Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: fZ/VOpBR3OOOR6piW1hAV5X+f9ESjChfgYg+IamhBEM=
Subject key identifier: 14:18:B1:57:E3:9A:CA:D3:8F:F4:F2:AE:18:1D:7E:90:13:A0:F6:85
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 019D28848016A5C275987A6CA18F034596B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 029D
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: bEJ7Z8y9hIVWVPGSn56R8t/fbEohHIbC+XnGmhSvBvY=)
2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:80:16:a5:c2:75:98:7a:6c:a1:8f:03:45:96:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=1418b157e39acad38ff4f2ae181d7e9013a0f685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:b7:a4:25:3c:29:01:28:ef:d3:bb:bd:63:
44:df:59:33:6d:ac:74:d4:67:66:e2:d9:ce:09:70:
2c:2e:57:59:10:50:3c:d5:6d:9b:b0:50:cd:06:c5:
9b:c3:ac:94:e6:a4:c5:8e:32:67:2f:64:a0:32:4e:
be:f5:ae:4f:06:a3:25:60:6e:fb:c0:bb:a1:26:0b:
95:19:a3:8e:a7:70:2e:c7:b1:20:76:59:08:14:aa:
81:09:5a:08:17:50:65:95:81:02:04:f4:e9:3b:45:
f4:73:16:46:6b:3d:07:38:33:94:f2:01:67:ca:b5:
d0:60:11:67:c9:1d:9c:33:f9:cb:a0:4a:56:ed:2f:
21:3c:fe:6a:c7:0f:d6:5d:26:d2:8b:8b:d5:ad:9e:
9b:f4:1b:63:dd:9d:17:7f:d4:aa:0d:7a:7e:49:c8:
17:58:cd:2e:c1:cd:5c:d7:8a:75:b4:f7:98:51:8f:
a4:49:b5:9c:bc:57:f0:80:c6:25:13:9f:96:9e:dc:
7f:45:76:0b:bd:07:45:c5:e0:ad:5c:4a:dd:d4:14:
1f:7c:bf:4c:73:ac:6a:aa:b5:d6:95:a6:42:75:d8:
a9:e8:06:2b:c1:ea:6b:ef:ba:f7:5e:58:97:9d:70:
24:4d:ed:e3:17:55:cd:3f:d8:d3:88:b6:ad:92:9b:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:B1:57:E3:9A:CA:D3:8F:F4:F2:AE:18:1D:7E:90:13:A0:F6:85
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:08:8b:80:0f:31:bb:02:73:ca:47:28:30:ea:90:88:12:
50:68:e9:f6:cb:2f:ba:2d:63:31:77:b3:4d:87:9b:56:f9:f8:
9d:4a:95:3b:01:f1:c6:cf:38:ce:b9:2e:34:fc:d0:e4:84:6e:
96:1f:8d:d3:8a:54:47:e9:1c:bb:64:02:f8:d9:d4:f5:01:b0:
98:bb:06:bb:1e:fe:f8:57:06:ab:54:23:e8:29:7e:4b:5a:93:
f9:ea:4e:2e:86:4f:8b:06:f2:80:ac:1d:fb:d0:7a:33:28:d2:
20:1d:d8:74:6a:18:c5:34:e5:de:2a:1f:b6:8f:a5:e3:07:52:
0c:52:59:8a:11:8d:2f:0f:c1:a0:ef:df:15:c6:2f:f4:ae:2a:
79:5c:a0:e0:fc:a5:8e:21:83:51:e4:d9:5b:c0:fd:81:93:7c:
74:2a:2b:56:18:c9:8e:57:1a:6e:87:3f:ae:6d:47:a9:03:27:
44:54:22:94:90:b9:c1:5d:c6:7c:e6:68:c5:57:ba:03:cd:f4:
b5:3b:74:10:75:62:f0:68:f9:53:31:87:2c:5a:a1:10:57:74:
ab:ee:1c:db:23:ba:f2:7c:95:7e:2e:f3:3c:80:8b:a3:53:0a:
4c:16:95:f7:5f:8e:0f:ec:b6:23:5e:8b:b8:d8:5b:96:95:18:
b7:10:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:24 2026 by rpki-client