Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: pWtWSxhwcBkwrx5XMTnDgsh/hYcHGv9jUmHnyyb7/o4=
Subject key identifier: 08:1B:7B:1C:9C:69:3E:FE:69:4F:68:98:FA:AA:48:76:63:17:20:B8
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019F8FB548724EE08F2897C13390C9098FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: j3eKdkTIOQoyFui42265hgle0AqKuniTdoL82JW+6D8=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:48:72:4e:e0:8f:28:97:c1:33:90:c9:09:8f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=081b7b1c9c693efe694f6898faaa4876631720b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:94:18:a8:27:f4:bf:81:cb:04:49:14:4f:
25:43:a4:0f:17:63:64:2c:c0:c0:fa:e2:ed:93:5f:
ee:be:32:b2:2e:ab:2b:95:99:0a:21:7f:c7:e9:a5:
9d:b4:2f:80:8c:46:2d:33:3a:79:38:0c:18:3f:d8:
66:db:61:f7:4c:a2:87:ec:ac:89:da:3b:6f:d1:79:
c2:ff:b4:92:9e:7a:49:cd:52:ec:1b:49:ab:06:13:
21:5a:c9:48:89:28:43:91:61:81:3d:35:16:d3:9e:
e7:78:c4:ff:ad:2f:9c:d0:cd:25:a5:72:f1:e4:90:
09:e8:78:1c:2a:05:1a:3d:f0:80:ff:ad:ed:5c:3c:
2d:f2:cd:7a:71:f8:33:87:b3:b4:ff:22:ae:ed:e1:
b6:dc:bf:a0:aa:06:c8:0d:3e:06:ba:87:fc:76:f4:
94:8e:23:4b:43:62:5c:4b:8e:24:66:13:1e:9a:94:
42:19:c5:de:d0:87:25:32:de:d4:7c:76:d0:2c:ee:
de:52:ec:84:a5:5a:26:f6:9d:54:e1:2a:f6:c5:80:
92:eb:f9:2c:27:0f:f9:be:7a:56:5e:18:90:bf:60:
e6:31:1f:fc:ae:ab:f9:ad:dd:53:72:ad:a5:bd:4a:
0c:72:94:cf:0b:6e:01:d8:42:50:d5:07:ad:cc:6f:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:7B:1C:9C:69:3E:FE:69:4F:68:98:FA:AA:48:76:63:17:20:B8
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:64:28:36:27:0d:fc:b1:c5:f7:0d:a9:aa:95:33:e6:50:bd:
31:b1:83:74:77:f0:81:6b:3c:bd:e7:7a:f9:28:70:cf:1f:3c:
61:e5:ba:a0:60:9a:ac:9c:d0:b7:3b:ce:c8:b8:1f:d9:7c:08:
c3:05:a1:11:6f:3d:4e:5e:de:be:17:c5:1c:26:86:1a:0c:ff:
0b:f5:cf:cc:21:d4:be:b7:28:96:f6:8e:76:7b:60:d6:04:97:
7a:a9:98:33:b6:d8:40:11:79:a6:c7:e4:53:f3:8c:44:a3:9a:
66:b5:6e:5d:53:41:c1:bf:5b:40:6c:b1:9b:86:40:4c:07:9c:
0d:4d:be:ff:2e:b9:f5:f3:7d:67:86:3a:69:55:3f:70:df:20:
ee:b0:25:6f:55:3a:94:2b:df:f8:f9:8b:9c:16:dc:b0:2c:72:
c9:2c:ae:0f:59:a6:b4:22:d1:c7:54:c0:98:c6:70:7e:91:1f:
7c:45:38:c9:4e:f3:06:bd:ca:e8:a6:eb:aa:a0:13:2d:c1:55:
c2:68:9e:65:f3:58:d2:cb:e0:4d:af:10:b3:ea:50:b9:ec:ce:
0a:a9:7f:c4:98:1c:d7:6f:cf:6f:7b:d0:f9:c6:62:bb:0d:32:
a5:72:6f:54:8c:6b:ff:20:3c:dd:29:03:9a:aa:d5:7c:71:59:
3e:25:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:02 2026 by rpki-client