c:c4:5c:6c:d4:77:31:44:dc:3b:83:85:
5a:47:3c:df:9f:6f:a5:a0:0f:36:b7:4e:cf:9a:9e:7a:1b:2c:
be:1a:5a:75:52:2c:93:43:b3:bf:53:67:43:ea:55:77:b6:59:
17:15:8c:49:5f:1b:56:ac:fb:4d:e6:04:d4:df:f3:80:ae:09:
b0:52:9a:13:92:f6:17:8c:49:df:ae:b8:56:6f:35:26:bf:d8:
bf:4b:39:4c:14:0a:58:21:84:c0:5a:8c:f3:ac:b6:6e:0f:13:
45:3b:ed:7f:ef:f1:6e:e5:f5:5c:b3:e9:bd:42:86:f0:fe:54:
a7:02:20:2a:4a:f3:cf:b3:2e:f8:6e:aa:b2:a5:d7:db:4c:81:
c1:1f:76:4a:27:08:a6:8a:96:ff:ad:59:01:26:cc:10:76:76:
e3:f0:86:5b:ed:80:97:44:52:d1:a0:61:62:2b:05:c6:4e:91:
73:7a:a7:1c:26:d6:8e:b7:0a:67:e6:d4:25:66:f9:b4:bc:41:
4c:f0:8d:88:23:c3:bb:b5:0d:71:80:52:8c:cf:1a:e8:26:53:
ae:1b:9d:d1:5f:9d:cd:15:2b:98:5f:3f:d2:6e:42:c8:e6:9e:
28:c0:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:13:27 2026 by rpki-client