Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: g2MKHhrMT1fPzMI/2IUyudID5fspOPfa4pmtzOpA/30=
Subject key identifier: 8A:AA:14:80:4E:08:49:3D:3D:AB:7E:C4:84:AA:22:8D:DC:35:E7:80
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019E314E08B862C84A365E42F2406FE4E1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 15:00:57 +0000
Manifest this update: Sat 16 May 2026 15:00:57 +0000
Manifest next update: Sun 17 May 2026 15:00:57 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: LnG6rVmMQJWzhaLjeHLGE2TmODsMxGX/UPdSVjv6nGg=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:08:b8:62:c8:4a:36:5e:42:f2:40:6f:e4:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: May 16 15:00:57 2026 GMT
Not After : May 17 15:00:57 2026 GMT
Subject: CN=8aaa14804e08493d3dab7ec484aa228ddc35e780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:6c:d6:c9:5a:ee:45:04:1b:70:a6:21:6b:
f5:5f:a7:70:ba:11:0f:c3:47:43:2a:74:fe:c7:fc:
73:f7:6a:b0:41:84:22:b5:33:10:97:9e:9f:bb:cb:
40:6a:54:5d:6b:16:9d:02:87:6b:4c:23:45:3d:27:
69:4a:bf:01:a1:75:c4:97:e5:2e:57:70:ed:0d:f9:
09:b7:64:93:35:ce:a7:71:17:b4:1e:55:c6:f3:0a:
fb:72:d9:c1:97:a1:1d:5d:c1:8b:d9:0f:46:24:e9:
77:74:61:79:23:39:13:97:51:3b:6c:3c:36:ee:cc:
3c:12:23:12:49:c9:39:5c:3f:56:16:64:bb:2b:6d:
31:9a:47:df:23:87:e9:83:75:eb:7b:e7:92:43:7e:
b4:b7:b4:b0:48:ee:23:d1:9a:ba:1a:04:76:f7:08:
ff:e2:b0:97:bd:fc:5b:c5:dd:0d:86:53:53:ac:9a:
cf:47:c5:e4:99:fd:af:8d:38:06:28:7a:bd:11:83:
72:13:fc:ac:bb:70:8f:da:2a:5c:b6:97:92:5c:62:
df:6f:fa:23:e3:c5:62:40:53:23:77:7b:c2:14:65:
4d:ef:3a:eb:89:79:d5:e6:23:be:35:8d:9b:5b:3d:
d5:26:f2:cc:2a:57:79:ad:dd:9a:81:da:eb:64:87:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:14:80:4E:08:49:3D:3D:AB:7E:C4:84:AA:22:8D:DC:35:E7:80
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f1:c8:63:1e:b2:c8:28:7e:a6:ca:c1:21:85:c1:9c:cb:5f:
20:1e:ac:89:43:c2:b5:66:76:d4:f8:09:d2:3c:83:ea:65:a5:
41:bb:69:ce:78:d3:a7:44:54:a6:72:e2:a6:c1:ed:89:b7:1b:
d6:16:12:07:77:ac:30:68:d9:59:57:86:00:04:6d:34:c7:c1:
e7:f9:0d:03:75:c2:ce:71:09:90:a2:67:9f:ba:05:a9:28:2f:
12:ed:c8:22:0d:b2:22:d3:4e:74:d0:b6:a8:9f:95:73:85:bf:
33:05:14:f4:26:d5:18:c9:bc:d9:32:26:c5:03:1f:95:bb:20:
70:27:c7:93:3a:be:d8:9a:f0:dd:f7:9e:c9:c2:3e:5e:ad:f9:
69:6e:e8:93:fa:97:19:3c:15:30:77:40:89:75:85:01:ec:92:
e8:0b:5e:b0:bf:9e:63:b3:95:4d:2f:bf:19:df:1c:b8:32:02:
68:f4:6e:56:ab:5b:c7:83:c9:ed:be:26:d8:87:83:a9:d9:67:
6b:64:5c:65:cf:76:6c:c4:b3:57:96:02:80:6a:f4:c5:8a:fb:
7d:65:70:e3:3c:df:a3:59:2c:25:d2:05:1a:99:ab:25:9b:62:
27:65:07:4f:d3:01:09:d6:27:8c:f4:3e:a8:88:b8:45:f7:84:
ae:1d:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:09:29 2026 by rpki-client