Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: ClU5BU+0/GBj1BWNVpDIBmVf4XTakGDtwWEptUso+0M=
Subject key identifier: B2:A8:27:A4:7F:18:D6:D0:BD:B1:77:4B:B5:2E:26:21:E0:14:C7:11
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 01A17C5FE93159F2566510D33F0AC095F596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 05E9
Signing time: Tue 27 Oct 2026 08:00:22 +0000
Manifest this update: Tue 27 Oct 2026 08:00:22 +0000
Manifest next update: Wed 28 Oct 2026 08:00:22 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: r91qhlVwJ+8xpA6wdU+WD53Ibu9iYodcBrlxsI2VA8w=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:e9:31:59:f2:56:65:10:d3:3f:0a:c0:95:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Oct 27 08:00:22 2026 GMT
Not After : Oct 28 08:00:22 2026 GMT
Subject: CN=b2a827a47f18d6d0bdb1774bb52e2621e014c711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:34:0a:3a:8c:d4:eb:f8:91:7c:1a:c8:20:
9f:08:72:a1:10:87:29:2a:df:a1:03:a3:e0:90:bc:
73:8e:31:e0:65:14:25:a9:d0:20:79:4e:af:7b:20:
cf:59:ba:77:0c:d6:0c:69:4a:ac:ec:a0:cc:5f:0c:
e0:e2:4c:ee:95:c5:1f:e8:ec:7c:65:68:8f:f2:11:
57:8c:41:19:0a:82:00:46:16:e6:37:fe:27:c8:50:
2b:d9:db:13:50:ad:39:8f:25:78:1c:10:b8:44:4b:
e8:89:d7:b9:f2:5d:ce:30:05:21:f8:c9:65:f1:78:
5d:fc:d3:98:e8:da:c5:1f:e8:2f:58:98:77:6c:2b:
f2:8f:b6:c2:bb:c7:1b:7a:ba:86:e6:c8:9f:d7:d0:
1e:52:87:43:d9:60:c7:3b:52:41:4d:cd:df:90:7e:
2b:8c:3f:be:50:fa:dc:1f:46:88:7f:13:35:2c:fb:
fe:b7:d3:91:4c:6c:1f:c2:6b:fa:65:d9:ec:ce:0d:
a5:a1:4b:20:f1:db:c7:8c:0d:b7:dc:0b:0a:19:22:
a5:4d:01:73:51:a8:ee:f9:fd:d1:eb:6f:c6:15:bd:
8b:b9:34:07:46:11:03:3c:b1:a9:ed:ef:fa:4e:9d:
05:46:99:07:69:d7:18:af:71:80:50:e8:2e:c6:4b:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:27:A4:7F:18:D6:D0:BD:B1:77:4B:B5:2E:26:21:E0:14:C7:11
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9c:6e:3b:60:bd:a9:bf:8a:64:da:21:b6:02:21:1a:f4:88:
db:bd:db:1c:69:f0:6a:94:e7:f0:67:42:b2:fb:92:dd:f2:5d:
ce:3f:fd:a6:61:52:b6:5a:fd:c2:9e:e7:44:a6:14:2f:ef:ca:
e1:9d:e9:33:79:fe:69:aa:de:34:78:f6:4f:43:9e:2c:60:9a:
a4:96:26:a9:fe:1a:b5:8d:c1:ef:30:39:66:c2:9c:51:bb:90:
fa:e8:ad:a9:e1:5f:d6:a9:3a:49:d9:a6:41:38:16:26:59:33:
4b:25:61:ec:89:ee:ca:d4:68:05:e8:2f:ea:df:b1:c3:fb:be:
9a:73:5a:af:93:68:4c:bb:03:01:fe:74:86:82:6a:17:78:ac:
a0:af:55:ca:3e:32:e1:af:32:47:e0:b6:b0:06:97:a2:60:24:
35:dd:2f:b6:20:b3:da:11:ab:e7:fa:6f:9d:4a:c4:ac:d8:2a:
7d:0a:47:73:35:8c:1c:ab:10:c2:56:cb:12:5b:9c:36:49:87:
cd:61:b7:b2:66:5e:5f:5d:2e:fa:15:11:e7:8c:43:3c:76:62:
8c:d7:63:36:43:c2:f0:9f:2f:a9:b4:bc:6b:c2:02:fe:f3:6a:
09:10:f9:86:da:a3:92:c4:79:45:d4:cd:7e:02:00:67:9f:3e:
4a:6f:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:02 2026 by rpki-client