Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: wLiTd2G7oqHRZYw/TN/HVX67PBGhWB/F4xCxUMxuboo=
Subject key identifier: 0A:3D:A0:E6:C7:8A:8D:E3:CD:92:AF:BE:A5:FD:42:59:84:E0:2E:BF
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 01A132590E7BB358E8F0A635558EB443FA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 17F0
Signing time: Mon 12 Oct 2026 23:00:59 +0000
Manifest this update: Mon 12 Oct 2026 23:00:59 +0000
Manifest next update: Tue 13 Oct 2026 23:00:59 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: yEF04TlVIphKjb/Xh2si/FtEGMWVd7oSl6Gph8C+YjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:0e:7b:b3:58:e8:f0:a6:35:55:8e:b4:43:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Oct 12 23:00:59 2026 GMT
Not After : Oct 13 23:00:59 2026 GMT
Subject: CN=0a3da0e6c78a8de3cd92afbea5fd425984e02ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:a5:08:99:1e:33:47:5b:d1:bb:68:3a:10:
32:51:d5:e7:87:f5:fd:33:e2:c2:81:e8:f2:73:44:
ec:32:1c:de:f0:7c:a3:e0:f2:00:93:43:34:62:1a:
d1:13:af:0f:59:18:4f:fd:6b:59:c5:52:36:f7:56:
00:48:f9:4f:c5:2a:30:33:65:ae:ed:a7:63:6a:14:
70:8b:7d:6b:c6:de:cb:1a:b9:eb:bd:9a:4d:62:e6:
83:1f:7b:35:b9:79:4d:a5:a0:a1:8d:e4:cb:96:ab:
ac:df:03:c1:63:f4:b7:3d:8c:7e:0f:99:ea:ae:e7:
a5:ea:8b:8a:70:1a:89:a3:b9:b7:78:a5:fd:30:e4:
b1:97:7b:12:8f:02:25:d9:76:cd:3a:30:31:1e:6d:
01:0a:cb:71:08:7c:2f:2f:f9:a5:55:16:0c:b9:df:
41:69:03:6c:ef:8a:4a:8d:bf:21:f3:87:b7:c3:54:
0b:8f:e6:0f:af:a2:51:d1:66:f1:40:10:15:60:8e:
71:8f:bf:2a:34:56:5f:d5:5e:e0:a3:d2:8b:30:75:
ce:ab:51:3c:f6:6e:c1:f3:4c:1b:d1:ca:26:a5:e9:
35:ad:b9:4f:92:f9:dd:fa:25:33:e7:f9:9a:46:b2:
a4:0c:13:32:60:2a:c4:5f:39:a0:d4:ba:98:6f:2d:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3D:A0:E6:C7:8A:8D:E3:CD:92:AF:BE:A5:FD:42:59:84:E0:2E:BF
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c5:e2:bb:f0:8d:ad:f7:74:69:8e:d8:71:5d:14:eb:4c:04:
12:06:fd:e6:ce:4a:5a:39:13:62:bf:6f:35:0c:cb:6c:27:88:
55:33:17:49:8f:ec:69:6a:59:86:fb:b0:2b:0a:18:31:44:b2:
48:c7:59:1e:3a:27:8e:5e:9b:5f:1a:77:4a:df:a3:3a:22:0e:
57:ac:5c:68:97:df:c7:85:ce:e8:d5:f8:e4:73:c7:e5:2a:fb:
49:a8:38:28:45:73:18:fd:13:8b:d8:17:9e:49:c6:7c:87:17:
93:08:94:e3:2f:1e:48:af:a3:27:c4:ef:30:e8:d3:54:97:32:
9f:3e:c9:3f:d3:dd:2d:94:61:8d:1a:b1:78:3f:4b:cf:69:d4:
a7:71:e9:90:44:d1:8e:d7:45:cf:b4:63:9a:b3:b2:1a:04:dc:
f8:c1:c1:31:56:22:b7:e1:e7:b7:c0:0a:ac:4e:15:ba:ca:6a:
79:06:ad:e6:ea:ad:66:11:d1:f0:bb:ee:c9:4c:52:61:0f:15:
46:a0:c6:59:b2:fd:45:b7:3a:19:09:15:75:6b:46:d2:37:4a:
19:7d:aa:43:82:4f:c1:7a:3e:01:02:4e:4d:da:0a:45:74:09:
3a:28:c2:a5:92:04:10:44:4a:0f:e6:ed:5c:25:08:26:3c:09:
c4:45:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:14:07 2026 by rpki-client