Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: ijm3GXak6sRT5PfT2gjKmgqDoHuBrxuYsSm1pLzvBDU=
Subject key identifier: 38:CC:69:06:F5:21:01:27:CB:4F:BE:75:9F:CC:BA:50:AE:2C:D7:FE
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019F9135872477E0AF7D285ACBC51E1CF7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 1718
Signing time: Thu 23 Jul 2026 23:00:31 +0000
Manifest this update: Thu 23 Jul 2026 23:00:31 +0000
Manifest next update: Fri 24 Jul 2026 23:00:31 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: EHeAryAWc1cdwZTzyZj7m/cabKq4AhzKVBfoSIEjEOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:87:24:77:e0:af:7d:28:5a:cb:c5:1e:1c:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jul 23 23:00:31 2026 GMT
Not After : Jul 24 23:00:31 2026 GMT
Subject: CN=38cc6906f5210127cb4fbe759fccba50ae2cd7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:7a:e0:5f:db:96:16:da:13:78:d5:81:ca:
ed:24:31:9a:9d:95:a0:76:5d:00:4c:cd:ba:71:37:
ed:f7:83:3e:f4:25:c4:2b:18:53:35:5f:ee:91:cd:
e4:0f:46:4a:ec:77:51:20:7c:c2:97:a7:08:4b:b6:
e2:b3:23:36:76:36:27:cd:cb:35:d3:d1:08:56:56:
bb:0d:5d:60:6e:37:32:5f:65:9d:cc:f4:59:68:f0:
d9:72:87:f8:1e:75:82:97:c1:ea:e1:5d:66:c4:23:
39:f8:22:63:5d:45:ee:9b:3a:f0:81:06:00:31:2b:
e2:76:06:a1:c1:41:52:20:0d:22:8d:60:99:f5:73:
1f:b1:1f:28:89:ba:2b:f6:e7:c8:a3:cd:3a:ee:c4:
df:45:68:e2:95:21:92:49:ba:f5:f0:bb:b7:d4:b8:
5e:84:95:4c:dd:61:13:e5:ce:1f:d2:31:ef:13:9f:
18:c2:26:54:5c:96:b0:27:97:fb:5a:69:56:df:7f:
10:d6:69:13:23:35:8a:4b:53:75:c7:9f:c2:80:47:
5f:3b:77:a7:2f:8c:3c:de:e5:1f:e3:ce:a0:74:ed:
b9:5d:47:c2:01:a0:dd:87:9f:35:f8:1b:0d:d2:14:
91:2c:b1:40:c0:f9:76:b8:8f:5a:da:14:01:bd:27:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:69:06:F5:21:01:27:CB:4F:BE:75:9F:CC:BA:50:AE:2C:D7:FE
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:66:a5:3c:2e:55:bc:09:ab:da:18:03:84:e5:1d:d8:57:
f9:a7:f9:0f:53:13:24:66:4b:ef:ad:46:be:be:70:f7:90:e3:
6d:3e:3e:72:ce:fb:1d:3d:69:af:91:06:16:bc:24:39:1b:3f:
fc:b1:b4:88:dc:dd:98:a2:65:df:b5:78:86:77:2f:be:fd:11:
05:4a:40:06:26:a2:d8:a6:5e:de:f7:af:d6:29:93:03:b9:51:
de:39:44:fd:ce:3f:8e:24:0c:25:69:59:43:33:76:1f:be:be:
9f:e1:34:39:0f:28:eb:ad:b9:f4:0a:dd:45:bc:57:40:4f:95:
96:df:b9:88:b3:c0:ec:75:92:2c:de:7d:13:32:70:70:dd:a3:
8d:9e:8d:80:fb:d7:1d:6b:7f:e9:1c:0b:a7:47:53:43:73:1f:
b9:d5:c8:13:14:84:e3:ca:45:ef:e7:89:f1:af:62:7a:df:9d:
48:87:5d:01:49:dc:0c:11:7d:ce:e3:81:04:e9:58:fe:72:3d:
a0:e7:aa:14:11:52:7d:cb:ef:c1:5a:bc:ce:35:fc:75:fc:00:
93:e1:c9:ab:73:c6:31:7e:88:c6:0b:05:c9:5e:4a:39:d7:81:
07:41:d1:0f:62:29:61:ef:c7:34:b1:df:b9:ef:37:a7:17:80:
59:30:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:35 2026 by rpki-client