Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: yIAHWNETvhn5bJ2zJZowdkRuwCn/KfgDO8SHAKBZ1Xk=
Subject key identifier: 53:86:39:83:3E:DC:E6:BE:B4:3F:3C:8D:C3:F8:71:73:94:58:91:96
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 01A13F6FFF3D03D731E7FF988DE500FF06D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 12:01:06 +0000
Manifest this update: Thu 15 Oct 2026 12:01:06 +0000
Manifest next update: Fri 16 Oct 2026 12:01:06 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: rms1ISgk+5fjcaNAqkZimsuaegPQ5pr6zZof6qp6fO0=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:ff:3d:03:d7:31:e7:ff:98:8d:e5:00:ff:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Oct 15 12:01:06 2026 GMT
Not After : Oct 16 12:01:06 2026 GMT
Subject: CN=538639833edce6beb43f3c8dc3f8717394589196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:ff:b4:c2:61:d1:74:bb:6e:a6:3a:e7:b5:
43:fa:a8:fe:cd:9e:f2:cf:fe:32:7e:52:25:81:80:
12:3e:b7:6e:6d:d0:03:18:06:07:3c:e5:1d:11:6a:
a9:c5:d5:4d:bc:a7:90:b0:74:c9:9e:54:e1:55:d0:
b6:3b:59:5c:70:50:57:18:5b:c0:0f:e8:74:14:3b:
74:7d:61:08:1e:a6:44:71:e8:35:0d:ea:0b:f6:fa:
f0:4e:36:b4:e1:75:38:dc:46:07:d2:28:30:27:26:
ea:94:2f:8a:db:2f:69:98:73:b0:b6:b3:aa:b9:53:
cc:52:a8:60:e4:11:21:77:09:36:43:64:9f:e5:36:
54:a0:34:0c:4c:99:2e:68:c8:1e:e9:b1:1d:e6:91:
fd:e5:35:90:8a:e7:5b:91:28:cd:e5:b4:84:e4:8b:
5e:ce:2a:4b:b6:a6:1c:c5:4c:ba:7c:48:9a:dd:df:
f1:48:1f:97:cd:68:7e:46:47:46:4b:97:ac:77:c6:
14:9e:37:1f:cd:03:59:eb:71:4f:55:5c:4b:f5:d0:
15:84:d8:18:2b:fb:3d:dc:46:24:5b:a4:9e:f7:6b:
cd:93:5e:9a:56:dd:c3:a0:d7:0a:1f:48:17:5d:09:
6b:b9:bb:9c:d3:c2:fd:da:d4:97:e9:c4:c9:fb:27:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:39:83:3E:DC:E6:BE:B4:3F:3C:8D:C3:F8:71:73:94:58:91:96
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:73:42:60:ed:be:07:45:1d:60:3e:5d:20:33:65:92:12:36:
e4:77:7a:9b:d3:24:4f:6f:8a:38:06:3d:60:a2:4a:6a:9e:aa:
ef:04:47:c2:ff:51:5f:3d:00:33:2e:e1:88:d4:20:73:65:f1:
7e:ba:ee:57:90:b8:b0:fc:4e:49:ce:7b:0d:f3:eb:07:52:22:
1f:05:7c:5b:36:2a:13:74:0d:85:3e:5e:4f:91:4f:c9:ac:ca:
9f:58:e9:b2:04:99:fa:6b:e0:67:9c:00:2a:29:01:68:52:24:
d9:c0:cf:a4:79:7e:97:62:a3:ab:50:c0:df:59:cf:ca:48:f4:
dd:ad:f6:75:44:37:7f:be:99:ca:0f:13:e6:cc:a6:98:20:ea:
fe:70:af:47:b3:98:79:36:cd:6a:53:f8:59:ef:a0:40:bf:aa:
57:ad:3c:3e:ac:c9:52:8a:1f:3a:f5:dd:3b:8b:db:69:f5:4d:
04:36:a7:ac:9b:5e:15:67:f9:44:a3:a9:97:79:de:8b:23:b7:
38:39:6d:d3:3b:62:12:8d:f2:7e:6d:bc:5b:ee:4e:b1:81:48:
06:5b:1c:1b:ef:48:4f:02:6f:32:b8:28:2c:ff:ec:e7:2d:c1:
16:fd:ee:14:da:0c:08:41:d8:e9:f0:92:89:18:cb:63:e7:7a:
a1:bf:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:19:35 2026 by rpki-client