Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: 5Gc8p4hyUKwe5FPfqn/cGL0gkEI6Xe78JdYYvozuAfA=
Subject key identifier: 06:F6:27:6F:26:9E:CB:4C:2B:95:FA:6C:F4:FE:91:B5:A8:3A:DB:B7
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019E1BD94B2B57581B41D49345106889F5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: D0
Signing time: Tue 12 May 2026 11:01:25 +0000
Manifest this update: Tue 12 May 2026 11:01:25 +0000
Manifest next update: Wed 13 May 2026 11:01:25 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: S+/ZEKSQ2WJAIGyVq+TYzteDrvdu3ZLeLjQXkGz5deU=)
2: IwtQx6oFlRNo-3alo1jOZanjnW4.roa (hash: JzPNRHFpFrDNzA2kwkl527pUT+J4p+omOEUd1ZuqlyQ=)
3: j77VlxKGZFTBeMoq8dRpC_01Kvs.roa (hash: /23p2YQZi+3zBIY8FsXmhv9zCZT3wm/sCfekirsWiKI=)
4: mUoDBRXkgTNzdjas0Ha_cdFwJ-0.roa (hash: PfPSIrSAOylS94Xd2snc5lAmLj9DBBVThou8n98ALEY=)
5: yk3NAuQ0NoST9PEW0vgb3LGhviE.roa (hash: VQ5a/vSth0KQuphYV4DJB31TjGhP1sRfoX91QXXY+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:4b:2b:57:58:1b:41:d4:93:45:10:68:89:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: May 12 11:01:25 2026 GMT
Not After : May 13 11:01:25 2026 GMT
Subject: CN=06f6276f269ecb4c2b95fa6cf4fe91b5a83adbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:e8:b9:0c:4e:3a:9a:06:a7:f2:c8:24:ea:
fb:c6:c7:dd:9f:94:33:a5:29:aa:6c:e7:9c:9f:d4:
b9:76:1b:ee:be:2f:74:0c:25:be:65:10:5f:2d:00:
07:a5:69:b3:f2:f4:51:6c:aa:48:27:ba:b1:74:dd:
86:0c:8d:16:6f:2e:e1:f1:d8:1b:ba:e8:00:f8:af:
23:96:0f:dc:a9:24:ea:a1:c9:54:d7:ab:ab:d6:68:
99:ea:66:9d:7c:5a:5d:0d:d4:8b:85:a3:d8:c5:9c:
0a:0d:e2:dd:3f:c7:fa:3d:ac:91:9e:d2:bb:7e:a7:
3c:2a:d8:15:85:75:5b:cb:8f:f6:98:cc:fe:bc:58:
37:9e:9f:7d:c8:04:65:0c:35:c3:b9:bd:4b:a2:71:
14:87:0a:0a:0a:9d:52:7e:c0:c7:76:fb:34:cd:97:
8d:39:92:56:bd:70:c6:5e:61:f0:34:b4:0e:c6:1d:
e9:38:6d:e6:59:36:fd:b1:ac:d9:e7:73:7e:09:41:
46:ba:04:60:d4:0e:0b:50:1e:cb:f6:26:f7:b5:04:
9e:c8:f1:2f:17:5b:f1:38:59:d7:7f:83:c5:1c:9d:
c7:43:e9:55:c9:2a:84:2f:77:de:f5:43:b4:84:2a:
4f:d6:25:cc:0c:cc:cc:bf:c9:e1:1b:68:42:80:04:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:27:6F:26:9E:CB:4C:2B:95:FA:6C:F4:FE:91:B5:A8:3A:DB:B7
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:f7:ba:5c:b3:6f:08:c5:98:87:a2:76:86:71:b8:d9:51:
a8:d6:f1:3f:b4:17:f9:71:83:24:1b:53:79:48:5a:29:73:6d:
d8:2e:5e:02:46:15:45:87:6c:42:5b:69:6b:df:ee:1d:2e:5b:
6f:fc:70:cb:7c:1e:c8:ce:b5:e1:4f:51:24:28:53:74:f0:f9:
3e:da:0a:ea:33:b6:63:f9:bb:be:de:ca:c9:51:71:a5:bd:2b:
64:3f:95:64:8c:42:09:76:fa:f6:ae:e4:47:88:98:cf:84:d9:
1f:c0:13:c7:09:a4:27:eb:20:fb:fa:a2:78:92:ef:b6:16:67:
a8:bc:9b:71:49:03:ce:12:2c:c4:e0:d1:ba:78:24:1c:db:5d:
68:05:9d:a2:ef:cc:9c:b1:5c:88:e0:b5:6f:d8:3c:6a:48:f1:
c0:ec:b9:f3:fa:44:7c:6b:87:c3:76:52:f7:62:c4:25:b7:79:
40:5e:22:f1:ea:ff:73:78:af:bf:85:6f:4e:f8:fe:81:0e:17:
83:c3:1c:de:54:b6:2d:88:de:36:c3:ca:16:47:d4:76:c6:48:
a1:76:4b:86:7f:a1:fd:90:62:da:a1:54:bf:11:1e:a1:9f:36:
df:57:4f:28:d4:fe:6d:76:25:66:1d:e9:90:5f:40:01:e7:5f:
ac:86:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:57 2026 by rpki-client