Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: g99UWj5Ascj8Zr7akTVGk6KLz5RFdOMDUAmnHiS1+Q4=
Subject key identifier: 9A:09:29:D3:DE:1E:D0:71:AD:22:82:C2:D1:29:37:31:F0:70:24:EC
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 01A0DD29F5EC5862C9DE3E047D21DE79CA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 11D5
Signing time: Sat 26 Sep 2026 10:01:49 +0000
Manifest this update: Sat 26 Sep 2026 10:01:49 +0000
Manifest next update: Sun 27 Sep 2026 10:01:49 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: GPUlNo3xPzdCKFVHiCsWd41ntOkpAaGGXOutSPXcRr0=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:f5:ec:58:62:c9:de:3e:04:7d:21:de:79:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Sep 26 10:01:49 2026 GMT
Not After : Sep 27 10:01:49 2026 GMT
Subject: CN=9a0929d3de1ed071ad2282c2d1293731f07024ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:ed:8f:9c:45:f1:3f:94:5b:ff:22:4b:92:
c6:56:3b:9a:3a:e5:1b:f6:57:32:1b:54:4c:00:2e:
7e:1b:21:7f:1d:51:5a:61:2f:da:7c:94:d5:0f:aa:
67:ce:9a:0f:fa:70:ec:59:9a:c4:57:3a:f9:b0:b6:
1a:2d:84:49:1e:b0:d9:d7:ea:73:f7:e3:c2:02:c2:
b6:38:b3:df:00:c1:b7:76:2a:bf:96:74:06:b4:0b:
b5:15:1f:b9:f0:b3:2e:0b:10:5d:8f:95:93:9e:a8:
0b:a3:31:c5:4a:4f:6d:91:ba:d6:bb:52:4e:cd:87:
e6:51:4a:2c:f3:5a:6e:c8:6d:e5:50:3e:65:f3:a9:
a2:cb:74:32:bd:21:9b:7c:ca:07:63:09:db:e8:e3:
13:99:16:89:26:f3:73:47:65:6f:75:46:58:d3:75:
26:4b:31:09:b0:dd:e8:0b:e6:18:3f:4a:49:91:b9:
4b:9f:6f:a8:dc:8f:16:37:03:03:99:50:73:d0:78:
94:db:92:65:46:34:44:2f:7c:97:b3:10:df:a3:ab:
a6:9a:2f:56:1b:99:8a:4a:6f:c7:17:6b:bb:fc:48:
97:cd:5d:aa:03:c0:cf:20:3e:ba:f9:c2:24:50:d2:
e4:ea:50:83:6f:3b:6a:eb:1a:14:a1:db:52:24:85:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:29:D3:DE:1E:D0:71:AD:22:82:C2:D1:29:37:31:F0:70:24:EC
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c5:76:ae:47:57:ae:36:6f:19:8c:d2:33:f3:b9:ac:d9:1c:
08:9f:24:22:55:61:b7:09:72:96:b7:68:2b:a2:46:e8:6c:13:
ee:30:26:d1:3b:9e:bf:a8:3c:37:df:39:0a:1c:cc:bc:7a:69:
11:81:82:61:3d:97:fc:ca:79:9b:7e:57:1f:bb:7a:ac:11:3d:
a6:90:54:d7:ec:fe:15:43:80:2e:aa:c2:82:80:54:40:26:f5:
f2:bd:ea:32:d8:b9:19:9d:5c:b8:f5:c5:cb:37:cf:70:fd:59:
4d:f3:fe:dc:bb:ca:67:70:62:8f:2a:eb:65:53:70:6a:21:81:
0e:dd:27:d4:3a:68:91:db:66:b3:11:7c:d5:90:f8:7c:4c:ea:
72:06:b5:f1:4a:ac:4c:22:85:65:46:17:69:a4:6f:f7:a0:26:
0b:88:d9:2d:94:03:b2:02:5d:32:2f:df:12:47:29:56:ce:fa:
8f:d4:b3:7c:23:2a:74:99:cb:36:df:bb:5c:2b:d9:bf:70:61:
c9:b4:8f:a7:15:d3:f2:ff:3f:e8:c4:01:f1:15:70:8f:92:c8:
71:ff:ef:6a:38:69:3e:49:bf:85:02:b1:fa:48:cb:36:5f:6e:
7a:10:05:32:ac:be:7a:fa:57:ac:74:22:ed:7c:8a:0b:eb:3b:
48:81:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:48:59 2026 by rpki-client