Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: bLphyPOvtftxpkFqgYu9JWftHUVyzlOPIjqg3E3JH9A=
Subject key identifier: 4D:AA:B6:87:08:B5:EC:07:DB:58:6B:99:31:81:0D:9E:B2:67:6D:A5
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 01A1DE39EB6768DD6CE1EA93810DBB8F06F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 1849
Signing time: Sun 15 Nov 2026 08:01:40 +0000
Manifest this update: Sun 15 Nov 2026 08:01:40 +0000
Manifest next update: Mon 16 Nov 2026 08:01:40 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: isBNlJVJiFBXohWMSMVAAGBWQ7qxV0fwCGiIX9EIfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:eb:67:68:dd:6c:e1:ea:93:81:0d:bb:8f:06:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Nov 15 08:01:40 2026 GMT
Not After : Nov 16 08:01:40 2026 GMT
Subject: CN=4daab68708b5ec07db586b9931810d9eb2676da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:37:48:83:4b:f1:39:2c:17:d6:6d:28:3f:
b7:15:c1:0c:91:c8:91:59:14:2c:05:b8:22:bd:cf:
12:3c:53:d1:1d:86:f7:63:33:71:62:43:9e:df:7b:
c6:de:ab:a0:d7:f9:41:5c:76:bf:e5:51:e8:72:14:
01:bf:0d:50:67:12:73:d4:08:17:1b:07:5b:fa:3a:
83:96:d5:58:44:10:16:76:54:40:c3:59:3d:7e:59:
a2:8a:89:bf:83:fc:b8:43:52:23:b7:87:6d:90:9d:
24:34:62:c1:36:e4:17:55:c1:99:20:37:77:25:aa:
a2:e6:1f:67:ff:aa:cb:41:a8:99:cf:74:ad:df:ad:
f7:4d:16:88:aa:b3:a1:94:a3:77:c3:f0:04:60:f7:
b2:e5:78:90:a0:31:60:46:c9:e5:00:03:fc:b0:e0:
db:9a:51:5c:9f:d0:93:46:e6:69:25:89:58:e6:14:
e5:ad:4b:dd:0a:d7:e1:43:ba:46:af:31:af:15:82:
9c:cf:f0:d9:2d:29:ec:a5:e8:28:da:56:55:9b:e3:
57:05:ff:a3:ed:aa:5d:20:d6:a3:cb:a0:50:59:55:
6f:3c:9a:73:49:68:04:48:2e:67:f1:bf:09:f1:76:
14:24:8f:1a:ef:8f:20:98:9d:12:5c:e8:f0:ac:47:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:B6:87:08:B5:EC:07:DB:58:6B:99:31:81:0D:9E:B2:67:6D:A5
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e5:4a:41:17:7f:4e:ec:1b:68:22:e5:1a:91:88:64:e7:ed:
f7:8f:83:85:ec:50:07:97:90:8f:dd:0e:05:4c:8b:10:97:90:
82:b5:ce:65:b4:06:9e:0d:aa:83:92:de:60:5a:04:a3:a5:23:
e8:2f:ad:fa:52:32:27:8b:1d:02:f3:ee:58:f8:1d:d8:da:f0:
20:d7:a7:11:70:59:67:2b:8b:f2:e5:16:96:f7:23:33:55:13:
b1:13:f4:c8:e1:b9:69:f4:5d:99:b3:f7:2a:c4:82:c9:14:49:
ec:21:62:50:3e:58:ea:6e:7d:95:f5:7e:94:aa:bc:aa:df:2e:
ed:d9:ad:bc:ed:2f:5d:38:63:45:43:ff:ff:fc:1f:50:fb:c6:
63:8a:45:9f:ff:c9:58:70:5a:ad:4a:43:d2:10:60:17:93:f8:
8a:45:1f:61:8e:73:26:07:2f:83:38:4d:59:4b:ec:60:fe:6a:
e6:03:45:34:48:a3:d7:4e:27:3d:25:38:50:3b:5d:55:52:f3:
64:d4:75:0a:1f:6c:c3:a8:28:21:15:76:90:5e:80:4e:2d:17:
2a:ed:82:93:9e:ca:5a:a9:50:67:cb:82:3f:e8:9c:30:52:e6:
f7:6d:d6:de:ba:1d:25:b3:3d:79:24:5c:ad:f3:0c:32:ae:05:
a2:86:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:38 2026 by rpki-client