Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: fRgqUSP8Hlq6c7VJqTWH1tSUQUP3Uook8EOpqPUt4Z4=
Subject key identifier: 18:19:1C:8B:46:05:A6:5E:64:C5:31:C7:DF:73:F4:7B:84:AC:58:6C
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019EB5B2C004B62E052DC918FC0EC6E2F4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 0479
Signing time: Thu 11 Jun 2026 08:00:51 +0000
Manifest this update: Thu 11 Jun 2026 08:00:51 +0000
Manifest next update: Fri 12 Jun 2026 08:00:51 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: aa6CsmaXVRDp9nJI7UT9mrD6qkrgVt7FIbgMyiZDJ98=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:c0:04:b6:2e:05:2d:c9:18:fc:0e:c6:e2:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Jun 11 08:00:51 2026 GMT
Not After : Jun 12 08:00:51 2026 GMT
Subject: CN=18191c8b4605a65e64c531c7df73f47b84ac586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:96:78:2a:86:c0:df:dd:e8:79:6a:4d:60:
84:0f:ff:c3:14:31:3d:d7:bf:ee:b0:91:4d:28:22:
cf:e2:61:56:ad:6d:af:a7:ce:7a:29:cc:3f:a0:a6:
f8:31:34:cf:d5:c5:a3:c3:7a:8e:f0:44:fd:24:dc:
e8:a0:32:18:6c:48:93:36:5b:20:f9:fa:88:ce:66:
17:32:3a:b5:51:21:68:54:a1:a7:5b:6b:1a:cd:b8:
03:b6:ef:66:1e:f1:ba:16:9c:e5:cf:1a:f9:ef:a0:
57:cb:c6:40:32:75:ca:dd:b5:80:64:ac:36:a1:30:
bc:fa:05:f8:c9:99:88:76:2d:b8:86:ee:67:90:50:
8b:d1:25:a5:1b:1c:7e:23:35:1b:22:1f:5e:1b:f5:
7a:4f:04:cb:5d:53:a4:54:af:77:4f:55:f8:88:59:
75:8f:ad:62:de:ca:4f:dc:0f:db:d1:6c:b1:ad:93:
a0:27:8f:ab:f5:7f:18:97:f2:e3:28:95:8e:0e:79:
85:13:87:22:1c:b8:c5:61:c5:79:c6:b5:5b:84:2b:
7d:cd:e0:cc:ca:f3:ba:6d:9e:82:d8:48:43:4e:88:
62:b8:76:0e:5d:60:26:ed:01:b3:ae:61:e0:c1:41:
e3:6a:bd:a0:e0:3f:49:b3:ce:7b:82:00:5a:92:4e:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:1C:8B:46:05:A6:5E:64:C5:31:C7:DF:73:F4:7B:84:AC:58:6C
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:44:03:12:dd:88:03:34:d8:a4:8d:56:65:62:9e:d6:1f:79:
bb:c7:72:66:60:42:38:89:3a:a3:c4:3d:59:73:68:45:88:2e:
cd:bc:2c:69:b0:f2:a2:3c:33:bf:ba:3d:ae:39:52:fc:6e:82:
87:c7:84:f0:99:01:91:b7:1f:39:79:0d:c5:b1:51:52:19:6c:
21:d5:ae:64:fb:9a:e3:e9:5f:6a:ff:78:3b:b1:21:e9:da:11:
60:6b:6a:06:28:0e:e8:bd:2e:08:4d:97:ff:13:dd:b2:b9:0b:
db:fa:18:a0:f0:c9:a1:38:8f:31:42:c4:f8:bf:73:71:40:f2:
fb:93:8f:99:22:3e:f9:95:2e:7e:85:1c:5a:fb:d5:da:2b:9e:
9e:13:3b:bd:a9:c4:c5:86:ee:7b:af:e4:65:a0:28:fb:50:be:
c0:84:53:7a:89:43:64:24:3a:2f:12:72:72:44:83:7b:4f:ec:
00:92:75:2a:a8:99:d3:96:01:34:7b:1f:45:c7:5a:ae:b9:56:
da:7f:f4:42:ce:65:59:a8:83:6f:81:ba:cf:88:7d:63:d7:30:
be:29:5d:87:48:4c:d1:af:50:ac:4f:8f:8e:e4:d3:55:40:61:
8e:d5:55:78:b6:f2:4c:53:d7:1b:aa:54:57:59:fc:ec:ca:fb:
54:58:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:44 2026 by rpki-client