Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: Fl3/9UIBlc65kHEPAdMHir37O95ZFsfwyKt2Npvsgb4=
Subject key identifier: 28:4A:E7:CF:A2:8F:E3:20:88:A7:04:5F:3E:99:E7:64:E4:C0:BF:1F
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 01A0DB71B3562035630A400EE9CD119D442F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 17C3
Signing time: Sat 26 Sep 2026 02:00:56 +0000
Manifest this update: Sat 26 Sep 2026 02:00:56 +0000
Manifest next update: Sun 27 Sep 2026 02:00:56 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: WBlFf9/0uwtGNuybWG8GODQIx3qdiu0IwTRmQ3OQZpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:b3:56:20:35:63:0a:40:0e:e9:cd:11:9d:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Sep 26 02:00:56 2026 GMT
Not After : Sep 27 02:00:56 2026 GMT
Subject: CN=284ae7cfa28fe32088a7045f3e99e764e4c0bf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:39:e4:47:25:49:9b:7b:63:81:19:2c:ed:
4c:d9:3c:0c:6f:8e:ac:c7:4d:84:c5:0e:45:8b:bf:
2f:f3:41:13:01:95:c6:dd:88:0d:45:3e:2f:9d:5f:
a6:80:fc:b5:a6:b7:2c:39:ca:21:47:50:99:28:48:
d9:1f:16:cd:f9:cc:43:65:95:11:2a:5a:b8:e0:49:
9b:0c:22:e3:2f:19:35:a4:86:ea:7a:59:9e:81:5c:
fd:ef:20:8f:79:c2:ea:52:7f:99:38:df:c0:9b:6e:
3f:a5:d3:90:cf:3f:e2:79:e4:b6:82:49:32:b1:4d:
30:7a:8b:5a:7d:3b:b2:11:a8:04:41:e4:a7:d8:39:
b2:8c:50:5c:07:82:7f:35:8a:7a:be:ff:2a:2b:2e:
5e:41:d1:4c:9b:47:10:8b:3d:c8:91:73:94:0f:e6:
aa:8a:1a:57:88:fc:34:70:6d:5d:81:9d:d3:e6:5d:
68:41:6b:fd:51:f9:25:21:d9:36:00:f0:6e:53:14:
9c:8f:b0:f2:ab:68:15:22:92:d0:e8:c7:b6:f7:2d:
8c:1f:29:d1:25:de:68:37:8e:6d:eb:b5:db:1e:1d:
ce:03:37:ca:53:65:ec:cf:93:ee:4d:da:0e:90:ac:
67:eb:b5:f5:b0:d0:cc:bd:25:ec:36:b9:40:ee:7b:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:E7:CF:A2:8F:E3:20:88:A7:04:5F:3E:99:E7:64:E4:C0:BF:1F
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:b0:9a:8a:89:48:4c:5f:4e:48:6e:88:80:59:ae:a7:48:
a8:aa:7f:c7:d1:66:07:0e:4f:2a:72:78:4f:be:ba:e7:e6:44:
83:4a:e7:a5:55:70:3c:61:ca:69:2d:18:21:b8:ed:d0:2a:36:
c0:79:a0:b7:f4:64:6a:f7:03:e8:c1:87:11:85:7d:9b:14:90:
51:c0:44:da:67:36:86:eb:d0:89:7a:80:8b:03:31:b9:23:9d:
32:6f:86:63:60:7d:56:50:1f:52:0a:1e:87:72:46:25:9a:c2:
0c:14:02:98:a9:16:23:58:73:b4:5f:51:42:ad:6a:14:ad:6a:
08:09:72:64:3f:f4:68:43:21:4f:a4:20:7f:0e:d9:4b:76:63:
ee:20:14:6f:f6:f9:1b:a8:6d:78:a1:42:73:bc:b1:71:93:ba:
1d:8a:3c:96:20:43:24:6b:fc:5e:c2:05:fd:13:88:0f:33:b0:
28:5a:6c:fb:fa:79:fb:6c:76:11:e2:d0:30:e9:fd:e0:4f:61:
8d:c3:80:da:60:c3:e6:a4:22:8e:a6:ec:53:7e:11:88:9d:76:
ff:8f:ab:ea:d6:07:d0:45:9f:48:ce:ee:30:bf:e6:67:ab:f3:
f5:7b:2d:ec:69:18:b0:cb:ea:3a:fa:34:57:10:ae:11:18:92:
c1:62:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:14 2026 by rpki-client