Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: hWXpT8bQBbz9hSW719JW1SoM0IKrv/VcYnj7BcKk+Xw=
Subject key identifier: D7:60:AB:EF:DE:81:04:15:AF:68:80:35:9A:8A:67:40:D9:FB:0D:9D
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019FC7EE30DA205F4E7B1EFD6291FD52C843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: 01C1
Signing time: Mon 03 Aug 2026 14:01:43 +0000
Manifest this update: Mon 03 Aug 2026 14:01:43 +0000
Manifest next update: Tue 04 Aug 2026 14:01:43 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: bDSTvzRwvKiYPHWl8SO1Rn6C0lLHK9oH8QSBuLQ8xWc=)
2: 8_uN9lxayPNFYSFMe_-SzdqsN_M.roa (hash: JquMORB08SkqUpDd0r0GoDrQiAxCIucTbEwQ0tt/Va0=)
3: EgUddJnQyW-DZo-6cboASv4IDkM.roa (hash: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=)
4: SEYQgtC_8BplrZD7grL5ljlcID0.roa (hash: Ee29iLIQ6Fe9LUgXTWVjmo6kKFtR4CoXYo22/zo9Gpw=)
5: lwR4CDLvnTUuVyA34wT6tah5mv0.roa (hash: JomOdXVvYDHYetjFnHtJimdxkzg8t7h8C+QxsLpI72o=)
6: nix__MeXtH9Ij6H_zVJ_Gv0wzDo.roa (hash: 8YRYjdwnVrJjjYWFbBfABefk0bKSXs8xUG84zHP8hqo=)
7: vcuseHHUp2SFcc7WFCquL547C34.roa (hash: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=)
8: vk3vIZrZ9FMklVLLHWzL1-UixoU.roa (hash: tn/h/KlQHmIkGxmpVq1uDx8JRv/7qIwfuJJhsLuiJGY=)
9: zRMtSyG0erquHg8eDcLfOh4BpSs.roa (hash: fv01yx8YQE61hN1VLmCbWMtgYoNsmN10wZe2YdF/txM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:ee:30:da:20:5f:4e:7b:1e:fd:62:91:fd:52:c8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Aug 3 14:01:43 2026 GMT
Not After : Aug 4 14:01:43 2026 GMT
Subject: CN=d760abefde810415af6880359a8a6740d9fb0d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:a6:f1:8d:e0:1a:75:e1:0e:60:8e:d4:bc:
f3:d5:17:95:cc:0d:c1:68:d1:53:2e:85:f7:6f:ec:
8e:ad:48:a1:5d:63:e8:6d:f5:17:f4:72:2d:d1:01:
7a:73:b1:8f:b9:92:0d:ee:2c:f3:23:0b:d1:c7:be:
a9:01:1d:0c:d6:ab:b4:d3:c8:b6:fe:dd:90:70:11:
22:f6:fc:66:0d:c3:3d:c8:76:fd:1c:ad:52:67:47:
1a:d4:77:34:e6:e2:48:2f:03:06:20:fc:17:89:41:
c4:fe:b9:3a:b3:56:b6:28:4c:8c:31:e8:b6:de:12:
84:f7:bf:b8:46:aa:56:13:6c:6b:fe:ea:89:17:b9:
1c:42:ee:11:fe:60:16:92:d2:1a:35:a8:79:d6:71:
44:27:97:86:2e:0d:4a:9b:ab:97:91:ae:9d:e4:72:
4f:7c:92:82:43:70:4f:1c:16:48:d7:17:9c:5a:86:
23:df:07:bc:7d:cb:bd:2d:d9:97:1a:17:37:8e:ce:
e5:6d:22:94:dc:84:05:62:36:e4:53:e9:2b:59:95:
54:22:c7:2e:c4:b4:36:39:78:62:af:df:44:54:80:
68:90:23:f3:5b:a6:ca:78:81:17:d3:09:67:93:50:
d5:79:c3:c3:66:47:5d:46:d4:56:6c:82:bc:db:b7:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:AB:EF:DE:81:04:15:AF:68:80:35:9A:8A:67:40:D9:FB:0D:9D
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:26:0b:58:d7:6a:24:2e:d8:3d:a9:fe:88:c9:63:c1:5d:
70:ca:a4:6a:8c:cc:c0:a6:4b:44:70:1f:5f:cc:fc:1d:4c:1e:
24:9c:1a:2a:b4:62:c4:1b:43:41:e4:53:6f:57:29:19:7f:c3:
55:26:10:e8:e0:a0:31:08:cf:81:3d:ca:5f:60:75:f7:96:fc:
2d:3a:1d:7e:2d:cd:1e:0f:b1:5d:76:fc:c5:f6:38:14:44:dc:
52:2d:ba:86:91:5b:60:a4:02:78:90:10:9e:a6:a0:ef:82:81:
85:b9:d2:11:ab:4b:79:fb:2c:45:6b:93:88:09:20:8b:3d:9c:
e4:8c:e2:30:48:d1:6e:a2:17:f9:16:f8:40:80:fd:3a:ec:63:
f1:21:8d:aa:f6:20:0e:34:4a:42:b1:1c:ac:fa:f9:1c:3f:ac:
ed:cc:b1:41:81:0a:ee:5e:29:59:8b:b2:ef:ce:cc:0e:43:47:
40:0e:d6:e9:9e:89:7f:48:6d:e9:77:93:a0:35:bb:f9:da:9d:
f2:4e:e9:7d:95:c8:61:17:97:de:a0:b8:15:1b:60:1d:ea:dc:
37:6b:1e:44:e5:30:4a:19:6e:96:7e:6d:4a:c1:3f:b5:54:1b:
79:05:de:e1:c6:35:d2:91:7c:b0:85:c3:b7:d8:f1:b2:c4:78:
7e:91:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 23:10:20 2026 by rpki-client