Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: pFDjOM7sOwuxJWWIo9l51m5vt9My9XWFdnDF6YxIpwY=
Subject key identifier: 57:68:E7:D9:3C:09:99:93:EA:AE:6A:39:4E:F6:88:EE:B9:6B:88:A6
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019E2C5E6023C29C246C273550174118A71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 16:00:42 +0000
Manifest this update: Fri 15 May 2026 16:00:42 +0000
Manifest next update: Sat 16 May 2026 16:00:42 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: faO5sz+8semFU8vGU0oTTBikoWUWLFv/mNd9lYZI3BM=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:5e:60:23:c2:9c:24:6c:27:35:50:17:41:18:a7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: May 15 16:00:42 2026 GMT
Not After : May 16 16:00:42 2026 GMT
Subject: CN=5768e7d93c099993eaae6a394ef688eeb96b88a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:91:1a:98:7c:8c:ef:29:42:18:56:25:2d:
2d:0e:2c:d7:de:75:37:84:a7:db:a7:e9:af:43:35:
aa:5e:ca:42:94:bf:f9:6f:0e:3d:62:6b:01:5d:57:
a7:25:f0:88:c2:01:14:5f:e7:1b:2c:18:ed:05:44:
da:4b:2e:e9:fa:69:b9:d4:f3:6c:fe:27:b5:95:ad:
39:40:de:75:01:64:33:1e:04:0a:1c:d1:4d:f5:2d:
95:a3:81:fa:85:52:85:4d:57:a4:29:f5:17:4a:9c:
01:58:68:29:d0:48:5a:11:52:4d:6b:df:eb:96:c4:
6e:bd:73:da:39:96:51:df:0a:1c:ba:ff:34:6b:a5:
14:0f:39:27:d2:ab:b4:f9:86:0c:84:e4:cd:14:34:
9f:36:2f:c5:db:59:ca:99:19:e3:02:f1:71:89:cd:
23:3d:20:12:ce:eb:a8:4b:3b:de:9d:4b:66:e5:d6:
76:31:35:fb:b9:02:27:2b:3a:1f:84:9f:75:0b:3c:
66:08:09:67:17:80:d4:be:4b:61:6c:99:a2:9e:e4:
26:8d:ec:97:54:3a:4d:bc:34:54:49:e7:43:4b:5a:
b9:73:2f:da:5c:25:37:b1:d0:f2:ee:69:2c:26:9d:
eb:44:6b:5b:c1:25:b1:63:20:15:b6:39:e6:d9:f0:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:E7:D9:3C:09:99:93:EA:AE:6A:39:4E:F6:88:EE:B9:6B:88:A6
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d8:d7:b5:a1:1a:70:b0:82:26:42:2b:58:b0:34:a9:69:da:
24:56:6c:32:69:65:a1:38:6e:ed:c3:5b:16:7d:65:02:a5:28:
42:6a:fd:e3:05:62:9b:5c:64:e8:d8:ed:38:c4:aa:ad:7b:ef:
a6:43:dc:e8:3d:2e:25:41:08:4a:64:11:85:2e:45:f4:74:a0:
e0:ad:0f:6c:f7:50:2c:93:1c:71:0d:52:1d:b0:6f:b4:e3:c7:
fb:c9:0d:79:1b:b4:7d:c3:ea:d2:a0:39:89:74:e2:17:0b:62:
9f:88:74:fa:cd:c3:4a:ce:92:8d:ba:a4:bf:b4:92:d7:2b:6c:
90:1b:7b:38:77:0b:9e:be:d9:a0:45:ab:9b:b1:ec:d4:64:db:
dc:0d:3c:37:10:ee:d6:95:aa:76:6a:bb:82:c2:dc:91:10:4e:
08:e9:e2:54:30:59:0a:5b:20:ad:11:3e:a2:7a:49:7c:71:83:
c8:dc:21:27:22:f9:81:9d:3f:a9:70:b8:b3:d4:64:0b:2c:99:
b4:f2:76:45:ac:6a:4a:29:b3:c0:b1:73:53:d8:34:6b:a9:d1:
15:e0:a0:72:9b:74:71:82:7d:e6:31:f9:be:2e:2a:2c:91:4e:
b2:09:7b:c5:5a:2b:ce:62:77:56:5d:4e:61:72:a8:37:b4:4a:
f6:34:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:32:54 2026 by rpki-client