Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: UWcCdQXP75B3hnFNF9V8HfORg1lZb0XuBDp0mQzY4vI=
Subject key identifier: 40:3B:D8:CB:26:3F:3A:D6:79:48:08:4F:ED:CB:91:85:6D:49:7F:B4
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019E20239C1F5C02310C3A7805499092A639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 106A
Signing time: Wed 13 May 2026 07:01:05 +0000
Manifest this update: Wed 13 May 2026 07:01:05 +0000
Manifest next update: Thu 14 May 2026 07:01:05 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: Xxr6kc1Tvlw0GldMg4jNt9wLOJKcWmQNQxDNIY7+Cik=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:9c:1f:5c:02:31:0c:3a:78:05:49:90:92:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: May 13 07:01:05 2026 GMT
Not After : May 14 07:01:05 2026 GMT
Subject: CN=403bd8cb263f3ad67948084fedcb91856d497fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:49:84:95:bd:fd:43:e5:2d:c5:33:c8:cc:
e3:d8:85:c5:59:3d:bc:6c:99:f6:33:fa:2a:b4:47:
40:50:28:b8:93:f0:d4:c7:3e:33:3f:74:e4:08:03:
d5:78:d5:9a:fc:13:98:14:61:7a:23:9a:bb:b3:93:
ff:a4:f0:cb:b8:33:1a:e2:a9:3a:53:83:1d:e5:ad:
54:08:ba:37:3e:77:89:d2:f0:9e:08:78:4b:f0:aa:
07:0d:4c:cd:66:0d:48:29:ef:67:5e:a0:0e:36:3b:
27:64:55:f7:8f:d4:41:16:87:06:86:6e:bf:9f:36:
de:f1:2d:d3:de:23:af:bd:02:54:14:2b:28:78:99:
77:7a:9b:c1:89:b2:ef:e9:cc:ae:2e:12:42:d1:11:
e8:ac:27:27:e8:5a:41:5a:d1:3d:2e:95:68:18:f6:
e1:d9:82:c2:81:69:e9:8d:3a:9f:04:47:9e:d0:bb:
19:5d:8d:e8:52:8b:4d:55:8c:b8:35:22:db:4d:0e:
d3:4e:17:0c:d9:56:68:04:0e:3b:27:db:e2:82:71:
a0:eb:b7:c0:38:2d:bb:18:71:f7:bb:7b:4a:dc:d5:
37:ce:5f:7d:23:fa:80:09:58:94:70:ba:81:1a:92:
6b:d6:1b:22:65:af:81:d0:e2:ba:94:44:fa:60:cb:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:D8:CB:26:3F:3A:D6:79:48:08:4F:ED:CB:91:85:6D:49:7F:B4
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3e:c0:b3:dd:c1:ba:25:f4:88:62:42:fe:5e:a3:10:5f:0d:
da:01:eb:47:63:63:f6:72:9e:5c:e4:dd:fd:ed:9c:ce:50:e4:
c6:47:f5:a0:c9:87:30:42:a8:ed:bb:b0:dd:53:23:10:be:cf:
e7:28:dc:9f:fd:3e:d2:65:96:a1:f2:c5:34:fc:43:bf:b7:69:
d7:c0:84:6f:38:2c:71:c9:b6:77:0f:2f:fd:b1:2f:1b:59:11:
19:12:5b:6a:f8:0a:83:25:7c:d0:02:9d:3b:6c:d5:79:2b:0f:
43:e7:10:5b:65:d5:5d:3f:97:ff:6f:16:a8:c1:57:43:13:54:
25:46:1a:8f:d1:f0:ff:78:5e:dd:d5:cf:a3:df:7a:61:1d:95:
6b:bd:91:85:ac:40:a4:9d:6c:61:f9:f1:f5:06:81:51:56:f7:
fb:e4:8f:2e:fa:46:3a:0b:62:9c:02:3a:84:28:db:5f:fe:28:
d6:15:6e:80:fa:43:b4:16:5c:49:ea:ca:fd:b5:2f:6f:80:af:
7e:be:eb:b6:74:98:04:80:b6:0a:aa:e0:ac:5b:3c:7f:c5:d7:
99:c7:58:27:1d:d6:79:26:8e:0a:68:6b:00:b8:55:fe:1e:3e:
0b:02:58:f7:ce:b3:16:9d:a6:cb:57:87:2a:43:7e:42:f1:3a:
c5:17:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:58 2026 by rpki-client