Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: UTxnKoEufTXYpbIYa8CHp/MZOPnG2lpkn4JjkYET57k=
Subject key identifier: 05:99:3C:24:DD:E8:48:47:6A:46:AB:98:BA:CD:11:49:43:E9:AE:DE
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019D390986969508F82EB14244100D3CBA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: jb+WZDPTivvqAGV/kfzTjxzl2KMKcbuYAY0Sc8zyCng=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:86:96:95:08:f8:2e:b1:42:44:10:0d:3c:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=05993c24dde848476a46ab98bacd114943e9aede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:8a:cc:56:25:4a:d0:dc:5c:17:b6:c7:57:
9d:d2:95:ed:8d:8f:d9:97:9d:64:dd:08:ee:f8:18:
ab:94:4a:ac:66:e4:2b:6d:dc:c6:20:f0:b8:2f:e7:
27:1a:98:df:a9:bb:d2:4d:65:f2:55:97:60:d9:d5:
20:73:0d:95:e6:5f:30:23:47:7a:ab:2f:02:cc:16:
33:71:77:49:dc:5c:7f:b4:65:0d:bf:6e:96:bb:60:
72:4f:be:26:38:80:80:02:2d:a3:60:28:30:5e:db:
6c:20:8b:a6:e9:80:68:65:e5:89:2f:39:63:22:58:
a6:35:9a:5a:2c:3c:b7:e5:23:35:ef:2b:0a:24:63:
5b:64:83:59:84:98:72:d9:fd:a8:8f:67:3a:ae:69:
d2:63:e5:15:36:14:67:54:d8:f4:ec:84:c3:69:01:
4c:b0:25:9c:41:90:8c:36:fd:6d:7b:10:11:28:df:
73:44:a5:58:c1:ea:36:56:f8:84:0c:19:ed:e4:5f:
dd:45:ce:a3:ac:d5:fe:7b:e3:ca:93:73:a8:16:9c:
5c:74:ad:a0:f6:49:f3:a9:b1:64:31:16:18:39:eb:
76:4a:32:65:9f:a4:69:76:4b:6a:fb:a7:c3:90:48:
db:96:cf:77:96:ab:cd:bb:15:59:b7:a6:2f:b2:2c:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:99:3C:24:DD:E8:48:47:6A:46:AB:98:BA:CD:11:49:43:E9:AE:DE
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a0:01:5c:14:c7:a3:58:fc:7c:c3:ba:50:7b:be:60:52:65:
04:30:ac:a9:27:51:cc:38:eb:18:04:74:6a:e1:1e:05:c8:3a:
d4:b0:16:b0:bf:13:38:c6:6c:90:c9:dc:9c:66:7f:64:01:90:
51:0f:07:31:26:2f:c0:02:3c:ac:a8:11:05:65:78:28:53:a7:
c5:d9:89:26:a2:8a:18:44:cd:d1:8c:6b:db:08:64:b6:55:c1:
58:65:11:7a:d6:2c:7a:ad:7a:a5:1a:f5:10:81:80:8f:b9:f3:
b5:cc:80:e8:7d:fd:a8:fd:db:e2:ce:9d:ec:bf:fb:2a:f3:bd:
db:ca:fe:d5:7f:18:4a:14:8d:47:8c:77:73:6f:7e:a3:be:fb:
68:8a:55:2a:e3:6d:86:39:01:f4:ae:84:b7:31:ad:eb:5f:b3:
b6:75:cb:c2:d0:bb:f0:d4:fe:4d:1f:54:19:b7:14:bf:0d:ac:
91:9c:a7:9c:04:d5:ad:66:e8:90:d2:b6:2a:05:e4:b5:d5:d5:
4d:0e:56:45:ac:7c:d3:16:13:1e:00:80:ec:35:f3:d4:76:5a:
58:27:95:53:e8:86:cb:8b:47:2f:f2:0d:50:5d:47:69:50:8a:
d9:a4:c7:d1:ad:79:bb:8b:0f:dd:1b:f5:be:a0:c6:79:9f:f2:
fb:63:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:10:09 2026 by rpki-client