Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
File: 67u0hOoIb1Hr64zyedAEttl8LOI.mft (raw, json)
Hash identifier: zNr4GUgfw1gPxlB/ZQ5b57ICkeClHtGTrsEmUpd8QCY=
Subject key identifier: EF:63:32:E8:6A:63:26:A6:07:4A:A4:62:AF:C4:3E:88:A9:1D:FD:32
Authority key identifier: EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
Certificate issuer: /CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Certificate serial: 01A0FC7E0E64CB49C27BB044816FD16236BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
Manifest number: FC
Signing time: Fri 02 Oct 2026 12:01:54 +0000
Manifest this update: Fri 02 Oct 2026 12:01:54 +0000
Manifest next update: Sat 03 Oct 2026 12:01:54 +0000
Files and hashes: 1: 67u0hOoIb1Hr64zyedAEttl8LOI.crl (hash: HuCV93ULM7jd3dWzxcxuuZM8QVvLG81sSA/6wEEQGd4=)
2: XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa (hash: Op7qdEKE+y8LVoqvvxQ0lrXSRlOdEFOdeV28bvi5uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7e:0e:64:cb:49:c2:7b:b0:44:81:6f:d1:62:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Validity
Not Before: Oct 2 12:01:54 2026 GMT
Not After : Oct 3 12:01:54 2026 GMT
Subject: CN=ef6332e86a6326a6074aa462afc43e88a91dfd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:e2:b1:bb:bf:c5:bf:8d:dd:14:1e:ef:21:
c3:dc:da:14:08:4f:a9:7a:83:20:37:27:ba:7d:b3:
e6:88:73:db:dd:62:f7:5d:27:b6:6b:90:d9:41:84:
c1:c1:bb:2a:3a:3d:1d:39:bb:72:8b:21:9c:90:a8:
9b:b3:72:1d:c2:ba:b8:6d:72:33:82:1a:e9:5f:e8:
80:57:41:d2:a4:99:13:e1:64:43:b6:26:7e:8e:10:
30:4c:33:64:1e:65:fc:68:c8:fc:31:78:eb:b9:39:
0f:9b:71:ae:1b:cc:0e:e1:c6:90:f2:83:1e:98:05:
78:25:7f:32:bf:a7:98:83:84:83:21:70:7c:f8:e1:
93:e9:14:b2:fc:8d:c7:65:4f:7e:54:25:1f:87:9a:
29:b2:a4:69:2d:6a:f2:58:78:62:82:ce:91:b7:e9:
58:cf:6e:b5:56:ff:31:f2:47:c2:a0:f9:6a:49:fe:
a5:4b:64:6d:71:fb:c5:29:ae:be:1d:6a:3b:d9:f5:
52:b5:30:91:dc:8e:29:8d:cf:30:62:87:25:a6:c3:
a0:0c:78:6a:b6:95:52:c8:31:37:90:57:55:17:e8:
92:2b:4c:75:06:a6:94:4c:87:a3:3c:8e:f9:2c:97:
de:3e:d8:4b:4e:06:54:c6:4a:75:a5:30:dd:64:d7:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:32:E8:6A:63:26:A6:07:4A:A4:62:AF:C4:3E:88:A9:1D:FD:32
X509v3 Authority Key Identifier:
keyid:EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:32:11:07:69:1c:e7:2e:34:1d:ee:cd:be:d0:18:69:52:27:
1b:3a:1b:65:aa:5e:ce:d4:63:a0:90:54:3d:da:b2:aa:61:ad:
bd:72:6b:8e:d6:65:d2:f3:bf:83:dc:e0:28:94:ed:db:89:1f:
2d:07:14:c8:72:ea:53:8d:6a:6f:05:27:35:5f:85:17:3d:13:
4d:67:3a:b1:9b:a8:6d:36:3b:40:d8:49:65:45:13:8b:20:f0:
38:b8:01:f3:78:27:d5:64:e4:72:8a:df:b2:7c:10:c3:7e:57:
45:ca:70:2a:6a:e1:0c:98:e9:d5:ec:2c:a7:ba:73:bb:69:66:
08:16:6d:d3:67:da:ce:f4:e4:e7:49:4f:b3:95:87:f3:2e:3f:
04:a0:26:2b:ee:dc:f5:ea:f5:ad:cf:6f:e0:75:70:eb:21:2a:
5b:e1:a4:f6:83:ec:56:b4:58:70:94:55:56:4e:1f:f5:19:b5:
4d:96:5a:7b:52:e0:cc:37:19:48:ad:cc:60:c9:de:4f:de:18:
34:26:96:14:1e:95:bf:2d:8f:cd:7c:f6:a0:3e:5a:35:c6:0a:
c2:14:ac:7e:c0:8e:04:a0:49:ec:2a:2b:bc:05:95:10:c7:24:
37:f4:bd:96:bb:29:b4:e6:76:15:fe:9f:e2:62:e7:c4:bd:4c:
a3:ff:99:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8fg5ky0nCe7BEgW/RYja6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmJiNDg0ZWEwODZmNTFlYmViOGNmMjc5ZDAwNGI2ZDk3
YzJjZTIwHhcNMjYxMDAyMTIwMTU0WhcNMjYxMDAzMTIwMTU0WjAzMTEwLwYDVQQD
EyhlZjYzMzJlODZhNjMyNmE2MDc0YWE0NjJhZmM0M2U4OGE5MWRmZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXXisbu/xb+N3RQe7yHD3NoUCE+p
eoMgNye6fbPmiHPb3WL3XSe2a5DZQYTBwbsqOj0dObtyiyGckKibs3Idwrq4bXIz
ghrpX+iAV0HSpJkT4WRDtiZ+jhAwTDNkHmX8aMj8MXjruTkPm3GuG8wO4caQ8oMe
mAV4JX8yv6eYg4SDIXB8+OGT6RSy/I3HZU9+VCUfh5opsqRpLWryWHhigs6Rt+lY
z261Vv8x8kfCoPlqSf6lS2RtcfvFKa6+HWo72fVStTCR3I4pjc8wYoclpsOgDHhq
tpVSyDE3kFdVF+iSK0x1BqaUTIejPI75LJfePthLTgZUxkp1pTDdZNdMVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9jMuhqYyamB0qkYq/EPoipHf0yMB8GA1UdIwQY
MBaAFOu7tITqCG9R6+uM8nnQBLbZfCziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd1MGhPb0liMUhyNjR6eWVkQUV0dGw4TE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMt
NzcxN2ViMzE5MTYwLzEvNjd1MGhPb0liMUhyNjR6eWVkQUV0dGw4TE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMtNzcxN2ViMzE5MTYw
LzEvNjd1MGhPb0liMUhyNjR6eWVkQUV0dGw4TE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjIRB2kc
5y40He7NvtAYaVInGzobZapeztRjoJBUPdqyqmGtvXJrjtZl0vO/g9zgKJTt24kf
LQcUyHLqU41qbwUnNV+FFz0TTWc6sZuobTY7QNhJZUUTiyDwOLgB83gn1WTkcorf
snwQw35XRcpwKmrhDJjp1ewsp7pzu2lmCBZt02fazvTk50lPs5WH8y4/BKAmK+7c
9er1rc9v4HVw6yEqW+Gk9oPsVrRYcJRVVk4f9Rm1TZZae1LgzDcZSK3MYMneT94Y
NCaWFB6Vvy2PzXz2oD5aNcYKwhSsfsCOBKBJ7CorvAWVEMckN/S9lrsptOZ2Ff6f
4mLnxL1Mo/+ZtA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 17:46:20 2026 by rpki-client