Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: pbvX6UaZZJC3lsl7FwIjbWUn8Gdu5faXg8c2SQO152k=
Subject key identifier: 67:BC:BF:DC:88:79:10:CD:15:DB:EF:6E:E8:5D:63:65:AE:E2:89:40
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01A0201E5D2CB2A369E7B60A6116D3DD9A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 17:00:55 +0000
Manifest this update: Thu 20 Aug 2026 17:00:55 +0000
Manifest next update: Fri 21 Aug 2026 17:00:55 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: gMDAgagpc7tOWzPUcfuzY9XqtQm2vCyDBCu/CUVo/xo=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:5d:2c:b2:a3:69:e7:b6:0a:61:16:d3:dd:9a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Aug 20 17:00:55 2026 GMT
Not After : Aug 21 17:00:55 2026 GMT
Subject: CN=67bcbfdc887910cd15dbef6ee85d6365aee28940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:2a:32:08:17:20:49:a6:13:d2:c9:6e:ef:
19:59:0a:2d:2a:77:35:0f:df:34:30:3b:40:f6:5f:
e1:f7:10:eb:22:67:26:93:94:29:6e:f2:b5:c4:cb:
56:1d:cb:6f:34:33:6a:a8:84:14:ec:06:b2:de:d7:
fc:35:54:49:97:12:96:90:51:28:87:a1:a5:a4:8e:
5e:9c:60:13:20:de:10:39:31:24:ca:75:cd:97:d0:
1f:18:69:ef:fa:83:42:3d:6b:c7:07:c6:82:7d:71:
65:28:7e:22:64:0e:50:bd:35:5d:aa:0c:ea:a4:6b:
fd:e3:0e:bc:43:75:de:c3:71:97:dd:fd:98:ca:55:
04:b0:24:a8:97:ce:45:25:4c:04:f1:c9:37:35:eb:
97:0f:cd:00:b9:a1:68:c7:da:f7:d9:f6:4d:2b:84:
a5:e4:85:22:aa:e7:12:50:61:f3:b2:27:a3:fd:f6:
d6:9f:24:74:d4:93:71:05:35:50:96:a0:5e:ca:ec:
89:82:b0:3f:9b:da:6b:b3:e1:61:3a:f6:90:71:03:
fd:98:20:5d:4b:5b:e4:75:7e:01:85:ab:09:9d:0c:
0c:01:91:2f:82:db:72:18:40:d7:81:79:a0:e1:ab:
a1:14:92:6d:85:ac:fe:ee:f8:e3:10:18:8b:40:a1:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BC:BF:DC:88:79:10:CD:15:DB:EF:6E:E8:5D:63:65:AE:E2:89:40
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:2d:aa:00:e8:92:85:af:2a:e7:86:cb:3c:68:aa:4c:a3:
44:40:ca:6f:31:f7:8e:1c:28:40:0b:0d:53:59:a4:03:01:6c:
8c:2d:19:6f:39:d6:bd:b5:5c:42:68:4a:b0:a0:3e:f6:e2:db:
07:6e:ef:69:fd:b3:61:76:44:74:f0:fb:82:5f:0a:99:c9:a7:
d3:27:db:7a:54:ee:08:6b:04:d1:83:08:da:0f:15:f1:94:e8:
a0:83:73:24:8f:00:62:d0:6e:9d:ed:49:80:dc:93:74:92:d7:
d5:00:48:0c:c1:2b:89:e6:b4:36:dc:2f:66:1e:65:2f:67:73:
5c:86:21:b3:ee:9b:13:ab:01:bf:7a:39:0a:36:2c:08:1b:44:
71:01:03:14:b0:62:e3:83:35:9c:3d:c3:6a:43:9e:94:8f:7d:
a4:f1:61:f7:ea:40:3e:c2:7c:45:bd:79:9f:02:e7:80:68:e9:
68:99:6f:9f:86:3f:42:53:74:41:13:8b:d0:b0:03:40:61:60:
97:9f:37:78:31:51:f6:df:38:2a:51:bf:47:01:ae:21:bb:d9:
98:45:36:1c:50:4a:45:24:fe:e4:cc:fe:05:39:dd:72:a1:d3:
11:3c:94:49:e0:4c:43:2c:f3:7c:a5:e9:02:8b:05:9f:37:48:
66:d4:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:05 2026 by rpki-client