Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: ZMBsd5hx1XprBm7JImSIUaKcYZxEuIcoq6iKfdtBd8A=
Subject key identifier: 5B:64:8D:AB:47:5F:80:B0:1F:FF:18:DE:27:84:BF:3C:5C:60:1B:3F
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019E1F10B63E94148723E99618E5FF772771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 042B
Signing time: Wed 13 May 2026 02:00:49 +0000
Manifest this update: Wed 13 May 2026 02:00:49 +0000
Manifest next update: Thu 14 May 2026 02:00:49 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: ZyxnWNSlFhplefQZ8BV6/3/7M0lhl3usHoWRVIDGnCE=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b6:3e:94:14:87:23:e9:96:18:e5:ff:77:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: May 13 02:00:49 2026 GMT
Not After : May 14 02:00:49 2026 GMT
Subject: CN=5b648dab475f80b01fff18de2784bf3c5c601b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:fc:88:01:6d:d5:e9:3e:50:cc:b5:7b:83:
b5:4f:7c:33:bc:ae:2f:24:45:e3:a9:5d:d7:51:6b:
d6:1c:11:44:dc:28:55:ba:7f:dc:33:63:33:8b:90:
31:10:73:12:7c:91:33:bc:86:d6:ee:88:53:80:5b:
cc:e2:00:10:48:bc:f9:09:10:40:2c:c7:e1:77:8c:
00:ed:b0:a4:25:14:67:76:98:3a:29:25:e1:bf:4c:
9e:b3:9e:16:a3:70:d2:5f:36:b5:f1:a0:f7:ab:e0:
70:ac:61:41:f8:e0:a3:c8:14:97:ae:fe:5d:77:72:
ef:d1:a9:77:ce:62:31:64:a5:a8:17:20:9e:08:31:
b8:ab:c1:8f:18:64:e7:e0:6e:87:2e:36:c7:d6:65:
4d:47:76:30:51:43:62:74:ae:44:9f:e3:cb:53:09:
43:ac:4f:1a:94:c4:60:77:fa:3a:b7:79:38:3b:3e:
ec:35:b3:d4:b5:f5:d7:97:00:7f:c9:39:fa:59:d2:
73:e3:4c:2b:ef:b9:7d:ae:dc:de:32:27:74:f9:ab:
52:97:7a:bd:75:b8:ad:1d:16:2c:72:25:36:cd:4c:
51:e9:ab:9a:45:e3:12:77:3b:07:8b:30:b5:17:40:
6a:7d:a3:1e:70:56:d2:71:e8:d5:81:92:96:d7:f4:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:8D:AB:47:5F:80:B0:1F:FF:18:DE:27:84:BF:3C:5C:60:1B:3F
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ef:35:8e:19:29:3a:d6:19:94:f6:cc:f7:8d:6d:fd:4f:e5:
e0:61:cc:1e:63:6b:6b:af:91:cf:af:76:b9:c1:a0:52:2a:6b:
6e:84:5d:d5:d6:c9:5d:05:dc:8f:4f:a3:f1:56:ea:13:7d:06:
b6:2c:94:62:47:37:f9:1f:e8:53:33:27:21:15:ca:cf:5e:d3:
e3:b2:8e:b6:4f:12:81:b5:f5:66:6b:02:5e:95:a3:f2:f2:6b:
a4:28:0b:1a:76:b2:bc:b5:45:47:46:f1:91:0d:88:b9:47:76:
77:02:3d:79:99:a9:2a:9e:7f:29:7e:ce:dc:47:da:24:7f:29:
ce:f0:11:84:26:40:0e:17:28:e8:67:00:16:ea:8f:8f:5c:89:
9e:ac:f5:68:94:5d:bb:65:ce:39:c1:80:85:dd:3e:bd:08:ff:
87:58:b4:3f:26:53:0e:5b:92:86:6e:51:a5:5b:df:8c:6e:a8:
87:7c:c7:d4:07:1e:47:22:9e:00:79:2c:cf:cb:6e:f9:24:51:
b4:8a:de:96:c6:1c:28:72:96:55:ae:99:ce:e8:d0:6c:ee:a1:
56:ff:ae:cd:01:f3:ce:b3:75:36:bb:0e:b2:77:29:cf:f2:d2:
5f:bd:52:30:37:15:b9:d6:d4:8d:4a:df:13:79:1c:f7:5a:f3:
5a:84:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:24 2026 by rpki-client