Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: m53r3mfPZTn6Loiwr2y47h3sIHTHDG3xaZwLnYKo96g=
Subject key identifier: E1:25:49:C9:AC:7E:3E:C1:10:B5:DC:AF:D4:07:94:3C:89:BF:95:76
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019F9F5F3107B5C7D2F287E36D6C50B614BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 04F2
Signing time: Sun 26 Jul 2026 17:00:43 +0000
Manifest this update: Sun 26 Jul 2026 17:00:43 +0000
Manifest next update: Mon 27 Jul 2026 17:00:43 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: OCISNM3/SE/W0i7kZ5ZIzZJkCCwr7fitQpsKsAn/n/Y=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:31:07:b5:c7:d2:f2:87:e3:6d:6c:50:b6:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Jul 26 17:00:43 2026 GMT
Not After : Jul 27 17:00:43 2026 GMT
Subject: CN=e12549c9ac7e3ec110b5dcafd407943c89bf9576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:5b:48:5f:e9:2b:9b:5e:2e:c0:21:fd:cf:
db:6d:90:1c:5f:1e:f4:31:9b:c4:88:05:39:31:73:
83:fb:ba:ca:48:8d:b2:df:4e:60:5c:74:ae:74:9e:
72:c7:c1:90:43:d6:a1:11:1d:51:c9:c0:3b:47:97:
fc:5f:cc:90:fc:f9:e1:b9:6e:08:6c:7b:1b:d1:43:
5e:02:44:41:d6:33:38:ee:b7:36:db:8b:72:c8:50:
f1:b2:3a:eb:03:56:4c:12:2e:f4:77:0d:df:10:54:
06:8b:7f:3f:2b:c7:78:51:84:84:a7:65:cc:41:5b:
67:f6:1e:2c:b4:64:d7:1b:91:db:62:2a:78:3e:fe:
50:0d:33:e6:08:d7:69:85:fa:60:9c:d0:eb:21:98:
74:c5:79:d2:6a:4d:47:56:b7:5d:58:04:3c:85:c4:
4a:57:8e:aa:1a:9f:d1:38:d6:8c:de:e0:8c:ef:79:
51:6d:7e:7d:ea:2f:e4:01:b2:b3:d6:56:7c:01:1b:
95:2e:b8:c4:d3:1f:4b:fc:55:cc:28:80:2d:e9:05:
91:48:19:c1:7d:89:c6:6e:59:17:91:10:b6:35:83:
71:fe:26:40:58:fa:ca:20:2a:05:65:d3:f2:54:39:
cd:df:ca:f6:d5:bc:60:43:51:cf:44:63:d8:1a:97:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:25:49:C9:AC:7E:3E:C1:10:B5:DC:AF:D4:07:94:3C:89:BF:95:76
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:e6:dc:57:e9:2b:4e:ff:ff:b3:8d:e6:f1:81:25:ff:53:
19:99:bf:f9:1f:e0:7f:b8:b0:e4:52:64:57:09:7a:76:b8:5c:
28:17:83:23:37:40:a0:75:39:3c:00:a0:29:29:62:a7:c9:96:
9e:45:b6:8c:11:21:2b:8b:fe:73:db:a4:ae:04:b7:42:01:34:
ec:e0:fb:37:d6:26:99:f2:27:a5:14:53:3f:f3:a2:9d:b1:cc:
c6:ac:71:69:2f:cd:f0:1a:b6:dd:ba:b9:87:a3:bb:1e:01:81:
c2:c8:46:a5:39:a9:51:0f:ef:ff:7a:63:bb:b7:8c:ec:22:be:
75:b1:bb:be:0c:c9:93:11:bb:11:66:2f:9c:7d:34:eb:57:8a:
4d:8b:13:65:b5:57:7f:d8:a2:65:f5:f5:b9:03:fd:84:3b:c2:
cd:71:4e:88:1b:bc:1b:08:38:c0:af:f0:38:38:91:9c:ea:93:
07:04:6c:66:23:04:70:4e:32:69:66:58:1a:5d:19:81:d3:5f:
e4:36:ea:60:a3:c9:bc:fc:35:1e:3a:df:07:56:8d:84:e7:1c:
09:ec:7c:7c:af:31:5a:62:25:8b:e4:35:ae:34:32:db:1c:c3:
01:42:0c:57:21:b0:f1:2d:c6:b9:c8:62:fb:91:d1:29:24:4f:
7c:43:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:10 2026 by rpki-client