Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: F/SfC7/xf1PNhsSTkA9opGKHEeTE/PvWMnWy6LXhPKs=
Subject key identifier: 83:4C:B9:24:21:DE:84:7E:AA:B2:5A:D5:AE:6A:A0:5B:91:94:69:81
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019E2211FDC87FB9AD07A6869A7E816C9299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 106B
Signing time: Wed 13 May 2026 16:01:04 +0000
Manifest this update: Wed 13 May 2026 16:01:04 +0000
Manifest next update: Thu 14 May 2026 16:01:04 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: qBBL/hphSf5nUDAp+Bz7C6HhSV4w8WAyKkmJx8Oskzo=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:11:fd:c8:7f:b9:ad:07:a6:86:9a:7e:81:6c:92:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: May 13 16:01:04 2026 GMT
Not After : May 14 16:01:04 2026 GMT
Subject: CN=834cb92421de847eaab25ad5ae6aa05b91946981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:4c:84:01:29:2f:17:43:0a:45:a2:8a:47:
fc:80:9a:e2:6e:96:95:ff:c5:92:5f:68:4f:cd:84:
cb:6b:15:46:27:39:24:4a:d9:7e:26:18:b5:1a:6d:
aa:e3:59:54:61:41:d4:e3:99:86:5a:40:0f:0b:25:
d9:ff:91:b5:b6:14:1d:06:45:60:e2:6c:f7:ee:d5:
38:1f:33:6e:55:d0:4b:db:f9:98:30:60:cc:be:96:
77:5e:84:01:ed:43:d5:6e:fe:05:c4:a7:1b:88:1e:
ab:78:1d:66:8f:83:5b:12:85:56:cf:70:e7:e5:38:
13:b0:d0:c8:9a:d0:25:4a:1f:b4:d2:7f:37:ea:dd:
89:cf:39:6f:8c:90:2b:ae:98:b5:8c:ee:33:e6:f2:
d9:cc:3f:e1:e0:e8:18:44:e1:39:ef:de:14:87:c0:
16:a7:a3:68:dc:2d:71:49:5b:88:48:3f:02:b0:be:
b4:69:38:28:2d:fb:b5:8a:2c:0a:f8:0a:f1:6f:36:
66:7a:45:c0:f0:b3:93:1f:c6:db:b8:a0:63:c6:ce:
6d:d7:53:0f:cc:90:26:d9:6b:b8:ca:4c:c5:8d:a5:
84:8b:e2:bb:81:53:c5:21:ff:3a:08:cf:d8:68:b6:
aa:36:ee:4c:6d:6b:04:dd:49:44:12:c5:7e:98:c6:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:B9:24:21:DE:84:7E:AA:B2:5A:D5:AE:6A:A0:5B:91:94:69:81
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:07:c8:5b:d3:a2:6b:36:f5:15:6a:77:87:23:70:33:32:
43:f7:d3:f1:a7:07:28:70:b3:50:46:50:48:ad:29:e2:95:28:
71:d7:02:5a:77:02:fb:c1:10:38:a6:5f:1c:22:4f:a2:fd:4d:
8e:60:77:f1:bf:23:eb:8b:1a:d9:25:bd:99:92:2e:26:8c:a9:
6f:3e:e6:18:08:72:f9:79:68:bd:48:74:8c:95:9b:84:90:40:
8a:c0:d9:f6:83:2b:c5:06:8f:3a:84:6b:b8:44:fe:39:95:a2:
02:ad:9e:36:88:76:99:39:db:96:21:3f:16:e7:73:95:08:4e:
3f:7c:7f:ac:99:97:eb:5f:e6:9e:ae:eb:1c:24:89:18:ac:b9:
52:67:9a:0e:99:ba:a3:72:18:d6:83:4f:2c:c4:b3:34:2b:40:
17:1b:1b:9d:de:de:35:41:06:63:6a:0d:2e:b6:f4:df:aa:ec:
33:85:35:a4:f2:2b:f3:bc:a3:aa:d7:8b:16:04:ad:57:d2:01:
14:f2:42:6f:f0:f1:d5:05:1e:0f:1f:e7:6b:06:df:56:ed:f9:
ce:4c:17:41:00:84:1a:49:d9:dd:aa:2e:18:57:c8:17:cb:4f:
ba:70:2b:dd:63:90:22:f9:2e:7b:c3:4e:13:de:52:d0:6c:e6:
b0:0a:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:52:57 2026 by rpki-client