Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: TAgCHEVoD7zPr8LsCDAFCWbmF1HdNtYRU+lXh/LFj8k=
Subject key identifier: 85:4C:55:94:2F:38:E7:AB:AF:2F:B3:61:BB:AB:10:54:59:B9:61:AD
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019D29CE3A65609C7B4C22F4E346E7BA4D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 03AC
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: 99/ZZOFkJrBnMb7voGUTaxzgMR316JWujxoT/UPRe40=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3a:65:60:9c:7b:4c:22:f4:e3:46:e7:ba:4d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=854c55942f38e7abaf2fb361bbab105459b961ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:fd:d0:c8:9a:9c:39:5c:5a:0e:bf:13:8e:
ce:66:d3:ad:aa:23:21:a7:6a:6b:fc:13:ae:68:d1:
01:95:8d:82:1c:95:f3:d7:c3:de:fb:b2:28:18:fe:
b1:43:51:68:70:ec:87:21:4e:56:76:89:7c:6d:f1:
14:ce:70:80:7a:80:a0:ae:6e:e9:04:ec:00:c0:50:
69:3a:80:0b:33:d2:e1:dd:04:38:8c:76:fc:24:9a:
e2:a8:d0:4d:f9:bb:9c:b5:4c:55:49:f5:4f:e7:d7:
0b:fc:c4:af:67:8b:1c:9d:ef:5b:a7:ca:70:de:36:
18:4e:1c:c6:0b:70:f0:1f:95:22:9d:68:63:17:49:
45:2c:2c:95:b9:60:e9:66:7a:96:cb:e2:60:18:87:
c7:0e:5c:2e:e2:db:ed:2b:4a:0a:59:82:e7:73:a2:
fe:74:c6:91:95:97:e5:e7:47:5b:b3:50:56:46:83:
e9:6c:ab:48:ad:a4:e2:91:66:e4:dc:34:66:41:bc:
08:12:23:92:29:1b:b8:c3:42:8a:c3:db:d0:5a:d7:
d0:94:19:12:72:7c:91:05:e6:79:ff:b7:e9:3a:8f:
6d:3a:41:a1:e7:de:65:69:a7:04:d0:c7:54:4f:5b:
0e:b7:9d:8b:c2:c8:30:ad:0f:8d:7c:1d:a5:62:0a:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:55:94:2F:38:E7:AB:AF:2F:B3:61:BB:AB:10:54:59:B9:61:AD
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:43:41:72:97:53:7b:25:3a:9b:a1:68:d3:85:b4:4a:ef:12:
9f:72:8b:58:b0:ae:0f:19:13:e5:12:54:58:aa:52:51:97:4e:
af:c8:3c:64:42:62:ae:c3:97:1c:62:38:30:39:cd:8f:11:5e:
3d:68:0a:80:e4:3a:50:82:3a:ed:bf:ed:a3:62:26:42:84:d7:
bd:19:3e:7a:1f:31:c6:46:c8:a7:13:fd:69:a0:39:e5:44:7d:
45:96:d1:53:ef:c1:d6:b0:7e:af:b4:f9:eb:f8:5a:92:43:2e:
c0:8a:9f:dd:e9:5a:bc:f0:30:fa:c8:9b:6c:59:9b:7a:1b:95:
5e:48:23:fa:ff:e5:d8:69:98:57:27:92:ab:45:5b:33:f8:13:
ab:03:92:f5:7d:4d:b8:0b:a1:cd:61:b9:88:95:6b:f5:39:ad:
2a:f3:31:14:b6:e1:01:0b:81:44:d6:85:5c:37:96:0f:1a:74:
d8:77:36:f7:4c:08:8c:46:b2:a5:1c:64:ff:08:ef:b6:92:58:
f6:f7:c5:68:a8:8d:1e:a1:62:75:c9:2e:a6:4d:fd:92:4f:cf:
e5:c7:f2:a6:27:80:93:1f:56:fb:ae:67:38:42:87:f0:f3:2a:
dc:b6:2c:67:9f:aa:5e:9f:74:76:e4:f2:1f:41:de:43:c6:35:
e7:e4:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:11 2026 by rpki-client