Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: eZKdN6rR/9blWBHrUu9XtZak0HvYFzlDPwK2ZVPHWVQ=
Subject key identifier: 33:9A:EF:31:8D:0D:57:A7:05:BE:0F:E3:7A:F2:E5:99:E9:AF:E9:B4
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 019F18D6DC37B6EA752C23BC4323506C0C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 0EE1
Signing time: Tue 30 Jun 2026 14:02:41 +0000
Manifest this update: Tue 30 Jun 2026 14:02:41 +0000
Manifest next update: Wed 01 Jul 2026 14:02:41 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: 2EUsdwh/Jb5ISHH8aDSjVeNrYCc5HUEroeOoFcjIviA=)
2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:dc:37:b6:ea:75:2c:23:bc:43:23:50:6c:0c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Jun 30 14:02:41 2026 GMT
Not After : Jul 1 14:02:41 2026 GMT
Subject: CN=339aef318d0d57a705be0fe37af2e599e9afe9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:75:7d:e5:95:58:ff:6d:5e:57:01:af:c3:
6d:91:7f:c7:e0:6f:51:a2:ec:a6:91:89:a1:25:52:
aa:46:1c:83:72:46:e7:01:b6:39:42:e7:fb:bf:24:
9c:87:d3:4a:a3:84:0d:c5:55:39:60:2d:fc:45:90:
1f:d8:0a:dc:c2:bd:df:31:43:f6:a6:23:2c:18:f0:
ec:d7:fe:98:b7:2d:9b:27:21:6b:1c:07:c4:c4:78:
98:63:09:c7:0b:d6:af:4b:bc:91:40:f2:2c:9f:df:
db:f9:95:7a:fe:0d:02:7c:6a:02:f8:80:ce:bb:ca:
c0:df:3d:66:0b:1e:5e:fb:32:82:d5:31:37:69:79:
d8:f0:b4:16:ef:e0:4e:34:c0:ac:b3:70:26:b2:34:
b4:9c:2e:08:31:d3:16:b3:0d:3a:ff:dc:61:0c:81:
e4:de:d6:eb:b5:c1:9c:88:22:9a:0f:d5:32:6b:0f:
00:59:ca:da:b4:fe:3e:1e:c2:9e:e8:1d:11:bc:50:
38:d9:3a:06:3f:04:88:86:50:24:97:c2:43:6f:de:
3d:49:6a:12:91:c3:99:8a:29:46:c9:f4:43:a3:4c:
6b:d7:ef:92:ca:d9:9e:6a:01:d7:52:04:f7:ca:a5:
2a:76:57:99:f2:ca:64:56:9c:c1:ea:be:7b:bf:f5:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:EF:31:8D:0D:57:A7:05:BE:0F:E3:7A:F2:E5:99:E9:AF:E9:B4
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:8c:66:ad:98:db:1a:ad:c2:66:30:85:5c:bc:43:f5:2d:
dc:8d:1a:13:e6:8f:0a:ff:c0:e7:e5:66:74:d1:ed:53:2a:34:
13:4b:cb:ac:db:6b:94:99:89:96:3b:9a:d6:6c:81:a7:a6:57:
03:90:23:b7:ab:24:bc:a6:33:f1:4d:17:94:91:90:6d:34:e5:
2f:07:2d:5a:d1:6f:64:d5:d9:48:1f:b5:59:59:b9:7e:a4:58:
06:fb:10:17:03:e4:76:a5:bb:aa:dd:ce:53:e4:cf:6c:d1:7b:
e3:70:06:bd:b8:66:9f:7d:83:14:1c:86:39:d4:76:c4:b9:f9:
44:73:32:af:71:e9:86:cc:ef:a7:de:84:37:7a:cc:54:16:e8:
57:ec:0c:7d:00:6e:a5:7c:82:8e:96:51:21:83:49:d6:9c:55:
2e:ac:dc:d2:bb:d0:f6:0b:91:23:a3:bd:2f:25:a8:c4:0f:fa:
33:9d:d7:6c:3a:b0:42:da:c6:31:be:0d:8e:62:74:09:00:9d:
bd:a3:e4:85:72:a6:ae:68:a0:4e:9c:72:71:d7:71:a8:19:a6:
cc:cd:75:cb:d9:80:0b:b1:03:2f:89:c1:b5:0f:8d:1c:41:66:
c6:26:98:ef:2f:62:36:82:45:44:77:4d:b1:4e:8a:d5:e9:a1:
a4:bf:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:31 2026 by rpki-client