Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: yJOMSop8H0Yfhy4FCh+88HvpcDQU5LjLMgNtrdGYuLw=
Subject key identifier: 2F:38:49:31:C7:13:5B:12:5C:E4:F4:59:DA:A1:76:9B:AB:32:11:04
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019E1CEB45F663A1B553570CC297001F48A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 16:00:41 +0000
Manifest this update: Tue 12 May 2026 16:00:41 +0000
Manifest next update: Wed 13 May 2026 16:00:41 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: /Oml0j+xxkE3OTsTrvnYWKfDre9lWocqPBgqMy7Nxxg=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:45:f6:63:a1:b5:53:57:0c:c2:97:00:1f:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: May 12 16:00:41 2026 GMT
Not After : May 13 16:00:41 2026 GMT
Subject: CN=2f384931c7135b125ce4f459daa1769bab321104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:34:72:d5:0b:07:2e:42:b7:c8:50:1e:dd:
f5:e4:b7:71:c0:2c:d7:e4:17:fe:d9:a5:83:17:8a:
e0:df:bd:39:39:3b:7e:cc:90:a4:fb:52:cf:9a:82:
f0:fc:20:3a:5f:d6:46:2c:5f:33:9c:a8:99:e1:b9:
c7:81:af:dd:2c:08:46:cf:ab:25:be:87:b6:53:45:
2b:63:32:57:a4:aa:99:f5:0f:df:a6:74:a5:d5:6a:
f7:ec:fe:58:2e:92:96:c2:30:1b:1d:bf:58:27:b1:
48:9c:46:06:8c:61:63:ab:4d:ea:07:9a:8b:fb:6a:
e1:64:b2:ee:06:f7:a3:d1:dd:9c:76:e7:a0:ce:06:
f4:f5:8e:af:3f:34:b4:1b:f3:90:91:cb:d1:05:37:
10:a7:75:2b:18:0a:61:ba:ef:fc:6a:7d:34:e8:64:
a2:90:2a:bb:a8:27:2f:54:ea:bb:db:5d:3d:f3:38:
eb:58:22:20:12:cf:ab:16:d1:83:fa:1f:1f:b6:ab:
ed:18:5c:44:bf:27:9a:e0:df:89:bc:96:e5:85:fa:
f9:2c:f4:8c:12:1f:01:61:a5:2e:02:4e:70:c9:51:
41:ba:23:e0:3c:49:b3:e7:91:e3:79:98:62:53:78:
6a:6f:cc:d3:43:a6:83:3e:cf:25:a2:10:7d:b3:03:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:49:31:C7:13:5B:12:5C:E4:F4:59:DA:A1:76:9B:AB:32:11:04
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:1f:1b:84:7b:d4:4b:41:ae:4a:5a:3e:a9:85:d7:c1:96:
04:b6:bd:f3:fd:a4:be:db:82:14:20:7e:2e:11:7e:6b:73:c4:
cb:4e:02:d0:30:35:93:99:46:98:27:a4:65:dc:93:0e:b6:4d:
9f:a5:2a:74:f6:07:69:4c:f7:0d:77:fb:ae:5a:82:34:72:f5:
0b:8d:60:6a:79:b6:a5:fc:f8:6a:55:b2:66:7b:7f:b1:13:bc:
4d:a4:8c:50:51:c1:34:f7:56:42:6c:47:ab:3a:cd:20:d6:46:
a5:e0:e8:3d:de:17:0a:8b:74:3d:6c:e4:66:10:c6:e7:67:69:
8d:73:76:8e:81:b7:b8:a5:9e:fa:99:f9:76:b2:ae:60:ab:1a:
a7:d5:f5:bb:33:2c:69:68:87:47:8f:63:20:8e:12:56:3c:d7:
86:26:c2:c6:ac:b3:e3:6c:61:2e:5a:a3:22:4d:b3:0b:9d:a0:
d8:20:f9:61:78:f5:2b:b4:da:ce:64:0f:56:97:99:87:cb:42:
f5:44:7b:76:8c:cf:0c:4a:10:80:ab:3f:a7:52:1c:09:01:e9:
24:41:bb:5c:40:9b:31:7f:74:09:c0:49:f3:5d:cb:eb:5c:98:
7f:79:15:b9:d5:12:d5:bb:cc:94:6c:83:f1:b4:89:3d:64:8d:
fd:ef:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:26:46 2026 by rpki-client