Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: RSF/yEKmlusiPM1HeqifSwpERKQ4sMoV+PQEAzpOdZw=
Subject key identifier: EE:11:4E:44:B7:20:22:C6:98:B9:55:48:D3:EF:DE:82:15:57:B3:C7
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019F17F9654E7ACCB38034E1606FD13B221A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 10:00:48 +0000
Manifest this update: Tue 30 Jun 2026 10:00:48 +0000
Manifest next update: Wed 01 Jul 2026 10:00:48 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: ouIIszYJO7GzGKbMpUZg5pMcn4aB2obQn5BCH1wn2UA=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:65:4e:7a:cc:b3:80:34:e1:60:6f:d1:3b:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jun 30 10:00:48 2026 GMT
Not After : Jul 1 10:00:48 2026 GMT
Subject: CN=ee114e44b72022c698b95548d3efde821557b3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:45:8c:5f:9e:a1:71:65:98:41:fe:3e:dc:
8d:50:36:73:2f:01:3e:f6:89:65:7d:16:62:4a:ca:
5b:57:92:d4:99:df:68:0e:2a:9d:ca:98:ef:61:98:
8b:a3:45:78:90:e8:4f:0b:06:3c:ca:56:53:6a:eb:
58:b9:3d:b5:84:c5:26:cc:36:aa:af:2e:b7:08:95:
e5:3d:61:22:fd:8b:87:e6:13:b1:b9:27:8b:58:2c:
00:67:2e:dc:f1:99:4a:e8:66:9a:08:1d:f3:0a:9a:
07:57:1c:5e:0f:07:79:42:51:db:b9:2d:65:c9:d4:
7f:f7:88:00:b6:32:ec:13:56:8f:78:f1:2b:d1:70:
dc:d8:a5:cb:5d:a5:0d:f5:0d:d8:36:ee:ef:0f:a7:
a1:f8:ff:77:6a:45:ab:a0:aa:09:d2:db:dc:bf:b7:
fe:c3:38:10:83:c6:d6:3f:27:5f:01:77:48:c8:1f:
a6:bb:d1:f1:d1:79:b2:d6:9b:da:83:be:f8:fd:94:
b8:b7:1c:c2:70:94:13:47:7f:9d:ac:f1:10:db:75:
9a:9b:b5:48:79:83:e8:90:b2:78:e8:63:7e:a5:12:
fd:0c:a7:3a:0b:56:2a:19:1b:11:9c:36:b0:82:b2:
81:88:37:17:66:4a:c4:b6:03:d7:66:b2:a1:bc:36:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:4E:44:B7:20:22:C6:98:B9:55:48:D3:EF:DE:82:15:57:B3:C7
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:43:a4:d1:c1:f3:e5:bc:91:bb:80:4c:de:a0:c1:68:12:
19:98:14:ae:fd:6c:0f:07:42:39:70:af:fd:67:62:c4:1e:b4:
1d:94:00:c1:e4:eb:e0:a9:e1:1a:63:0a:30:46:35:52:b6:8d:
55:73:55:13:fa:a1:a8:52:5b:6b:3b:19:a1:55:4e:4c:7f:14:
d6:87:f3:a4:4b:8f:80:c9:c0:3d:f0:90:15:b0:ae:c0:e7:d4:
c8:ca:66:96:23:2b:a8:5e:50:76:f0:cb:ec:d4:28:7d:ee:1f:
c5:ad:54:26:75:98:58:af:e7:c9:95:b1:c4:af:8a:08:5e:bb:
ed:27:7d:1c:e0:5d:f4:c4:dc:f2:c7:17:ae:a9:eb:57:1b:f0:
9f:40:3c:a3:2c:4e:a5:c6:5c:77:18:d5:94:bd:6a:3d:e4:97:
2b:d6:27:f5:3b:39:41:d3:5a:95:dd:bc:6d:8a:57:57:ea:6a:
d1:b9:6d:8b:e8:2d:99:93:44:25:72:f4:aa:12:d9:be:6c:6b:
63:94:c6:3d:26:19:45:84:82:8d:9c:6d:a9:25:31:73:73:d2:
33:4e:9f:bd:78:ad:85:9b:9a:41:ee:ff:b4:1c:70:ab:cf:0a:
ca:f1:5d:2d:c9:65:e0:66:5c:f4:05:03:6d:04:37:48:26:fa:
e3:41:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:27 2026 by rpki-client