Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: XfGRUFTVFDHmBv4y33QlbGYZQIc3qrEFwIc1JKAKZs4=
Subject key identifier: 4E:BF:FF:33:6B:F5:C9:4D:28:46:98:81:CA:A2:5E:49:89:9F:87:DD
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01A113E0C411C0E6A4575FED786051D98FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1A90
Signing time: Wed 07 Oct 2026 01:00:59 +0000
Manifest this update: Wed 07 Oct 2026 01:00:59 +0000
Manifest next update: Thu 08 Oct 2026 01:00:59 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: u25lpNPEKD5a9WhMtiQm2h0PU4GozoTy087CmzKhrcU=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e0:c4:11:c0:e6:a4:57:5f:ed:78:60:51:d9:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Oct 7 01:00:59 2026 GMT
Not After : Oct 8 01:00:59 2026 GMT
Subject: CN=4ebfff336bf5c94d28469881caa25e49899f87dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:b5:fa:e7:69:62:58:e3:c3:5e:cd:3e:10:
f0:a3:da:f4:e6:30:4c:64:0a:e9:4b:29:69:b4:79:
a5:e6:79:41:50:9d:81:d3:ce:d7:28:dc:7b:2e:61:
b2:9f:6b:86:19:af:2b:75:21:10:0b:5d:cf:70:ca:
c6:54:35:77:99:47:f0:ea:63:2b:eb:ab:93:82:da:
76:21:a2:f0:f9:65:13:e1:38:e1:9c:73:6d:dc:54:
91:2b:98:a1:f3:30:e1:df:03:df:ad:ee:80:82:f0:
a1:20:c5:e6:74:df:07:cc:12:d7:83:c2:83:ec:ca:
7c:74:c1:ed:a0:e0:e1:ff:dc:7d:ab:86:50:e3:8e:
20:fa:f2:bf:28:7b:11:b1:c1:9f:5c:f6:68:2a:75:
97:32:28:1b:d3:a1:49:85:3a:45:b6:31:b7:d4:9b:
3b:57:65:67:0e:81:d3:44:ed:71:0f:45:f8:e8:c0:
fe:03:c6:33:40:06:22:f9:c4:22:6f:68:98:f2:8c:
98:25:70:dc:d5:66:2e:f8:cb:60:77:23:86:4e:bf:
58:a7:4a:cb:38:71:c2:40:48:fa:cb:00:26:47:8c:
08:d7:e8:63:8a:15:22:b6:13:27:ce:dc:c3:7e:e1:
25:b1:45:a9:cd:b0:77:f7:c2:96:46:52:74:8e:40:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:FF:33:6B:F5:C9:4D:28:46:98:81:CA:A2:5E:49:89:9F:87:DD
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:01:8c:f4:e2:21:20:17:a4:85:f8:1c:04:21:8a:7d:73:b3:
59:fa:4e:2e:ef:0b:31:45:7a:89:ae:f7:71:f2:3b:9f:36:d6:
32:52:72:0c:b0:cd:fc:d7:8a:cb:34:35:c5:93:12:a5:b7:3e:
fa:e9:a6:ff:36:dd:19:51:48:4e:24:20:db:f4:1d:58:66:d1:
e9:c8:16:91:85:6a:6a:c7:63:1b:9e:cb:46:d1:71:34:04:bb:
b9:3d:f0:0d:87:14:4c:e4:03:16:d8:ff:d0:11:b8:5a:03:67:
f7:25:c3:f9:71:8c:5b:e1:33:d8:ec:ac:91:a7:b8:3a:c5:a4:
96:f6:78:14:4a:34:37:c8:ff:9d:24:80:54:e6:fa:0b:17:8c:
f7:ca:4e:cb:ff:01:d2:31:17:84:68:a3:2b:bb:27:5b:64:ee:
e6:03:ed:3c:e0:81:d9:8c:5a:60:3a:f1:29:d5:49:1c:86:98:
ed:22:34:db:e4:b6:5a:03:72:b5:4b:62:a7:36:3a:39:eb:0c:
59:45:fd:0d:ac:4b:f7:6d:a6:02:b3:bb:9a:b6:fe:e8:d9:50:
8c:dd:d5:c1:f7:c8:b3:00:b8:00:df:df:81:13:a4:ff:d6:7a:
8d:d7:eb:88:2a:8b:06:f9:a7:7a:6d:51:1f:8a:84:fe:19:ba:
74:10:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:16:37 2026 by rpki-client