Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: 6RJvOTimR9MoN/Iluv7HmwKnkjQUBKugCEBs4uezlUM=
Subject key identifier: E1:5E:3D:4D:CC:B5:45:80:C3:63:C5:5B:2E:FE:F5:60:96:98:EF:FD
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019D26CCAA5A1FFA6F82DC3F71E6CF83A0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: jA5ErFC65NfQN1fBMjQh0Qyxs1OfgnA9ed3BAYrWzgY=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:aa:5a:1f:fa:6f:82:dc:3f:71:e6:cf:83:a0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=e15e3d4dccb54580c363c55b2efef5609698effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:07:dc:b1:ed:79:18:c1:6b:cf:a0:07:9b:
e7:4d:f9:75:05:ab:81:6c:68:ff:00:57:34:5f:01:
df:51:62:8d:d6:ac:ba:9b:5a:70:0b:26:0d:b8:a1:
76:82:27:c1:f3:a0:f0:8a:e2:af:8a:b3:17:2e:4b:
58:f2:ab:01:0a:a3:2a:0e:56:7f:1b:b5:dd:3e:fc:
ba:41:99:8c:13:41:24:6b:42:bc:89:b6:5b:a3:4b:
df:ed:c5:b7:c6:c2:93:f7:00:44:7c:08:d1:97:cb:
66:46:4a:67:bf:ea:60:9e:91:d5:91:f6:09:9b:c7:
be:2f:44:50:41:26:bd:26:97:37:58:51:82:ea:76:
d5:c8:98:2e:dc:77:89:c5:47:19:84:42:c8:7c:f0:
ae:54:a6:fe:34:35:fd:44:f5:87:c4:30:04:b2:fb:
4b:b0:41:3a:f5:b7:29:46:1b:2d:97:12:1a:b7:32:
c9:53:ff:eb:59:f0:f3:99:f9:c0:13:f8:7c:bf:1c:
c1:b1:09:da:2a:bb:9e:f2:d5:c3:b0:56:05:21:bb:
96:1c:1b:0c:83:40:0d:ca:5c:71:c1:7b:6f:e3:0d:
2a:f0:23:11:c8:2c:00:4e:b0:65:21:c6:8c:02:c7:
18:4e:24:fb:1d:e1:16:bf:f8:22:27:d4:58:2c:a6:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5E:3D:4D:CC:B5:45:80:C3:63:C5:5B:2E:FE:F5:60:96:98:EF:FD
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:0c:eb:02:a3:d0:05:ae:3a:53:2c:be:84:c6:66:5d:ff:8f:
f5:cf:aa:7e:a0:2d:0e:f0:b7:f2:c3:f1:8e:ee:6d:19:27:44:
38:08:1b:be:d9:ed:cc:d0:6b:d3:33:e3:6d:97:d9:39:f5:ed:
02:57:c3:3d:0d:81:a4:92:ba:1e:9c:fd:6d:1d:75:8f:b4:e6:
1c:ec:ef:04:40:9b:39:07:91:39:cc:ed:fb:24:cb:ff:1d:a0:
b8:2d:5b:fe:6a:bd:5e:b0:02:e6:2a:5b:51:cd:5c:4a:e1:a7:
49:2c:5d:2e:5d:86:c4:a2:3a:e2:a5:01:e5:34:75:7a:79:33:
49:3c:59:07:f7:11:85:dd:67:b3:ce:7f:38:c2:86:20:a0:c2:
ad:fb:8e:4b:4c:61:b7:93:75:88:d7:7e:59:d9:53:3e:80:1a:
cb:37:e1:98:94:ce:69:98:e7:ed:47:1f:28:b8:24:18:96:4e:
11:c6:52:af:5b:3e:06:55:84:01:a5:39:50:62:e9:60:c2:a5:
1e:72:5a:ca:69:48:0c:06:c9:49:a0:51:ff:77:65:ff:f9:8a:
53:69:31:7f:fe:7c:81:05:49:09:78:27:80:c6:be:7b:98:18:
53:8f:f9:d3:8a:f3:f4:d2:61:ce:6d:ea:3d:63:2b:3a:37:86:
78:e0:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:24 2026 by rpki-client