Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: uH1Ro6IS0JciqruoZP3lgWK31d3gnrszA31aFlICqd4=
Subject key identifier: 79:4E:56:6E:9B:54:C2:A5:FE:46:93:9F:AE:0E:CF:CD:DD:2A:F4:1B
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019D375216C923A50321E73950A4BB59D27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 03B3
Signing time: Sun 29 Mar 2026 02:00:19 +0000
Manifest this update: Sun 29 Mar 2026 02:00:19 +0000
Manifest next update: Mon 30 Mar 2026 02:00:19 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: nxvsYIGquSHs2mZoJk+QvLjsxf7sGjohRu9DkpW/yp0=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:16:c9:23:a5:03:21:e7:39:50:a4:bb:59:d2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Mar 29 02:00:19 2026 GMT
Not After : Mar 30 02:00:19 2026 GMT
Subject: CN=794e566e9b54c2a5fe46939fae0ecfcddd2af41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:dd:e2:bc:0d:60:97:3a:c9:96:52:ce:c2:
59:07:d0:84:ae:70:30:f7:90:e1:5b:6d:d4:bd:df:
03:1f:a7:d2:e5:1f:c2:d1:b6:16:53:f1:bf:9f:68:
ed:5f:a0:18:3c:9e:7e:dd:00:52:e4:2c:5b:f5:a6:
02:d3:95:21:c7:98:02:b7:cd:eb:7b:e5:2a:21:01:
81:50:bf:b4:34:16:f4:d7:8f:f0:63:f0:fe:e2:5d:
be:89:01:07:3f:41:7a:34:34:22:cb:e5:bc:6e:d4:
ab:50:35:f4:a3:52:43:d6:37:77:81:17:c7:2d:c4:
58:75:35:ea:7f:a5:57:43:18:de:6a:33:59:be:fc:
42:6f:08:47:9b:05:9e:f6:0d:39:bc:97:90:a7:c9:
4b:ed:44:26:a7:ff:e3:f8:26:2d:e8:c5:be:22:e1:
48:bc:ff:63:ef:d2:ea:6e:a6:54:a7:0e:e7:65:c9:
50:51:27:52:8e:49:8f:e6:3f:72:7c:25:97:a8:10:
f7:5c:42:c6:8d:9b:32:0b:a8:69:04:5a:a2:35:07:
9b:85:fc:21:cd:5a:43:72:ad:8b:a7:d4:cb:a5:df:
e3:43:81:ad:96:8c:ce:4e:e1:13:04:29:d1:60:83:
86:11:8d:42:df:3b:70:d7:b8:42:76:30:64:8e:ac:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:56:6E:9B:54:C2:A5:FE:46:93:9F:AE:0E:CF:CD:DD:2A:F4:1B
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:0f:62:1a:e2:f6:55:48:ee:da:04:f0:f2:76:3f:e6:2a:
a2:b6:91:f1:1b:ec:b4:87:87:c0:de:34:c1:5e:8b:c9:d0:60:
6b:09:85:22:f1:f1:0f:38:be:85:74:38:c1:2e:df:32:ef:3f:
6f:c6:c6:71:f8:bf:48:46:05:3c:28:65:eb:dd:5a:29:02:83:
e1:61:53:05:cb:f5:22:e5:0a:0f:89:7a:21:5d:19:dc:c4:f0:
9a:29:30:39:f9:b9:a0:e9:c5:7a:77:2b:48:ba:64:11:31:c1:
06:7c:99:7a:51:9b:21:7b:e9:a8:7c:4e:83:cf:12:d4:61:78:
ec:7a:e0:04:26:a5:a6:b6:da:98:f5:69:e1:e0:55:c3:40:a8:
38:7e:c6:9a:56:a7:4b:9f:db:f3:db:70:69:ec:b6:a1:56:08:
d1:46:c3:c3:06:61:c6:67:2f:3a:25:c6:7a:e0:f3:55:27:b3:
db:60:5f:95:83:e7:98:68:67:15:ea:22:93:5e:4a:12:f4:d4:
a5:19:42:e5:69:1b:34:e2:61:d0:e4:c2:54:2d:ef:c6:7d:4e:
04:ac:f7:c7:08:ae:ec:9b:8e:aa:25:97:aa:d9:e0:ad:f3:21:
31:d5:f7:e6:84:02:79:aa:af:83:aa:bd:03:be:32:bb:8d:7f:
f7:8d:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client