Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: HHAN3w/O+nBMylYk0XYtoR7pl7uSsXWGY/ElL49sUrM=
Subject key identifier: 26:68:65:4A:A5:AE:09:B8:43:17:13:00:80:22:3F:E2:3E:4B:7A:FF
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 01A0CD7F22C467EF82B886DD9E659443C854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 09:00:56 +0000
Manifest this update: Wed 23 Sep 2026 09:00:56 +0000
Manifest next update: Thu 24 Sep 2026 09:00:56 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: F34Lx7BRo5TbyV4ebsZQYUYXlyFk7TRay3Fj5kfBXlQ=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:22:c4:67:ef:82:b8:86:dd:9e:65:94:43:c8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Sep 23 09:00:56 2026 GMT
Not After : Sep 24 09:00:56 2026 GMT
Subject: CN=2668654aa5ae09b84317130080223fe23e4b7aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:2d:4d:53:9d:ff:9d:93:d3:d6:11:86:02:
3c:f6:00:0d:24:95:42:91:5a:c7:0c:43:f9:9b:5a:
b0:a6:26:42:2d:de:e5:d4:fd:c9:d1:47:ce:b8:dd:
4f:67:1e:e7:55:74:33:3a:20:9b:62:02:9e:54:3d:
59:67:7c:e2:5b:57:63:46:a2:43:39:1a:b1:d3:aa:
22:6d:96:6f:93:33:03:5e:25:6d:b1:dd:82:53:a7:
55:f0:a6:84:5d:b7:58:a5:85:2b:b8:49:23:11:0f:
70:12:ff:8e:09:b2:b2:21:8a:27:7e:ed:d2:7b:4c:
77:b3:9d:ce:4c:74:d7:90:45:9d:28:d6:03:c1:2e:
82:d2:ce:0f:76:92:c7:70:d9:15:05:86:01:b2:27:
dc:98:1f:fd:a5:d1:4e:86:dc:ed:41:de:07:bb:30:
6b:69:1f:64:b3:61:0c:f3:f1:41:92:12:13:19:c6:
ef:31:95:36:e0:43:79:06:43:9d:db:28:66:74:ee:
6c:ff:62:4c:9f:20:3f:70:4d:9c:99:d6:bf:6b:5e:
62:c7:71:e9:0f:11:e9:4a:02:24:e5:a3:99:dd:73:
c7:7e:e0:bd:8b:46:5e:87:d9:f3:8b:fc:e2:68:15:
8d:6d:3b:1b:cc:8b:e1:fe:4c:e5:77:80:4f:ff:0e:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:65:4A:A5:AE:09:B8:43:17:13:00:80:22:3F:E2:3E:4B:7A:FF
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:37:3a:11:68:b4:b2:3e:6a:ff:22:dd:ba:e0:77:20:d1:
e6:9e:4a:f3:a0:d4:4d:28:fb:7f:ec:dd:10:86:a0:6d:b7:1b:
16:5d:82:de:f1:a9:a3:82:58:77:7f:9a:3a:ef:d1:59:f4:63:
9d:0f:ca:ff:e1:82:f6:bf:d5:df:7b:28:99:39:21:86:cd:98:
26:18:c5:a7:9e:00:11:85:0b:55:18:91:71:e5:e4:39:a5:f4:
42:c0:f4:d3:d5:d8:2b:e7:c6:0a:bf:70:62:5b:78:d7:d8:3b:
66:9d:4c:40:74:a7:5d:b4:74:f4:ec:86:81:b6:31:b3:ee:c7:
aa:43:0b:88:1e:94:f6:51:d2:ba:b0:2c:ae:a2:ca:8a:d8:68:
66:af:1d:31:f9:29:31:41:dc:9b:02:80:c1:22:7b:71:a1:02:
94:eb:8e:1f:b0:e0:96:ff:71:9b:c6:ad:c1:61:a8:ee:9a:6e:
79:ff:2f:eb:b7:c9:a3:92:ab:49:71:4b:bf:3c:93:c5:f3:3a:
15:bf:68:a5:c9:8c:56:10:02:1f:71:58:b2:62:ad:d8:f4:45:
3f:d8:05:ab:f0:38:82:ec:bc:02:8c:c4:e3:9c:0f:e3:28:67:
6e:7c:b8:f8:c5:db:c2:36:ef:f4:25:0d:9c:97:76:bb:22:47:
fa:32:d0:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfyLEZ++CuIbdnmWUQ8hUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj
ODM0YzYwHhcNMjYwOTIzMDkwMDU2WhcNMjYwOTI0MDkwMDU2WjAzMTEwLwYDVQQD
EygyNjY4NjU0YWE1YWUwOWI4NDMxNzEzMDA4MDIyM2ZlMjNlNGI3YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLstTVOd/52T09YRhgI89gANJJVC
kVrHDEP5m1qwpiZCLd7l1P3J0UfOuN1PZx7nVXQzOiCbYgKeVD1ZZ3ziW1djRqJD
ORqx06oibZZvkzMDXiVtsd2CU6dV8KaEXbdYpYUruEkjEQ9wEv+OCbKyIYonfu3S
e0x3s53OTHTXkEWdKNYDwS6C0s4PdpLHcNkVBYYBsifcmB/9pdFOhtztQd4HuzBr
aR9ks2EM8/FBkhITGcbvMZU24EN5BkOd2yhmdO5s/2JMnyA/cE2cmda/a15ix3Hp
DxHpSgIk5aOZ3XPHfuC9i0Zeh9nzi/ziaBWNbTsbzIvh/kzld4BP/w6I/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZoZUqlrgm4QxcTAIAiP+I+S3r/MB8GA1UdIwQY
MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt
MDcyZmNhNWZmZWJlLzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl
LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG543OhFo
tLI+av8i3brgdyDR5p5K86DUTSj7f+zdEIagbbcbFl2C3vGpo4JYd3+aOu/RWfRj
nQ/K/+GC9r/V33somTkhhs2YJhjFp54AEYULVRiRceXkOaX0QsD009XYK+fGCr9w
Ylt419g7Zp1MQHSnXbR09OyGgbYxs+7HqkMLiB6U9lHSurAsrqLKithoZq8dMfkp
MUHcmwKAwSJ7caEClOuOH7Dglv9xm8atwWGo7ppuef8v67fJo5KrSXFLvzyTxfM6
Fb9opcmMVhACH3FYsmKt2PRFP9gFq/A4guy8AozE45wP4yhnbny4+MXbwjbv9CUN
nJd2uyJH+jLQVA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:06 2026 by rpki-client