Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: 8LiciEgY+PsrNMD4xoef+rT2fQNR/B67hDOtPEzjk88=
Subject key identifier: 67:52:E9:6B:7E:46:EC:A8:54:70:C6:67:37:DA:13:D1:94:69:5F:8D
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019F8FEBD2B7AF609965EF8C310A56C35A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 04EA
Signing time: Thu 23 Jul 2026 17:00:24 +0000
Manifest this update: Thu 23 Jul 2026 17:00:24 +0000
Manifest next update: Fri 24 Jul 2026 17:00:24 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: SdfHFy2jd9M83IW3Wa5sfif+k2ChglEps8JsSpRZ4/s=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d2:b7:af:60:99:65:ef:8c:31:0a:56:c3:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Jul 23 17:00:24 2026 GMT
Not After : Jul 24 17:00:24 2026 GMT
Subject: CN=6752e96b7e46eca85470c66737da13d194695f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:a6:09:a0:12:17:04:5a:14:d4:24:d2:4d:
9e:ed:59:72:ae:59:e9:b1:e3:0c:c2:74:21:7e:01:
9a:a4:a7:ed:a6:27:ad:a2:e5:0f:6c:63:18:cb:68:
48:37:a6:ac:75:94:47:14:fa:ab:f7:76:6b:d3:22:
a8:0d:16:bf:ab:82:6f:77:50:e2:e5:9e:ba:e8:56:
bf:f1:5c:b9:3a:3f:74:4d:96:a4:ed:73:6d:09:07:
39:68:ca:9c:50:44:72:58:17:dd:23:b2:d9:87:ca:
fa:57:85:59:31:db:9b:91:d2:f0:92:41:7f:eb:61:
51:e4:eb:0a:91:97:ee:93:5e:cd:3d:46:12:41:9c:
0b:4f:75:7c:92:64:13:20:ff:36:16:16:9f:65:36:
00:ee:ee:9c:a0:80:8a:4c:7c:82:31:c8:22:88:6a:
9e:da:db:30:3f:93:04:cd:92:f9:50:5b:fd:e9:d0:
0b:b4:22:f8:4b:2f:f3:d0:7b:54:5e:e4:4a:89:2a:
65:87:85:bf:82:5f:02:2d:41:94:c3:8f:b8:a1:b6:
80:2e:57:d9:0c:f4:4c:29:b6:b9:3f:89:15:10:0a:
8f:6e:73:f2:2c:6b:77:57:94:93:1c:83:4f:a6:05:
61:ae:a0:94:4b:6c:c7:2e:f4:9d:25:db:82:5a:5b:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:52:E9:6B:7E:46:EC:A8:54:70:C6:67:37:DA:13:D1:94:69:5F:8D
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:36:0b:c6:ea:2d:94:2e:f3:f5:88:5b:7f:5f:c7:2b:d9:
56:68:7b:6b:b2:02:a3:7f:e9:83:91:ed:25:e2:46:cf:2f:1b:
0d:22:db:0c:fa:f3:f5:da:7e:eb:3c:70:c7:39:4f:78:8a:d9:
61:55:db:20:40:13:99:e7:b7:03:5b:31:31:ff:d5:be:71:6c:
01:2a:3c:db:04:0f:cc:c3:a3:64:32:5e:72:a4:23:43:86:49:
aa:d9:b2:74:48:64:ba:a5:9a:84:82:c2:06:f1:d3:74:ee:fe:
44:43:0a:5e:9b:c9:59:70:bb:8b:c2:2a:77:b5:25:60:a1:71:
02:c1:e2:01:28:a9:68:65:92:d8:2c:d2:67:cd:17:ce:95:56:
8b:85:2f:12:3e:21:ce:39:aa:8f:20:05:44:b3:8d:fc:f2:39:
d7:b8:92:43:00:c5:7c:ce:ba:ac:62:99:7a:1c:fe:d3:7b:19:
1e:c1:6b:a2:2d:9d:77:95:e7:ef:89:9e:0d:71:ba:24:47:d9:
22:7a:f1:dc:b3:d6:cd:35:1d:95:06:7a:d0:92:55:96:7f:67:
0d:2e:47:f0:81:2c:24:1c:47:ed:2a:2b:2d:48:23:e9:90:e5:
31:d0:de:1e:cd:33:91:2f:f8:1b:73:23:2a:69:e3:70:ab:04:
5f:82:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:24 2026 by rpki-client