Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: ZnAUlz0y6oOty2nQlDTPiHTh7DUjPZ+sfCv4oFpMXIg=
Subject key identifier: 52:4D:3A:CF:62:89:96:CC:46:86:C0:98:5C:DB:74:1C:73:1B:5B:09
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019D27A862B2605F89A6D74EC4E23CEF33F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: D6VskYj8INt9qT7NK5rfeo7p/e3mn0yEKr3IATbSOBs=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:62:b2:60:5f:89:a6:d7:4e:c4:e2:3c:ef:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=524d3acf628996cc4686c0985cdb741c731b5b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:1a:8a:01:57:c9:ec:be:a8:8b:1f:7e:d6:
9a:77:a0:df:fc:c4:5d:8d:9e:ad:b7:6c:bb:78:07:
ad:44:e4:31:70:18:ef:73:ec:92:25:e0:f1:f0:89:
15:51:05:5c:93:c1:e7:1a:ac:db:e7:80:44:30:96:
58:61:aa:7c:ee:b4:78:b7:d4:b3:37:57:d1:4e:34:
94:22:ca:36:f0:47:1f:63:31:8a:75:22:6d:79:a2:
ea:a1:24:a8:47:33:97:63:fa:ef:14:2b:54:fb:55:
b5:cf:fc:70:38:1d:d6:1f:5c:6c:20:f4:ff:94:97:
5f:d5:e0:e1:cc:c1:17:f3:72:f1:4f:9e:c6:46:60:
08:c6:ae:76:a0:f9:91:1d:6c:c3:10:d9:45:f2:36:
01:08:68:5e:ea:47:39:8f:58:f9:9f:4c:d3:d3:12:
4b:37:75:07:58:cd:82:da:0d:3b:bc:87:ad:45:ff:
2a:9f:d9:c7:50:9b:13:e4:cd:6f:e3:d3:69:81:6f:
7d:06:04:b7:00:91:8e:7b:d2:75:c4:73:a1:e6:75:
2e:76:13:21:b4:1d:7d:71:fb:48:d2:88:81:3d:ff:
a1:bd:3a:ca:28:da:81:e9:9b:a9:78:42:b1:53:c8:
0f:72:8b:45:eb:11:f2:94:a6:a5:12:0d:75:73:d4:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:3A:CF:62:89:96:CC:46:86:C0:98:5C:DB:74:1C:73:1B:5B:09
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:39:87:60:fe:9e:48:20:5b:eb:20:32:4d:1a:05:ba:8b:57:
ef:3c:e2:2b:c9:07:37:a8:ff:3c:7b:40:0f:af:88:c6:44:80:
2e:2f:45:b8:c9:78:68:55:2e:f8:fc:5a:c6:13:53:7a:8b:74:
90:33:90:2f:7e:b6:44:7c:1c:76:e4:ae:bb:05:da:c8:7a:71:
d6:d5:06:e0:dd:97:6d:f0:aa:50:77:9d:54:ca:30:ff:d1:71:
d0:ad:2a:a6:ba:49:82:4f:15:a6:3f:2b:61:b2:c6:95:a1:8e:
c9:16:ff:56:57:e5:05:2d:a7:b2:a5:66:1e:da:dc:cb:6d:35:
4c:87:e6:29:0e:ca:b1:d1:65:53:b0:a3:80:2f:f5:2f:2a:f6:
cf:0e:b4:e2:9a:44:f4:05:34:3c:47:26:3b:0b:7e:40:0c:45:
69:94:42:f8:1c:0f:cb:a6:3d:b1:d9:7d:9a:7e:a2:bd:77:c1:
1e:6f:bf:c5:72:a3:df:3d:9c:df:13:30:00:a3:d7:f1:1b:38:
15:b5:54:ce:dd:1d:60:2f:f8:95:1c:e7:8d:00:36:19:df:37:
1b:18:b7:77:2e:bf:74:44:2a:a4:85:98:76:ad:a7:ef:5e:9c:
f1:0f:7d:17:55:3f:2e:6e:15:36:80:ef:c7:19:31:9f:ab:d7:
52:0c:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:35:05 2026 by rpki-client