Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: qjcdtGFfaiZRjh7VQgpwgldgcdokpMP6AXSyLq898oc=
Subject key identifier: 5D:5A:A8:86:F1:72:8C:16:CB:06:95:9E:0B:FC:65:1B:31:32:D2:23
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019F190D1C890FC11D869148437E4D2805B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 15:01:57 +0000
Manifest this update: Tue 30 Jun 2026 15:01:57 +0000
Manifest next update: Wed 01 Jul 2026 15:01:57 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: F9oURU3AnkDsSF2atTj2ePcjpmysdvgE2A4KlaHDlTo=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:1c:89:0f:c1:1d:86:91:48:43:7e:4d:28:05:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jun 30 15:01:57 2026 GMT
Not After : Jul 1 15:01:57 2026 GMT
Subject: CN=5d5aa886f1728c16cb06959e0bfc651b3132d223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:dd:3f:bc:00:99:3b:43:88:28:5a:a5:5e:
af:58:b6:0d:d8:04:56:5a:c2:eb:12:1e:07:e5:d3:
e5:59:3a:ce:13:36:9c:6b:fd:e3:a7:71:d1:98:0e:
72:23:a2:2b:db:82:01:1e:e3:f4:d8:b4:3c:50:1c:
d8:37:d7:dd:bf:d1:79:a3:7e:5c:52:cd:e6:94:c4:
09:d8:c4:82:3e:30:cf:a5:74:d4:b6:6c:b9:c5:47:
82:2c:4a:cf:7e:c4:93:6c:9b:48:7f:8b:f5:5b:64:
63:de:a1:53:46:42:ca:87:5d:27:42:79:d8:d6:5e:
5e:f8:bd:de:0c:7e:1d:df:69:4d:96:dc:a2:91:05:
d4:d2:7f:f6:88:d2:5a:35:cf:ad:18:ce:cc:32:83:
8c:46:75:a7:2e:e0:89:fa:1d:f7:5c:3e:01:1c:0c:
6e:20:3d:5a:1f:5a:d1:bc:cb:79:4f:09:a1:d8:a7:
1a:c1:86:eb:81:19:45:43:b3:f4:c0:d8:a7:bd:91:
3d:16:0e:1c:44:9e:24:48:38:f8:a6:eb:56:22:94:
51:71:6e:d2:48:81:ff:0f:10:46:0d:1a:a9:d0:a3:
ac:19:1b:f8:3a:48:f0:9a:a4:2e:e2:32:dc:1b:64:
78:91:3d:5e:03:4a:55:2b:fa:0f:e7:dc:b9:4d:59:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:A8:86:F1:72:8C:16:CB:06:95:9E:0B:FC:65:1B:31:32:D2:23
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:1b:07:0a:16:5f:8c:20:e0:5d:1a:3b:3a:4e:f2:82:f3:
3d:8d:51:41:9f:09:84:fb:33:1d:b7:74:17:72:1a:fc:55:f1:
31:4f:0a:05:e8:0b:1b:1d:69:e8:8e:3b:ac:5e:bb:bf:33:89:
c8:a3:2d:c7:f3:75:1a:96:6d:6d:07:dd:ac:dc:9a:44:22:3a:
82:7e:93:8f:50:82:b6:79:98:1c:4c:6f:d8:8e:50:23:86:47:
bb:f2:64:38:24:42:80:a6:00:a3:98:1f:c9:c8:c8:ef:55:90:
8f:04:11:53:8f:5b:e0:e8:44:ab:2b:64:64:fe:48:de:46:a7:
03:ae:d2:44:e4:bb:b6:5b:46:d9:e3:a6:ea:81:72:3a:86:07:
3c:44:7e:f6:9b:d4:0b:9f:4f:29:cc:20:0b:ca:1d:d5:87:ca:
9d:65:14:5c:35:dc:1d:83:68:b1:97:1b:6f:d5:12:3f:5a:ac:
ea:a7:c8:46:d4:36:6d:88:20:6a:54:8c:63:85:0c:b7:56:dc:
6b:6d:45:e4:76:61:10:72:50:eb:f5:41:ac:3b:3e:d2:23:e5:
1c:56:ed:72:34:d7:21:ed:b9:8e:7d:a1:28:a2:24:ca:ae:e5:
6d:74:4f:c5:08:38:c3:7c:67:04:74:79:d4:a4:3c:4e:7b:f8:
cd:11:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:15:58 2026 by rpki-client