Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: JTl8hvrrDJwwtK5DWPpB341bPIJMigW6Ch5QdJvNz/o=
Subject key identifier: FE:11:11:EE:37:93:D0:1B:6C:18:4F:F1:DC:49:16:41:F6:33:91:AC
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019F90C8267B79B1DACF068115DB6EAE9A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:03 +0000
Manifest this update: Thu 23 Jul 2026 21:01:03 +0000
Manifest next update: Fri 24 Jul 2026 21:01:03 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: bnV7e7NQQ0B6s5Qjse6TCXh5oK9+kAqvivSc3vq6UIU=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:26:7b:79:b1:da:cf:06:81:15:db:6e:ae:9a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jul 23 21:01:03 2026 GMT
Not After : Jul 24 21:01:03 2026 GMT
Subject: CN=fe1111ee3793d01b6c184ff1dc491641f63391ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:cd:68:e6:07:aa:60:11:87:f4:2b:aa:c5:
8e:14:00:19:bb:f0:9c:31:3d:5e:c2:cc:96:12:3a:
32:d8:87:64:cb:c1:3f:91:fa:47:e9:ef:b4:52:70:
c0:19:4e:47:f5:12:68:be:6e:a8:e3:6d:53:c1:04:
e4:55:27:d6:45:3b:92:83:e9:d6:58:2b:d7:49:51:
ce:de:24:c5:7a:b5:2a:2d:73:cf:fb:15:ad:35:ed:
37:9a:06:28:23:53:db:5b:b1:1b:1a:1a:5d:c4:b3:
10:06:f8:12:74:0d:88:52:73:f5:e7:03:54:2e:79:
77:a7:ab:72:af:6c:ee:00:a6:b5:e9:84:a5:7d:96:
69:00:ee:db:cf:64:0a:f5:e9:78:8a:91:77:9f:1f:
68:ad:09:a3:2c:2e:82:96:80:0c:12:5a:d8:aa:e1:
f6:f2:97:7b:c2:33:ad:4b:18:e5:3f:5b:32:fa:70:
9e:49:50:b9:fd:8d:2b:2c:c1:80:1b:b8:bf:26:f6:
27:21:e9:30:14:68:36:92:87:34:97:b6:f5:ba:b7:
b3:7a:7e:25:86:88:28:20:00:9f:85:98:c7:26:1b:
0a:c4:d9:4c:5b:3c:1e:6f:71:91:1a:ae:87:7f:ed:
b7:5b:07:d0:a4:7f:a9:18:30:b9:72:f0:8b:96:2a:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:11:EE:37:93:D0:1B:6C:18:4F:F1:DC:49:16:41:F6:33:91:AC
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:7b:4c:a0:2b:42:ec:44:0b:79:48:96:d3:88:83:f5:8f:b5:
22:f2:74:fd:e2:14:83:0a:4f:85:91:78:ed:7e:af:0c:d8:6d:
95:09:d6:d3:eb:73:3e:c5:09:26:f8:27:42:97:f8:3e:d0:fd:
12:75:46:88:7b:52:01:93:78:44:51:28:af:33:06:4a:2b:1a:
c6:6e:b1:12:72:2c:16:33:c9:29:9a:bc:79:3f:b1:1c:22:e7:
3b:69:5b:79:97:90:34:11:39:46:9e:c7:7d:cf:32:fa:41:34:
20:86:03:8a:40:23:93:63:01:67:9b:9b:c0:88:7c:e7:b6:98:
71:15:6b:b7:ab:16:a7:e1:6f:10:31:cd:ae:33:a5:bd:f8:b9:
c3:39:05:7f:3b:4b:23:97:8f:91:6a:b1:57:ce:5b:13:75:53:
e1:d6:6d:1d:bf:c1:2e:95:34:86:d8:1c:b2:0d:30:f9:d9:10:
1b:cf:b9:05:9d:2a:01:a2:49:81:e3:70:6d:7c:d0:96:26:d8:
fe:37:31:84:a6:35:c4:0c:be:0d:13:23:e6:4f:fe:5a:a7:cb:
0a:65:da:2b:93:d3:a3:38:69:95:2d:7b:e6:cc:53:98:7f:f1:
74:1d:27:a6:60:79:a3:a2:5e:27:02:5f:2f:44:59:4a:e3:fd:
f6:4d:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:05 2026 by rpki-client