Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: oSuW6CO8JJifslQXlTKYeI37yvXICw8bsr5BltqQ6kY=
Subject key identifier: 0D:05:C4:9E:52:E6:CE:E0:C9:D0:6F:60:38:E2:E1:87:02:64:E4:52
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01A0CA7D76FDC610EB279CD2E22430F656C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 19:00:15 +0000
Manifest this update: Tue 22 Sep 2026 19:00:15 +0000
Manifest next update: Wed 23 Sep 2026 19:00:15 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: aNJLRMV8cQvvFviEkIiC3najx+xt+S9Al61gwcYLYB8=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:76:fd:c6:10:eb:27:9c:d2:e2:24:30:f6:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Sep 22 19:00:15 2026 GMT
Not After : Sep 23 19:00:15 2026 GMT
Subject: CN=0d05c49e52e6cee0c9d06f6038e2e1870264e452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:64:df:01:cc:0d:70:25:6d:ca:69:07:5f:
a7:ab:f2:26:fa:cb:72:04:5f:bd:a2:79:a3:29:1d:
8b:cc:ec:bd:62:38:e0:62:7b:10:5b:ee:6b:a9:24:
ae:7f:0b:34:01:45:fd:eb:86:fc:64:15:0c:ae:3e:
dd:b9:2f:19:ef:e2:05:ea:7f:b8:d3:c0:6f:9d:03:
4d:d6:c6:8a:a1:82:6b:d7:6f:d8:f0:db:e4:3b:56:
7a:c3:27:28:69:93:1f:68:5f:c9:01:45:3e:fd:31:
ee:6f:5b:94:44:c4:90:5d:23:0a:b9:9e:da:45:0d:
8f:43:73:03:e8:59:69:c2:25:0e:26:f3:eb:6e:a6:
13:6a:35:a6:0b:68:29:02:81:f6:c4:13:9e:13:31:
30:9d:e9:d6:82:e3:44:bf:57:2f:88:78:92:98:51:
8a:9f:21:a2:5b:40:19:d2:c4:cc:d1:4d:8e:ec:b0:
71:51:f3:29:f0:0b:75:42:c3:e2:97:e8:9d:2b:70:
e6:b2:ec:51:52:9b:1f:1b:5c:c5:fb:2d:2f:89:07:
ab:56:f7:04:aa:a0:07:db:f1:ed:46:14:06:73:31:
1c:59:18:f9:c3:29:81:96:34:02:e2:42:12:0c:65:
92:af:58:7b:ee:0d:de:c5:79:03:eb:a8:80:0f:e6:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:C4:9E:52:E6:CE:E0:C9:D0:6F:60:38:E2:E1:87:02:64:E4:52
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fb:d0:40:ac:fe:70:f0:b1:51:3d:58:6d:a7:ce:41:6a:a9:
66:63:90:3c:17:52:cf:91:0b:93:ff:be:f0:0f:27:0d:46:e1:
09:2d:79:5d:6a:c5:76:fb:6d:cc:f1:f1:f0:2b:c7:1b:35:3f:
b6:f2:6b:f7:23:fe:e6:d8:c3:b5:60:ab:e5:96:18:3a:a7:9f:
86:ff:c5:82:5b:39:f6:85:0c:31:62:88:6e:00:5c:e2:5e:00:
b8:e8:d6:53:c8:f5:fa:be:74:47:38:c5:f9:96:3a:a1:5b:cf:
bd:07:1c:30:9c:ea:11:0b:8f:9b:1b:64:3e:cb:83:7e:87:cd:
45:61:6a:e1:21:a0:80:7d:74:c8:f7:84:58:50:f1:ab:29:7d:
92:6f:7b:b3:8c:fa:92:b6:8c:85:da:17:5b:4b:1d:c0:0a:f6:
37:27:ce:03:ff:e8:02:66:26:2e:a4:c6:d9:e8:56:cb:f0:db:
41:69:01:da:ac:08:9e:08:f7:ba:ef:42:e7:0e:02:78:61:0d:
49:a7:41:31:27:b9:2e:0b:ce:3c:c7:cb:37:a1:ba:27:8b:e8:
50:e2:a1:f3:ed:ba:6f:6f:f9:1a:70:a8:1e:a7:44:bf:14:bd:
97:b8:fb:c9:f7:66:58:6b:ec:e7:36:42:b2:23:ae:26:72:7d:
82:96:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:54:20 2026 by rpki-client