Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: rWl0exC8VEXnTMD3pKvAklrfOqwAmG3uqAhi21vnmmg=
Subject key identifier: 90:B9:25:04:DA:4C:EA:55:44:1F:50:90:7E:FF:81:77:16:6C:97:77
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 01A0890B86EF6CE6401AC8CC4F736F3E7B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 056B
Signing time: Thu 10 Sep 2026 02:00:28 +0000
Manifest this update: Thu 10 Sep 2026 02:00:28 +0000
Manifest next update: Fri 11 Sep 2026 02:00:28 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: mNJp041GH4irZZsCcxi9714gmN4beODxq5HHYcF1DjY=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:86:ef:6c:e6:40:1a:c8:cc:4f:73:6f:3e:7b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Sep 10 02:00:28 2026 GMT
Not After : Sep 11 02:00:28 2026 GMT
Subject: CN=90b92504da4cea55441f50907eff8177166c9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:8e:12:f6:14:1e:b8:ac:e3:de:69:7e:af:
65:97:32:12:59:10:a4:86:d5:cd:06:9b:e2:c3:62:
ad:e8:37:4f:01:b7:e3:8f:a6:a0:15:71:88:b6:96:
cf:75:8a:c4:a6:67:02:4f:1b:2e:d0:07:78:10:e2:
9a:63:50:a3:22:d5:ed:3c:37:7f:58:d3:8d:63:02:
cd:ff:29:21:40:2a:fc:89:74:5b:d1:bf:78:a7:76:
1c:2c:0c:bd:d4:24:95:19:17:ef:cd:2a:c9:c8:69:
05:d4:b8:ee:f3:b1:8a:53:c2:4e:a7:8b:a1:f3:be:
5f:20:1d:42:be:c4:78:01:db:4f:39:51:56:b6:c6:
be:ca:d6:35:5a:af:8f:6d:1c:f5:58:07:2d:b7:3c:
48:fb:65:d7:67:43:a8:e8:53:c3:be:c7:20:50:51:
06:6d:f8:31:0b:81:c1:4d:8d:a5:68:e4:83:11:4c:
80:c5:9f:bd:2f:51:fc:a5:d2:06:de:71:ba:c7:01:
24:95:38:63:53:6b:9c:42:d4:11:f2:ac:a7:57:24:
d9:17:6a:f8:2d:45:46:43:84:90:3a:79:2e:59:4a:
69:5b:6a:0e:35:9a:5c:4d:d2:08:1e:98:3c:c2:db:
49:bb:26:91:d7:ee:8d:ba:f0:f4:59:03:fb:4e:52:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:25:04:DA:4C:EA:55:44:1F:50:90:7E:FF:81:77:16:6C:97:77
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:af:41:a2:92:0f:8a:45:6a:2b:58:74:42:f7:23:d4:eb:
07:27:15:86:ac:f7:7a:c2:01:db:6a:1d:fd:21:95:57:19:fd:
f7:cf:df:ca:96:0f:29:9d:d1:ef:a4:0e:bc:c2:d0:b7:e3:69:
63:4d:a5:d4:67:92:8b:bd:e5:32:8b:bb:cb:be:71:b3:c1:ac:
be:1d:45:ef:91:46:2f:18:a3:de:78:8b:e8:b1:a8:3e:33:d3:
06:07:78:92:ab:72:33:d0:2a:8a:12:eb:a8:de:05:38:1d:23:
bc:00:42:67:93:7f:54:0a:93:23:91:c7:e7:be:e5:4f:e4:7b:
cd:a0:a6:56:de:b3:78:28:ad:3c:1a:45:7d:11:3a:f2:69:c2:
d0:c2:6a:4c:88:1a:0c:58:aa:1b:23:b1:ea:05:f4:f0:1b:51:
2f:56:8a:48:0f:6d:29:d9:a4:b4:d3:4f:b0:0c:f1:fb:25:1d:
0f:61:92:6e:7d:24:c0:ba:32:f9:db:46:43:f9:b4:51:98:cc:
17:7d:64:21:19:8e:34:24:a9:ed:67:6e:21:7b:e8:19:6b:07:
2a:72:4d:38:08:68:70:26:f3:36:81:50:37:9f:fc:14:af:7b:
0d:de:58:48:67:62:b9:f5:31:69:4b:e0:b9:33:06:73:30:5f:
61:3f:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:39 2026 by rpki-client