Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: IToNJ6vctFuwSxvkqeVubDFo81x1KiKp30gLc/ld1mc=
Subject key identifier: 4A:85:92:90:B9:23:E8:B1:96:E0:43:27:6E:9B:9E:9C:46:CB:D6:4E
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019F194338CA7F76C5B2B3F5CDB397CDEEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 10EB
Signing time: Tue 30 Jun 2026 16:01:03 +0000
Manifest this update: Tue 30 Jun 2026 16:01:03 +0000
Manifest next update: Wed 01 Jul 2026 16:01:03 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: I6kRr9+V9cNO+L2nwGbXu6rSEkyXqR8fM3OqcEAVEIU=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:38:ca:7f:76:c5:b2:b3:f5:cd:b3:97:cd:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jun 30 16:01:03 2026 GMT
Not After : Jul 1 16:01:03 2026 GMT
Subject: CN=4a859290b923e8b196e043276e9b9e9c46cbd64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:4c:c1:05:4b:24:9e:f3:10:82:9c:f5:c3:
19:8f:ba:26:22:12:f7:2a:64:13:a4:33:3d:14:7e:
e7:2a:48:67:87:86:98:89:fc:4c:53:65:ad:cb:0c:
03:1d:d3:78:0f:1e:3a:f6:33:88:11:be:1c:2c:4c:
15:79:f4:33:68:e6:b8:e0:72:78:39:eb:b0:8a:af:
ab:35:58:c0:83:0d:3f:b8:cc:3b:c8:57:dd:d7:8a:
a9:8c:9e:23:88:a6:46:ff:39:e4:ae:8f:48:71:14:
79:aa:5a:9e:86:9f:b1:d3:44:2f:5f:6f:e7:d7:2b:
f3:9c:9f:5c:cb:eb:70:cc:9a:04:b4:6b:18:45:6d:
eb:a8:26:6a:17:fb:03:6c:0c:c6:89:e6:26:8c:be:
ee:85:01:b3:2f:c6:dc:b5:02:0e:3c:4f:9b:d5:02:
ec:52:81:02:e0:d5:26:d1:e2:ea:3a:13:6c:f3:9f:
b9:a8:d0:6e:50:cc:d1:62:03:ee:9e:69:d0:47:8a:
90:fa:2b:ac:df:f0:83:30:67:6f:88:c1:a4:16:01:
56:4a:ce:57:62:0d:21:93:1c:9f:6d:77:d5:a2:a9:
13:5b:bf:08:03:f6:d9:37:fe:a8:6a:27:68:65:3d:
fa:7a:99:e4:40:9b:dc:6c:09:03:29:88:5c:56:0e:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:85:92:90:B9:23:E8:B1:96:E0:43:27:6E:9B:9E:9C:46:CB:D6:4E
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:39:56:dd:bb:c8:69:07:b9:6b:18:6e:31:bf:a4:bc:b7:48:
cc:ea:8b:57:f5:7d:83:ac:73:4b:de:0d:9f:93:0e:f2:f4:76:
3e:0f:6d:75:8e:d9:27:9b:83:b5:54:fe:b0:26:f1:d5:30:2a:
0e:18:32:bf:ee:96:52:9a:e2:58:66:77:03:ab:04:b8:04:74:
bd:45:64:48:6b:5e:32:8a:6b:bf:ef:ac:37:80:b8:ac:8e:40:
6b:a1:7a:94:09:9a:45:6c:39:e8:38:2e:ed:28:42:f8:0f:aa:
c6:92:bd:e4:b2:87:0f:f0:f1:02:5f:05:d0:e9:3d:62:11:26:
66:0f:d2:b6:e4:97:c5:40:86:fc:38:df:e0:6f:64:4a:cf:75:
03:e7:dd:aa:6e:ca:b8:9b:26:12:ca:8b:a1:12:43:95:09:1d:
61:60:09:f7:4d:1a:0d:9d:d8:fe:79:b3:74:b3:7b:88:fb:49:
50:2b:b1:81:e1:31:bc:a8:87:0f:1d:fc:ed:54:6a:ee:9f:78:
44:0b:d4:bd:d3:e6:f4:06:a9:80:72:50:bd:7e:cf:61:9c:88:
71:78:f3:0c:25:a1:a8:26:40:e0:86:fe:72:cc:76:28:08:10:
59:fa:62:bf:80:74:6b:3a:da:77:b9:37:1f:b4:00:b3:89:89:
4b:2f:32:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQzjKf3bFsrP1zbOXze7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0
MWExNmEwHhcNMjYwNjMwMTYwMTAzWhcNMjYwNzAxMTYwMTAzWjAzMTEwLwYDVQQD
Eyg0YTg1OTI5MGI5MjNlOGIxOTZlMDQzMjc2ZTliOWU5YzQ2Y2JkNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLRMwQVLJJ7zEIKc9cMZj7omIhL3
KmQTpDM9FH7nKkhnh4aYifxMU2WtywwDHdN4Dx469jOIEb4cLEwVefQzaOa44HJ4
Oeuwiq+rNVjAgw0/uMw7yFfd14qpjJ4jiKZG/znkro9IcRR5qlqehp+x00QvX2/n
1yvznJ9cy+twzJoEtGsYRW3rqCZqF/sDbAzGieYmjL7uhQGzL8bctQIOPE+b1QLs
UoEC4NUm0eLqOhNs85+5qNBuUMzRYgPunmnQR4qQ+ius3/CDMGdviMGkFgFWSs5X
Yg0hkxyfbXfVoqkTW78IA/bZN/6oaidoZT36epnkQJvcbAkDKYhcVg7gdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqFkpC5I+ixluBDJ26bnpxGy9ZOMB8GA1UdIwQY
MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt
MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk
LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjlW3bvI
aQe5axhuMb+kvLdIzOqLV/V9g6xzS94Nn5MO8vR2Pg9tdY7ZJ5uDtVT+sCbx1TAq
Dhgyv+6WUpriWGZ3A6sEuAR0vUVkSGteMoprv++sN4C4rI5Aa6F6lAmaRWw56Dgu
7ShC+A+qxpK95LKHD/DxAl8F0Ok9YhEmZg/StuSXxUCG/Djf4G9kSs91A+fdqm7K
uJsmEsqLoRJDlQkdYWAJ900aDZ3Y/nmzdLN7iPtJUCuxgeExvKiHDx387VRq7p94
RAvUvdPm9AapgHJQvX7PYZyIcXjzDCWhqCZA4Ib+csx2KAgQWfpiv4B0azrad7k3
H7QAs4mJSy8ydQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:36 2026 by rpki-client