Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
File: 67u0hOoIb1Hr64zyedAEttl8LOI.mft (raw, json)
Hash identifier: bZeAUX2LGDrFdS6rcxFx8DkuJTSC+u/CesMqBUHAvw0=
Subject key identifier: 5C:24:58:6C:CA:F8:D6:54:31:62:B3:9C:83:1B:DC:0D:3B:49:51:1C
Authority key identifier: EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
Certificate issuer: /CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Certificate serial: 01A0412A2C5C92BA173BB487ADA7F79BBC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:17 +0000
Manifest this update: Thu 27 Aug 2026 03:01:17 +0000
Manifest next update: Fri 28 Aug 2026 03:01:17 +0000
Files and hashes: 1: 67u0hOoIb1Hr64zyedAEttl8LOI.crl (hash: GCnXpAzU/0M+KvS3hbh5/96Kb5Pv3KWG+SMAnjnk4Fc=)
2: XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa (hash: Op7qdEKE+y8LVoqvvxQ0lrXSRlOdEFOdeV28bvi5uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:2c:5c:92:ba:17:3b:b4:87:ad:a7:f7:9b:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Validity
Not Before: Aug 27 03:01:17 2026 GMT
Not After : Aug 28 03:01:17 2026 GMT
Subject: CN=5c24586ccaf8d6543162b39c831bdc0d3b49511c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:2c:db:24:be:f4:ec:6a:d2:ff:9e:97:cb:
09:3c:9e:cf:25:e1:a9:13:6f:be:2a:86:0f:cb:cb:
58:05:26:45:a1:4c:27:d2:6e:39:25:a3:f1:bc:cd:
d5:a3:a5:9b:9e:0b:ce:6e:41:d3:b1:7f:f2:61:38:
b8:cb:3e:43:06:18:4f:7d:1e:92:7f:de:ad:ee:de:
7d:96:af:1a:05:d3:41:b9:f4:f1:af:1b:c0:d5:2c:
f7:19:76:74:92:44:4d:ac:72:6d:de:84:30:2d:a8:
76:cd:7d:03:a5:66:0b:3d:57:f1:28:e3:96:d6:39:
22:fd:41:85:15:29:47:66:57:8e:40:b5:de:f7:b5:
65:2c:f7:52:35:fb:7d:87:e0:e7:59:63:1d:0b:ee:
d0:37:30:b3:44:43:73:ee:c0:46:45:ca:0c:41:86:
b6:ef:bd:46:b2:b4:e5:ce:e4:5b:f5:1d:af:50:aa:
d0:fe:fd:05:f7:60:ce:4d:5c:a4:db:1b:7a:1b:92:
82:6c:a2:be:2a:a5:14:b1:9d:50:01:86:25:8d:52:
11:88:df:67:69:3f:6e:f4:ce:b8:56:a0:92:4d:d3:
52:47:82:bd:88:0c:3e:e6:41:28:e8:86:c7:4e:bc:
55:f3:f4:3b:f8:6a:cc:ca:b1:71:5c:3e:62:00:d8:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:58:6C:CA:F8:D6:54:31:62:B3:9C:83:1B:DC:0D:3B:49:51:1C
X509v3 Authority Key Identifier:
keyid:EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cc:ae:89:21:f5:ba:64:6b:57:36:31:37:84:78:41:1f:aa:
d1:52:84:c9:92:05:af:48:8a:99:e9:48:45:13:7e:02:d7:5b:
f1:87:c7:13:c3:55:5d:bf:f5:f1:f5:34:a0:df:d1:34:c1:10:
95:13:ad:f3:c1:13:89:d7:65:25:ee:f1:61:48:5b:2e:0f:66:
58:16:91:3c:4b:a5:b0:a9:7a:0b:90:ae:a8:2b:a6:da:81:86:
d9:c9:c2:ca:2e:c3:39:76:2a:49:b8:ce:e9:25:17:09:2b:b9:
15:fb:27:42:08:81:81:e2:95:0d:23:24:3c:26:c2:25:22:e4:
78:f2:bb:a4:aa:2b:e8:0d:d5:34:8c:36:76:22:77:03:30:d6:
f0:00:00:0a:6e:5b:03:1c:48:19:d1:42:9f:f2:5e:b9:2a:47:
99:fe:64:7c:60:07:df:ec:32:1d:e3:27:71:7e:46:e4:95:60:
03:f0:a1:4d:6d:b9:9e:56:58:89:dd:07:71:ae:a8:40:45:4f:
c9:38:d9:85:76:37:bc:6c:ff:ea:fc:ec:ea:75:ff:24:f8:a7:
ce:b4:e0:52:25:c9:ff:75:9d:ca:a0:af:f8:b3:ea:ad:fe:ec:
51:66:0b:0b:ce:3c:62:52:d6:ca:6f:29:2a:b9:18:b9:c6:42:
5c:55:5d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKixckroXO7SHraf3m7wDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmJiNDg0ZWEwODZmNTFlYmViOGNmMjc5ZDAwNGI2ZDk3
YzJjZTIwHhcNMjYwODI3MDMwMTE3WhcNMjYwODI4MDMwMTE3WjAzMTEwLwYDVQQD
Eyg1YzI0NTg2Y2NhZjhkNjU0MzE2MmIzOWM4MzFiZGMwZDNiNDk1MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzos2yS+9Oxq0v+el8sJPJ7PJeGp
E2++KoYPy8tYBSZFoUwn0m45JaPxvM3Vo6WbngvObkHTsX/yYTi4yz5DBhhPfR6S
f96t7t59lq8aBdNBufTxrxvA1Sz3GXZ0kkRNrHJt3oQwLah2zX0DpWYLPVfxKOOW
1jki/UGFFSlHZleOQLXe97VlLPdSNft9h+DnWWMdC+7QNzCzRENz7sBGRcoMQYa2
771GsrTlzuRb9R2vUKrQ/v0F92DOTVyk2xt6G5KCbKK+KqUUsZ1QAYYljVIRiN9n
aT9u9M64VqCSTdNSR4K9iAw+5kEo6IbHTrxV8/Q7+GrMyrFxXD5iANj09wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwkWGzK+NZUMWKznIMb3A07SVEcMB8GA1UdIwQY
MBaAFOu7tITqCG9R6+uM8nnQBLbZfCziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd1MGhPb0liMUhyNjR6eWVkQUV0dGw4TE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMt
NzcxN2ViMzE5MTYwLzEvNjd1MGhPb0liMUhyNjR6eWVkQUV0dGw4TE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMtNzcxN2ViMzE5MTYw
LzEvNjd1MGhPb0liMUhyNjR6eWVkQUV0dGw4TE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8yuiSH1
umRrVzYxN4R4QR+q0VKEyZIFr0iKmelIRRN+Atdb8YfHE8NVXb/18fU0oN/RNMEQ
lROt88ETiddlJe7xYUhbLg9mWBaRPEulsKl6C5CuqCum2oGG2cnCyi7DOXYqSbjO
6SUXCSu5FfsnQgiBgeKVDSMkPCbCJSLkePK7pKor6A3VNIw2diJ3AzDW8AAACm5b
AxxIGdFCn/JeuSpHmf5kfGAH3+wyHeMncX5G5JVgA/ChTW25nlZYid0Hca6oQEVP
yTjZhXY3vGz/6vzs6nX/JPinzrTgUiXJ/3WdyqCv+LPqrf7sUWYLC848YlLWym8p
KrkYucZCXFVdLw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:47 2026 by rpki-client