Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: ll8BOKK6MBo3RBxaCu23hTs3NX2cX3DnNlgki4Kq4yY=
Subject key identifier: E7:5B:B0:0C:2D:47:0F:C2:10:46:51:B8:AB:C4:B3:11:75:5B:CE:60
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019E1C0FF8C8B41796EB93854CC0E387E40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 12:01:09 +0000
Manifest this update: Tue 12 May 2026 12:01:09 +0000
Manifest next update: Wed 13 May 2026 12:01:09 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: PeNNo9+d7cNR0N/al2+NzEHd67dO04yEWmNiJ5WEZlY=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f8:c8:b4:17:96:eb:93:85:4c:c0:e3:87:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: May 12 12:01:09 2026 GMT
Not After : May 13 12:01:09 2026 GMT
Subject: CN=e75bb00c2d470fc2104651b8abc4b311755bce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:a2:fb:e2:69:1f:d1:f5:0a:73:58:2f:02:
b4:0b:76:60:2a:65:52:15:a1:b0:6a:06:14:54:38:
11:30:28:85:d2:78:5e:77:1a:de:c1:1a:7d:cb:62:
ed:ba:d4:a7:60:9f:b9:61:5a:30:44:4c:51:c7:9d:
13:d1:9f:33:55:56:2b:b2:cd:82:69:d0:9c:4c:a8:
3c:66:6e:ec:70:2c:3d:23:91:b1:88:d9:ea:2c:1f:
b4:0e:53:6a:78:40:b0:2b:99:f0:8b:35:1c:9d:87:
fc:b8:20:1b:31:f5:8c:16:0a:f4:79:06:35:1b:36:
63:6d:9e:c8:04:0a:1e:7d:40:e6:0d:18:6a:e2:0f:
2b:20:0c:ad:50:7a:89:0a:8a:95:0d:f0:01:9e:d0:
79:cd:c4:36:c2:b9:44:20:9f:b8:37:31:70:bd:0a:
8d:ae:94:85:9a:af:5c:27:ab:1e:cf:b4:2a:ab:1e:
b6:5c:7f:a3:6f:b2:2a:62:8c:8b:81:10:0f:b1:37:
2e:b3:8b:97:38:f2:99:b3:cf:53:b9:40:d6:6d:c9:
59:32:1c:af:16:52:ac:d3:12:0f:c7:cd:03:ae:96:
ee:6b:8c:1a:0e:09:e1:01:94:2d:dc:00:12:e9:63:
e6:77:17:b6:6a:37:a6:93:45:5c:fd:51:19:ae:9b:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:B0:0C:2D:47:0F:C2:10:46:51:B8:AB:C4:B3:11:75:5B:CE:60
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:93:9e:fa:c7:97:72:22:ec:49:5d:bc:a3:e8:1e:05:c1:
d3:0d:86:d7:e5:cb:45:f6:8f:d4:91:76:76:ad:3f:5c:d6:61:
84:7c:08:e6:a0:49:c6:4d:e6:92:ec:0a:f4:c1:f0:66:bb:11:
64:1c:27:86:36:e5:b2:03:55:2a:9c:25:0f:5e:45:69:4b:78:
2d:bb:cc:31:49:06:a4:b7:35:34:21:3f:e5:be:14:7e:c0:9a:
4b:a0:4d:f7:5d:d3:e5:55:1c:52:49:dc:27:53:45:81:25:27:
6c:5d:af:3d:7b:6c:35:72:c9:c1:09:f1:e0:65:25:9d:6a:7f:
13:29:3f:f9:b8:a7:54:76:c4:b1:29:56:b9:95:1d:b0:fe:57:
9e:ae:67:0a:e4:4b:38:f3:65:aa:8e:15:69:27:0a:c1:5d:96:
de:86:0d:57:e8:2a:20:4b:94:c0:84:a5:94:91:92:49:6a:ba:
4c:31:f3:dd:11:3b:f2:5d:5c:aa:74:2a:26:e2:29:7a:36:d8:
3e:c3:2d:b3:e6:b1:1a:f8:73:02:51:31:a2:54:10:d0:ff:0a:
41:b3:7a:2e:04:49:58:bf:ae:2a:f9:4a:8e:82:50:1a:07:24:
a8:0e:81:2c:fa:fc:e7:fd:2d:a7:50:0a:70:5f:07:c8:3b:27:
1b:7c:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:35 2026 by rpki-client