Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: wev5NKILCDRbcEyvH5rCq5Qb4cbjvrywP/K8u6YpHUI=
Subject key identifier: 20:B3:8A:CC:B9:AD:55:DC:41:F0:5C:E4:5A:5A:65:DE:59:82:7E:1D
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01A1C969512A24BF8981C024D2EC9260E558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1AEE
Signing time: Wed 11 Nov 2026 07:01:24 +0000
Manifest this update: Wed 11 Nov 2026 07:01:24 +0000
Manifest next update: Thu 12 Nov 2026 07:01:24 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: 6XBrrVSIh6+hGC/BMmK2Nw2xfkBpXtpW0QTn3ELkQ7E=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:69:51:2a:24:bf:89:81:c0:24:d2:ec:92:60:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Nov 11 07:01:24 2026 GMT
Not After : Nov 12 07:01:24 2026 GMT
Subject: CN=20b38accb9ad55dc41f05ce45a5a65de59827e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:63:6f:50:3a:ce:80:a8:cf:d9:9c:34:1e:
b3:24:48:ce:d0:f6:5e:19:2a:e3:19:f6:ef:85:e5:
c4:4e:63:31:b6:2d:65:96:68:21:7c:39:6e:64:12:
f8:40:88:82:55:25:e8:c7:25:4b:73:a5:c7:38:30:
0e:c5:c0:0b:c7:8c:f5:59:72:18:5f:0d:67:97:3a:
e9:1b:6d:2a:85:d4:c7:bb:67:56:b1:33:32:25:fb:
67:6a:c9:2a:2f:7b:58:c5:ab:d5:e7:be:8c:21:f4:
3b:c4:08:7f:68:0e:1b:80:02:f9:57:d1:f2:7a:3a:
ab:c2:87:cc:fb:a9:71:f5:9c:25:34:99:a7:04:3c:
57:d3:ef:c2:9d:22:c7:95:7f:67:63:ce:f9:9a:5e:
dd:2e:45:f1:91:16:b9:57:26:df:5b:fd:39:62:5f:
fc:c9:a9:b8:7a:ff:01:3e:9a:a9:1d:70:fb:7e:9e:
f8:47:66:ed:3f:62:63:55:c1:80:3b:44:8d:43:d9:
48:54:2a:cd:be:10:af:45:4b:c2:7a:70:3c:ad:1d:
8e:f0:a2:fe:2e:e6:c2:c3:b7:90:9e:8f:bc:0e:e4:
89:d5:05:b7:1b:7e:b3:13:08:3e:d7:58:6c:c3:3d:
54:3f:74:36:fe:74:2c:27:87:41:6d:7a:45:c4:f3:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:8A:CC:B9:AD:55:DC:41:F0:5C:E4:5A:5A:65:DE:59:82:7E:1D
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:e6:6d:d2:06:75:50:c1:ba:94:e1:15:84:54:46:bc:cb:
a7:61:56:87:ba:26:d5:82:ea:7f:b4:46:1a:4c:b2:45:5f:53:
c9:4e:6f:b6:be:6f:df:e1:f1:e8:ea:1b:82:ab:73:74:6d:19:
bb:41:e2:79:4b:a0:54:c6:8a:0c:9c:78:51:19:91:19:d2:88:
cf:da:11:c4:31:9a:2f:10:20:7b:55:75:17:c5:29:c6:0f:43:
cc:cd:fa:05:16:74:a0:e5:ad:70:e0:bf:a3:ce:84:60:00:22:
82:37:7f:16:e3:50:58:cb:c7:31:fa:bf:ae:67:0a:78:02:02:
17:63:e4:3c:76:66:df:88:80:0b:fa:6e:4d:85:b6:6f:7b:57:
25:0e:6b:c9:7d:a9:fc:76:12:32:7f:4a:f7:38:29:37:96:64:
77:be:62:76:e7:38:a1:6c:54:4f:84:c8:50:f3:4a:af:ed:65:
0a:1f:fc:78:41:a1:cf:78:1d:92:9a:91:ea:83:75:bb:c7:0e:
d3:19:2a:ef:9c:dc:d2:d4:0d:89:fc:5f:5f:32:48:5f:eb:30:
1f:53:d2:04:c9:01:20:6a:7b:48:4b:47:32:90:34:e8:b7:8b:
fe:f9:a5:32:36:77:25:21:31:78:de:94:62:ff:9a:d3:70:7b:
f1:2e:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 18:20:26 2026 by rpki-client