Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: HjvxewIoWq0jPC2SV5o6o0pdna7jEwjoXEGQI9ywwpY=
Subject key identifier: 4B:A4:58:70:8D:B3:BF:52:16:54:DA:72:27:58:81:F6:6C:C9:70:BC
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019D3865C813D5FAA5E3C96DECE4CB5A95E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0FF2
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: UvBwb+iyCpleCjIjM7dsYGe+ujMIiRs5XAiwBgjFe7M=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c8:13:d5:fa:a5:e3:c9:6d:ec:e4:cb:5a:95:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=4ba458708db3bf521654da72275881f66cc970bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:4f:c1:20:af:57:b7:40:40:c4:d0:68:4f:
44:7c:fe:9a:64:9f:7b:ed:97:4a:2a:77:2e:d3:d6:
bc:df:a4:3f:65:c3:f6:86:0f:87:ee:82:c3:1e:7f:
6b:b4:5b:9d:a2:c1:e9:0d:2e:06:47:85:09:c1:18:
1b:90:46:aa:95:da:d6:b6:a4:29:32:3f:cd:d3:56:
64:45:e2:22:a7:f2:5f:6b:62:db:84:d3:fe:e0:74:
bf:b1:b3:75:c1:7a:b5:17:6a:8d:23:96:4f:69:4b:
c8:12:4f:20:30:8e:16:c6:18:a7:98:27:29:6f:2b:
39:c4:fb:52:df:ec:c2:8f:26:1b:36:1f:92:6c:45:
89:c3:f7:af:df:0b:61:29:22:6c:c2:6b:06:51:37:
11:c4:bf:64:49:dc:e2:cf:e4:06:39:08:0d:63:3c:
f8:6e:4c:63:91:bc:7b:e5:f3:d4:55:5d:28:59:01:
54:c3:b2:09:73:93:24:cf:2a:49:b9:23:c4:83:0a:
e4:c4:30:44:40:33:28:5f:13:43:ca:0f:e2:da:7c:
39:b0:b8:b5:43:6c:cb:86:18:75:15:9d:74:51:2a:
91:b8:4c:c1:17:86:e3:25:03:6a:42:0d:8b:12:7a:
99:df:cb:05:dd:18:d9:08:5b:e8:c3:26:da:13:5b:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:58:70:8D:B3:BF:52:16:54:DA:72:27:58:81:F6:6C:C9:70:BC
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:de:85:68:b7:cb:af:0b:28:c9:03:36:16:be:bc:e7:ff:d2:
9b:68:28:2a:e9:29:51:80:a9:cc:d8:3c:82:a5:76:42:5d:fb:
4f:3d:59:1c:81:2a:02:49:d3:c5:17:fb:cf:35:53:52:96:63:
2d:9c:9f:ac:23:02:e0:89:41:91:20:0f:5e:eb:26:47:a4:0a:
f3:24:1e:5d:d3:0c:21:fd:7e:e2:9b:0a:66:f8:56:ca:57:45:
9d:ff:79:70:52:d3:4f:c6:5a:30:d4:c9:88:e2:fe:94:32:8b:
b1:83:5d:c3:04:d4:5c:c0:09:ba:41:e9:c3:98:47:81:5a:82:
34:df:37:c4:ef:4e:a2:32:05:68:a5:f3:97:df:ca:c9:fa:76:
f2:6b:ce:7b:bc:8f:28:3c:e6:32:cc:1c:3d:64:f8:92:32:dd:
d0:04:b0:d7:4f:d1:2e:e7:d0:b3:83:2f:d7:67:27:66:87:56:
42:37:81:8a:81:80:0f:b9:dd:58:a7:62:99:7a:4d:27:f4:58:
e6:91:10:90:f0:c7:7c:65:ad:d2:83:f8:4f:81:56:58:4f:2e:
1b:32:01:67:05:be:36:92:96:01:af:2f:01:d8:f2:13:11:3c:
c4:6a:37:14:22:c1:01:22:88:6d:42:a2:4e:a0:cb:69:1d:5b:
11:d5:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:05 2026 by rpki-client