Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: u/L6IAU3Le56j8D1HJl3bVpJ99waUxedjuF8Ex6A7+o=
Subject key identifier: B6:07:25:40:9C:BB:97:E1:19:58:91:DD:F4:C8:8F:DE:9E:58:1D:12
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019D28F271FE4089D9AFD16DABE10D3688C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0FEA
Signing time: Thu 26 Mar 2026 07:01:10 +0000
Manifest this update: Thu 26 Mar 2026 07:01:10 +0000
Manifest next update: Fri 27 Mar 2026 07:01:10 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: WAE0MFGL08bQZc1wWU0rX3HpLEn9MumpL5u9WswwOy0=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:71:fe:40:89:d9:af:d1:6d:ab:e1:0d:36:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Mar 26 07:01:10 2026 GMT
Not After : Mar 27 07:01:10 2026 GMT
Subject: CN=b60725409cbb97e1195891ddf4c88fde9e581d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:5f:8d:45:fb:83:5b:d6:7b:fd:1a:cc:49:
00:f2:8e:77:6d:14:cf:67:b0:9b:e1:28:00:a9:2c:
84:b8:5f:a2:fc:c5:5a:4b:ff:44:db:da:ca:53:72:
0c:56:dc:9b:b8:95:fe:df:36:7a:88:05:eb:60:77:
81:0a:2c:6b:32:30:f5:c5:2f:eb:24:82:99:9b:a1:
d3:26:b6:50:bc:c8:66:64:a8:7a:43:b6:19:56:d0:
34:97:f9:46:f9:ff:fc:79:83:ec:18:ca:08:22:e1:
13:61:3a:95:cb:b1:12:05:ef:8b:a1:c6:83:52:9e:
e0:32:1c:4d:20:cf:2c:94:09:f9:ce:c2:4b:4e:b5:
71:14:70:69:2b:db:3d:7f:c6:c9:0e:0e:b0:5f:01:
ce:79:d9:38:80:15:2f:88:ca:0c:a7:f9:2d:f1:f8:
1a:7e:bd:5f:45:f9:0d:a0:64:4c:72:ae:f3:eb:87:
b7:fb:eb:51:10:55:a0:5b:1b:74:45:09:fb:ce:d1:
11:7b:aa:0a:c6:05:61:92:7b:1e:9b:02:1b:89:14:
24:d0:65:e6:41:72:20:28:a8:95:84:40:95:26:5f:
b8:93:ad:d2:75:83:b5:01:8e:ca:c9:28:3f:42:b2:
15:5a:b7:58:7c:c3:43:f7:3d:6f:06:71:ac:4e:ca:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:25:40:9C:BB:97:E1:19:58:91:DD:F4:C8:8F:DE:9E:58:1D:12
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b3:fe:24:9f:dd:ad:02:dc:95:0a:4a:11:70:c9:f2:62:ca:
be:0f:1b:63:86:9b:31:93:7e:3e:46:cc:a8:79:3f:69:af:44:
21:d6:ed:95:31:e1:c4:01:31:1c:55:2a:fe:86:6e:8d:f6:e2:
03:2c:e1:35:d9:e9:af:aa:80:f8:9d:c4:c5:fa:fd:73:16:c2:
b3:f5:6c:0f:1b:50:43:51:ab:df:51:06:f8:ed:91:d8:4a:8d:
ee:cb:c3:a5:df:45:d8:3e:00:3c:5c:55:5a:1e:07:84:e6:b3:
ff:4e:f1:8d:43:fb:f3:49:53:54:5c:68:66:5f:c1:c5:2e:9a:
c4:81:0e:95:49:63:64:9d:f7:2d:cb:98:c4:82:78:44:54:b1:
c4:e0:9d:8f:9a:7e:64:15:47:0b:0a:80:3c:77:61:82:8d:95:
bd:c6:57:a8:21:7a:ab:35:73:17:2e:77:a2:ef:78:61:ef:f1:
bb:66:49:7e:24:39:b5:5a:cf:d9:b7:06:46:f1:dc:b2:0b:75:
4e:b6:e7:a0:0d:6e:3c:7c:3e:29:dc:6e:ec:f1:8f:bd:3b:e9:
0d:14:94:a8:38:31:93:b7:60:09:e3:f7:06:71:86:d8:30:66:
27:b3:51:e1:5d:b8:bd:29:44:a5:77:85:ce:11:4a:74:73:d0:
0d:27:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:04 2026 by rpki-client