Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: ZVjD44VBfpF8y9ofMs1Ipm7rt4XRnTp1Im0gTdhLbFo=
Subject key identifier: 86:6F:F7:11:DD:55:C7:F9:02:7C:DF:65:A8:20:2E:07:05:4B:23:1A
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019EB7A0CD6CAF7A2BC0635DF8B3CF67A3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 047A
Signing time: Thu 11 Jun 2026 17:00:29 +0000
Manifest this update: Thu 11 Jun 2026 17:00:29 +0000
Manifest next update: Fri 12 Jun 2026 17:00:29 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: BXnvTX1IxBMmF+HvwTdbx3HRTlGCCsDZ9r7qgIufpZE=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:cd:6c:af:7a:2b:c0:63:5d:f8:b3:cf:67:a3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Jun 11 17:00:29 2026 GMT
Not After : Jun 12 17:00:29 2026 GMT
Subject: CN=866ff711dd55c7f9027cdf65a8202e07054b231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:d4:7b:9f:5a:c6:4c:60:27:1f:e4:c1:aa:
7b:52:26:e6:18:0e:d5:a8:84:ba:09:8a:7f:d2:ed:
fd:2c:d2:bc:21:4c:8c:02:8a:b2:b2:82:73:f2:e6:
16:2a:a1:dd:11:1c:60:af:39:fc:eb:19:5e:e9:03:
d6:cf:f3:d4:8d:31:a8:bc:17:31:5f:06:3a:28:e8:
94:dc:6b:f7:0c:ba:34:36:b5:18:31:98:c1:cd:cb:
2e:94:f0:b4:31:f9:01:ff:e1:ae:08:a5:a1:6c:ac:
a2:c8:7a:4d:df:05:1a:06:ea:4f:4b:d6:af:b8:b4:
c4:0c:08:12:ad:d6:64:7d:2a:7f:95:30:54:6e:fb:
67:c0:b6:79:46:45:40:b5:92:1e:68:08:48:df:80:
13:45:ba:a6:d2:c6:68:d3:c1:b8:28:b3:69:cc:8b:
bb:52:5a:be:06:46:88:42:26:0c:20:af:97:60:33:
64:35:f1:16:93:e9:c1:09:79:15:66:32:e1:b9:9b:
70:71:60:7c:43:9c:de:89:fc:72:9f:8a:af:74:b4:
7d:51:99:6a:7a:88:89:0a:10:99:03:62:78:41:8a:
a1:d3:a8:e0:10:2c:3e:87:2d:f6:87:84:2b:39:db:
2e:cf:95:49:5e:c2:68:9b:94:5d:6d:85:c8:a9:de:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:F7:11:DD:55:C7:F9:02:7C:DF:65:A8:20:2E:07:05:4B:23:1A
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bf:b2:bb:3f:08:11:1d:40:a9:74:64:32:77:13:3f:37:0b:
2b:6d:4a:34:93:a0:2a:50:67:54:68:e1:6f:38:27:a7:9d:4a:
a5:a5:3e:ef:85:85:32:13:1b:3b:07:cc:f3:c0:9f:13:9f:1b:
6e:be:53:06:5e:6c:20:3d:73:29:18:79:9e:2b:04:88:c8:01:
52:4d:20:33:3d:06:60:67:4b:85:d4:02:3e:22:20:36:eb:28:
1b:40:8e:ea:60:e4:17:f6:41:d5:0f:2f:39:ad:2c:ba:3f:9a:
4b:77:83:64:6a:db:c5:b2:46:36:5a:58:bb:38:c4:26:2c:a0:
19:28:81:f2:12:99:fe:dc:65:df:cc:8e:47:1f:18:fa:c8:fe:
d9:cc:74:00:24:39:76:43:b1:94:84:e3:d0:06:4b:39:47:b4:
e1:83:ad:da:db:03:a9:0d:dc:1c:be:46:3b:ce:7a:7b:4d:2b:
65:d6:ad:92:3b:20:21:73:be:90:21:11:6a:97:3f:ba:14:79:
8a:8f:6d:3e:02:55:a4:07:4f:95:cf:05:35:2c:5c:fa:f0:27:
a9:46:9e:72:ed:85:9e:a6:d0:fd:20:0d:1a:6b:3f:c1:80:81:
b9:c3:1d:b3:d2:e2:21:a6:d3:06:7f:4f:0b:91:ff:d4:82:f7:
9d:8e:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:09 2026 by rpki-client