Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
File: 66ruVpuHPHsF7NIh27fzQnS3v1E.mft (raw, json)
Hash identifier: r1LDucxltTLdnElIG+GmidaZY9++CeOVlGN77kBpkJU=
Subject key identifier: 32:20:46:0F:8C:54:49:AF:FC:05:81:4A:91:B9:3B:70:6F:C2:F5:80
Authority key identifier: EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
Certificate issuer: /CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Certificate serial: 01A08AFA186F973D63F09B294F5D494EDC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
Manifest number: 40
Signing time: Thu 10 Sep 2026 11:00:41 +0000
Manifest this update: Thu 10 Sep 2026 11:00:41 +0000
Manifest next update: Fri 11 Sep 2026 11:00:41 +0000
Files and hashes: 1: 66ruVpuHPHsF7NIh27fzQnS3v1E.crl (hash: thX8JTIqgfe0f5aAEzGIDMyJx6GZMNLNOP0+rmFbP8Y=)
2: _J6pdmckPgHyz2FG0GKqWH27YPI.roa (hash: g+6dKk+dtRpdHiyAdn0zdGS/dJUE/LqkB+mPs4d91gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:18:6f:97:3d:63:f0:9b:29:4f:5d:49:4e:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Validity
Not Before: Sep 10 11:00:41 2026 GMT
Not After : Sep 11 11:00:41 2026 GMT
Subject: CN=3220460f8c5449affc05814a91b93b706fc2f580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:c6:95:fd:aa:51:4a:1c:03:83:fa:68:b7:
8d:d1:c6:a1:cb:ad:6e:a1:29:e6:be:c5:b2:79:4f:
0b:cb:bd:11:02:4a:f0:27:f6:e6:6c:4b:c7:2a:cd:
db:03:ed:b3:34:4b:aa:43:9a:76:20:cc:59:2c:d1:
7e:8d:31:1b:2b:af:72:97:b3:05:0e:6f:e8:8c:6f:
d4:33:87:63:e0:ff:20:3a:6d:b3:b8:4d:8d:2b:1e:
ba:9e:8d:98:1b:57:46:35:88:0f:c9:e1:30:05:54:
8f:6a:09:02:15:22:f1:45:65:41:95:92:6e:b1:ed:
6d:ea:45:b8:87:d3:c6:8d:6e:e9:41:03:ec:f8:02:
a1:ee:92:b3:9d:a8:89:b8:56:e6:da:2d:ee:9d:09:
a0:06:e5:53:c8:2b:a3:de:eb:59:63:a7:10:cb:bb:
51:ba:ee:f0:e4:00:67:66:82:fc:cd:28:58:99:c2:
58:80:f0:bb:76:7b:ae:81:67:5a:ff:cb:79:f1:20:
87:04:b0:8c:a5:37:bd:ef:9c:3e:2c:1f:0e:63:29:
62:3e:37:47:f7:be:23:a0:8b:41:c5:5d:ef:5f:e6:
e9:ef:af:fd:5b:9a:42:26:1a:f8:cd:1d:a3:f4:16:
32:f9:42:9d:8e:fb:45:07:89:04:ca:bb:a2:60:3b:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:46:0F:8C:54:49:AF:FC:05:81:4A:91:B9:3B:70:6F:C2:F5:80
X509v3 Authority Key Identifier:
keyid:EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:d2:fb:18:7e:14:90:ee:40:48:14:b5:a2:b8:f3:b9:91:
83:df:80:6f:7d:17:75:a9:e5:83:a0:99:15:41:71:ea:cc:73:
6d:04:9c:9d:ca:76:50:d5:b0:4b:f2:d0:53:5d:8a:22:74:78:
9b:43:c0:2f:9b:fd:73:b1:f7:19:52:25:8a:0b:46:e1:55:3b:
ba:9f:46:3d:f5:28:a0:ee:ca:3c:16:b8:c0:a4:ca:8e:fc:1c:
91:32:c6:34:aa:cc:77:c7:17:f7:00:de:27:55:45:a1:e3:a2:
77:36:9a:9b:4b:9e:6d:6e:a5:b0:6c:60:f7:b5:2c:66:aa:1b:
be:bc:05:90:df:46:f5:e6:99:d9:e4:7c:de:40:2a:13:d7:9a:
5b:f5:ae:6b:0b:36:ca:4d:8e:0f:0a:6d:90:75:26:13:56:ce:
25:bb:53:ad:c6:ad:f0:75:0a:17:df:7b:a6:4c:73:2f:be:16:
21:00:93:c4:44:0a:f3:62:cc:6c:87:f5:71:9b:f8:e5:7e:0c:
87:94:54:eb:1c:99:30:23:e4:94:f1:67:91:5c:58:2a:88:64:
f0:5f:5c:d3:7b:43:2f:09:42:8a:5b:7e:d6:3a:6b:b9:c6:f9:
aa:da:e5:0a:a5:66:59:0b:e1:3a:f1:3e:74:41:83:ee:58:5a:
a1:c7:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:59 2026 by rpki-client