Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
File: 67u0hOoIb1Hr64zyedAEttl8LOI.mft (raw, json)
Hash identifier: K+5aigoz+szXfCwGdaos6rACqJPclxR5oCvZXi81HQY=
Subject key identifier: CF:F7:D5:F1:6E:9B:65:53:AF:01:50:DD:F5:81:C2:24:69:0C:0A:4F
Authority key identifier: EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
Certificate issuer: /CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Certificate serial: 019F916D8FF8E63CECB708E51CC5EFBFEE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:44 +0000
Manifest this update: Fri 24 Jul 2026 00:01:44 +0000
Manifest next update: Sat 25 Jul 2026 00:01:44 +0000
Files and hashes: 1: 67u0hOoIb1Hr64zyedAEttl8LOI.crl (hash: KmqmfJZSOaxCcPGUGzddRIXT6fWO8bxscm2t3aUi2Us=)
2: XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa (hash: Op7qdEKE+y8LVoqvvxQ0lrXSRlOdEFOdeV28bvi5uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:8f:f8:e6:3c:ec:b7:08:e5:1c:c5:ef:bf:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Validity
Not Before: Jul 24 00:01:44 2026 GMT
Not After : Jul 25 00:01:44 2026 GMT
Subject: CN=cff7d5f16e9b6553af0150ddf581c224690c0a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:2e:7d:1a:2b:45:d8:77:79:6a:14:87:54:
7a:6d:60:35:19:12:bf:6a:14:3a:3a:7d:66:91:4a:
bd:ad:03:73:5a:a9:39:a6:11:6b:b5:59:aa:3a:9b:
92:24:5f:39:14:d3:ef:73:65:dd:f5:c3:ec:62:1c:
45:94:08:3e:35:28:b2:cd:ac:7c:2e:37:02:58:6c:
db:e6:75:16:ac:02:51:6c:0c:dd:71:22:6f:43:5e:
d8:00:97:97:38:39:e1:4f:d9:e9:e7:ce:7d:5e:f6:
73:2a:6c:1b:d6:25:ff:fd:cc:53:2c:e6:09:91:dc:
91:bf:96:0c:5a:97:6a:7d:89:23:3c:6e:74:b7:44:
2d:ac:34:d2:c9:fe:df:ab:e4:9d:3e:e1:16:3f:8c:
af:76:09:38:dd:ae:db:24:e0:7e:8c:27:61:4e:ad:
ae:bd:7e:d2:25:53:a3:39:1e:a4:f3:7c:f3:94:81:
4a:bc:31:fa:c5:41:50:91:35:97:22:bb:82:34:70:
41:04:e1:1a:85:75:e5:47:31:0c:38:2f:16:4b:64:
af:6a:7a:77:a0:e1:6d:ad:27:88:7a:a1:b0:39:af:
76:0a:b8:e5:f9:70:29:e0:c7:bf:19:77:53:58:91:
ff:56:1b:98:7a:e4:9f:ba:97:36:10:37:5a:c6:44:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:D5:F1:6E:9B:65:53:AF:01:50:DD:F5:81:C2:24:69:0C:0A:4F
X509v3 Authority Key Identifier:
keyid:EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:25:76:7c:77:6d:20:74:07:bd:41:33:01:14:dd:db:aa:da:
d9:1a:25:ae:87:db:62:19:f0:e0:63:02:09:e9:97:28:b2:5b:
f4:76:70:1b:d2:5d:a0:4b:de:ba:de:09:c9:9d:d0:8f:ad:d9:
a8:f4:c8:e3:a7:42:04:bf:9f:85:42:c3:f3:88:2f:69:db:a4:
d5:da:a7:d7:3e:13:21:a1:d6:13:32:54:df:f4:7f:63:ed:7b:
16:6c:e9:6f:a5:b4:71:5e:d1:43:d1:95:d2:74:e8:4e:f8:60:
2a:95:1c:ba:00:e5:b1:4f:56:0f:d3:bd:17:a1:b1:f2:e8:03:
d1:76:a8:96:07:29:4f:62:32:89:92:a0:b0:52:2b:ef:08:49:
e7:04:8d:b0:3a:9a:46:02:c0:6a:29:7c:94:9f:75:43:59:ed:
53:89:6a:f4:ed:82:9d:a9:04:6c:b0:f1:4b:d8:96:8a:39:74:
8b:7e:94:dc:16:6c:0e:02:6d:1e:a8:49:99:b2:cb:2a:ae:01:
f3:43:0e:ca:44:84:a9:28:54:d0:0b:f9:85:2e:33:21:7f:5f:
6a:e6:a2:af:7c:d1:f5:00:5f:45:06:5a:3a:af:8d:fc:ae:b4:
8d:53:62:d4:96:c9:29:63:a8:6a:40:f9:46:c1:0d:63:c4:a8:
61:13:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:18 2026 by rpki-client