Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier: 3bjFrP2PjazTSzix2/P+XdMYBON4qyuEZHidON2RhLs=
Subject key identifier: CF:BD:99:63:60:07:F0:AE:28:3B:57:F4:38:BC:7D:BA:74:E1:B7:F1
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 019D389C4F7DA898638D307CF70F9ED4A199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number: 0418
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: 8lB/sTNF2uSQYBcvCh70KA7EW3UYVsVglkaMDVp6oiQ=)
2: TPhQNuZoNwZocKhp9yvEZfVXmdE.roa (hash: h7CAPAhfGs1ZFrBPIhrStmJuP7p3xigxJ/dzGfBrlvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4f:7d:a8:98:63:8d:30:7c:f7:0f:9e:d4:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=cfbd99636007f0ae283b57f438bc7dba74e1b7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:66:35:93:a5:27:a7:fc:6d:fd:4c:40:30:
b8:e3:97:91:2b:96:fc:82:a0:49:5c:65:47:d6:81:
1a:f9:9f:10:70:c6:4e:f0:ba:09:ed:be:34:93:e5:
40:72:33:74:5d:92:fd:bb:0d:fd:46:eb:45:08:c3:
3e:bd:e8:7f:72:f5:ab:07:2c:cb:65:be:ad:73:ec:
71:98:b6:88:13:35:7b:fc:0d:f4:30:53:c0:93:77:
1c:52:07:ab:39:70:25:87:e5:24:5f:34:c1:64:af:
74:40:d4:cc:8d:93:d9:76:1e:2f:c7:09:ef:12:a4:
e6:86:6f:d1:93:8c:16:43:09:2d:92:a6:d7:a3:fd:
ec:d7:7b:52:f4:b6:22:e8:76:e3:89:36:f2:4d:a0:
f9:98:24:86:52:0d:66:be:44:63:60:b7:44:95:c3:
ab:ea:0e:f7:cd:3a:9c:19:c0:9c:f1:2c:7c:1e:f7:
10:7b:c7:70:d8:7c:8f:ce:9e:03:89:2c:2b:04:d0:
3e:ad:00:df:8b:3f:0d:e8:39:21:9f:7e:40:58:79:
7b:bf:8a:80:48:5a:da:75:58:da:b7:ff:06:ff:f1:
e3:e6:cf:43:2a:49:ab:d8:40:c4:66:e6:0c:8e:f1:
5f:bb:3c:18:9f:9a:4f:1f:04:e5:fd:bc:6f:30:61:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:99:63:60:07:F0:AE:28:3B:57:F4:38:BC:7D:BA:74:E1:B7:F1
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:22:4d:4e:1a:f8:5f:c5:bf:12:c1:08:f5:22:b3:0a:1f:7f:
04:2a:26:ec:5e:f8:67:a7:4a:72:e8:3a:b2:17:70:86:8b:47:
82:5b:25:24:11:56:4a:22:0b:69:0f:18:d2:b9:72:ef:3a:81:
ef:ba:ef:91:bc:bb:a2:3b:78:b7:0e:99:2a:ac:dd:00:1f:26:
80:be:ca:4f:ac:40:0a:87:4b:dd:c8:5b:33:f2:be:00:cd:07:
d2:2e:5a:73:a5:06:4a:20:09:65:31:24:ba:99:79:26:d5:26:
73:81:e4:d4:47:9d:6e:e3:bd:2b:f6:61:4b:50:ae:0c:ef:8b:
71:c7:2b:24:c3:c0:6d:36:7d:21:e5:d1:10:04:b7:49:ad:f9:
8e:79:8b:42:75:3f:b7:e8:51:93:a2:e0:57:a9:0e:df:10:86:
6b:02:08:4d:98:7f:a4:7b:cd:69:35:3b:5a:19:10:f5:6f:a0:
3d:98:8a:e5:94:93:d8:d5:35:df:ad:b5:b9:e3:92:33:87:7d:
5f:f7:d9:cb:9b:09:1a:27:80:5c:99:67:31:00:1a:ef:f9:70:
93:5c:1c:9a:cc:6d:43:1f:72:4f:78:0b:72:f5:2f:b1:c8:9c:
d4:86:80:40:35:fe:d9:45:46:21:ed:7e:34:fc:f7:5c:47:3e:
25:a7:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:27 2026 by rpki-client