Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: qczogvQ1QGIvF2PNZUIuB+qRcnd5gXjtii9VK9Sca9k=
Subject key identifier: A7:3A:E1:92:D2:D5:1A:EC:F7:57:1B:72:E9:60:1B:7E:B2:0E:93:F1
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019D382DFA2AD5D53E58C2B91377A1545F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: GTXSVWqgLE2NDB31J+4gzQlhxTaqKw5mfTVapx4irrA=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fa:2a:d5:d5:3e:58:c2:b9:13:77:a1:54:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=a73ae192d2d51aecf7571b72e9601b7eb20e93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:55:a3:43:8e:84:b0:ec:dc:44:3e:de:19:
bc:c1:e6:45:fa:af:90:92:aa:b6:8e:89:75:8f:bc:
4a:8b:e7:8e:af:35:26:0e:32:2b:ef:47:ad:c8:0d:
d9:bc:cf:68:d0:9e:5e:48:a7:a7:ff:e5:cf:e2:b5:
5b:63:ae:b0:e0:99:ca:0b:52:8d:ca:05:1d:86:46:
75:72:9b:3b:32:f1:99:60:54:f3:c4:3b:02:49:3e:
2d:fa:c9:c9:71:c4:55:87:c3:89:b2:95:af:38:32:
fb:c1:90:9b:4c:bd:e9:ac:43:f0:a7:0b:a6:55:88:
e0:bd:b9:67:4d:30:8b:c4:b5:51:e1:d2:b4:97:46:
d0:bd:0d:6d:9b:85:8b:3a:07:75:56:b9:49:fc:85:
42:62:a3:96:bf:c3:7a:53:4d:a3:7e:88:c0:60:fb:
ea:92:1f:4d:63:e4:9f:9d:bd:f0:b4:b2:59:86:01:
a4:8a:5d:ea:c7:15:d1:e6:f8:9d:81:cf:1b:c7:ea:
d9:37:21:e2:02:33:0a:ec:08:1a:07:f6:d1:15:ee:
52:7c:dc:3e:87:3e:8d:9f:67:c9:60:f6:c9:8d:a5:
61:e0:82:60:84:3b:62:37:23:20:60:d1:8e:f7:63:
2b:3e:50:60:90:a1:26:ee:2d:3b:44:a9:70:72:bc:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:E1:92:D2:D5:1A:EC:F7:57:1B:72:E9:60:1B:7E:B2:0E:93:F1
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:58:5f:20:a2:31:36:4e:d8:13:9d:b1:b7:e9:25:f8:e3:2a:
93:a0:6f:35:4b:0e:77:e0:7a:4f:43:a9:1d:0a:1a:59:a9:a7:
46:38:dc:77:1e:7e:0f:63:f7:80:56:f8:db:54:33:6c:f3:34:
50:35:f6:0b:ef:6e:be:10:af:eb:d2:28:ab:8b:08:85:e0:51:
7d:ef:71:6c:ef:ce:fc:9c:02:c1:21:54:c8:08:b7:da:68:9f:
bd:32:84:ce:ce:8f:53:44:8c:1f:7a:e1:9c:64:ed:08:87:c8:
0f:00:01:13:72:b7:73:dc:ec:93:ea:3b:37:26:cb:00:f1:97:
3e:d5:9b:d8:29:74:97:a2:4c:12:42:1c:5f:d5:80:42:cc:76:
de:fe:ef:65:9c:56:a9:67:bd:b0:9d:08:0e:d5:c7:30:65:c9:
20:d2:02:02:29:47:a0:19:c0:da:ee:0a:ec:ef:53:43:2a:e3:
61:d7:e4:8f:71:8b:ba:e0:17:9f:d0:67:e9:e6:25:46:93:96:
d3:69:27:7a:1f:15:b7:88:51:82:b3:14:98:27:bc:1d:f7:07:
cc:94:2b:e1:41:a0:10:cd:20:66:d2:72:5d:a5:93:bb:9c:85:
18:7f:91:42:56:a7:db:ed:35:98:ec:8b:27:19:05:e1:53:2a:
d3:d9:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:02 2026 by rpki-client