
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
File: 67YrcxkGEIQRy1VV2BvcOj_cbbg.mft (raw, json)
Hash identifier: XHKDfaxZNUPOWjMT3uY+Y3UPgjxbTBPBLK1YN1pGbxg=
Subject key identifier: 1D:43:E8:71:7E:B0:7B:7A:3B:B3:88:73:48:C8:9B:C7:AE:64:E2:1D
Authority key identifier: EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
Certificate issuer: /CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Certificate serial: 01A03FA93D2B31181C9F40421D08CE77E966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
Manifest number: 04CD
Signing time: Wed 26 Aug 2026 20:00:50 +0000
Manifest this update: Wed 26 Aug 2026 20:00:50 +0000
Manifest next update: Thu 27 Aug 2026 20:00:50 +0000
Files and hashes: 1: 67YrcxkGEIQRy1VV2BvcOj_cbbg.crl (hash: YTtltZZwfg/uM+EMrCYuF8h16QK//AR3qMYzY3/uzRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:3d:2b:31:18:1c:9f:40:42:1d:08:ce:77:e9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Validity
Not Before: Aug 26 20:00:50 2026 GMT
Not After : Aug 27 20:00:50 2026 GMT
Subject: CN=1d43e8717eb07b7a3bb3887348c89bc7ae64e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:08:1b:4f:38:00:4b:7f:c0:1d:79:a2:5d:
88:a7:16:62:da:e4:2b:87:c6:59:60:38:04:cd:40:
1d:aa:91:98:e3:9b:f0:99:37:c2:b5:46:dc:d9:2f:
ad:3e:6f:07:cf:50:2e:58:60:4e:ac:14:24:56:86:
30:24:98:ab:6d:7b:55:b8:a7:5f:ca:07:5e:ca:2a:
c1:a9:8e:7f:f4:5c:cb:bc:98:69:85:04:ad:6d:53:
07:c3:84:13:6c:d1:b6:b1:3b:73:21:c6:ab:f5:45:
b9:af:aa:94:88:07:4e:79:34:54:bd:69:5c:73:9e:
8a:d3:9c:da:7f:bc:ab:8d:a8:bd:8a:d2:71:12:f1:
fc:4d:78:34:b7:0f:3d:49:67:4e:17:5c:bd:fd:51:
43:6d:e4:e7:ca:b8:68:41:a0:f6:5f:dd:08:cb:39:
d9:73:d0:13:d8:f5:05:34:c6:dc:e3:8c:1f:ab:63:
f6:9b:69:d3:8e:87:e5:51:b7:0d:f1:36:49:d3:6b:
de:3e:dd:1a:f2:e1:95:08:0b:b1:b9:fe:4b:be:a9:
6a:40:78:97:e4:e6:b9:79:09:59:d7:e3:b5:84:3e:
1e:5c:53:d1:d2:1c:76:4d:c9:25:54:5f:9e:ac:fb:
f2:73:2b:aa:b2:fe:a2:f4:85:8a:e0:85:74:57:27:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:E8:71:7E:B0:7B:7A:3B:B3:88:73:48:C8:9B:C7:AE:64:E2:1D
X509v3 Authority Key Identifier:
keyid:EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:83:ac:3e:ea:85:69:cd:24:fb:80:51:bd:50:45:51:45:
d5:88:36:7f:68:55:cd:8f:a1:47:3f:67:95:f8:b5:89:f1:a7:
c4:66:22:dd:2c:ec:47:07:a9:51:c0:61:c0:80:a9:f7:77:b9:
74:47:d9:fc:55:3d:2d:17:12:66:cf:e8:4f:39:23:b7:d0:34:
d3:ae:46:0e:58:9a:61:fa:3f:81:c4:7f:da:1d:69:ff:b2:00:
31:ba:b3:be:36:d5:18:17:c8:73:a0:ef:82:39:b1:e0:06:22:
90:9b:10:8d:bf:35:c7:dd:96:83:98:03:ab:9c:3c:b1:9a:29:
31:d0:52:05:82:30:ec:81:85:94:0f:49:c1:d2:96:d2:2a:65:
66:f3:ee:66:be:2f:4e:f6:66:c8:c9:83:63:52:c8:74:d3:80:
fd:d7:e8:fa:46:a2:80:2a:d7:63:ae:26:ba:9f:72:f1:be:b9:
e8:70:ed:41:7b:02:e2:ac:a9:72:ab:6b:32:be:30:ff:24:3b:
e3:1f:35:c2:95:6d:43:73:34:a8:b2:ad:65:2b:d7:a6:d6:81:
02:47:cf:19:0d:5d:2a:eb:10:97:45:85:a8:7b:70:a3:7a:03:
a6:a2:29:3c:81:45:56:7b:04:8d:f9:a1:d0:af:fd:10:ed:69:
0d:ee:1e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qT0rMRgcn0BCHQjOd+lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjYyYjczMTkwNjEwODQxMWNiNTU1NWQ4MWJkYzNhM2Zk
YzZkYjgwHhcNMjYwODI2MjAwMDUwWhcNMjYwODI3MjAwMDUwWjAzMTEwLwYDVQQD
EygxZDQzZTg3MTdlYjA3YjdhM2JiMzg4NzM0OGM4OWJjN2FlNjRlMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkokIG084AEt/wB15ol2IpxZi2uQr
h8ZZYDgEzUAdqpGY45vwmTfCtUbc2S+tPm8Hz1AuWGBOrBQkVoYwJJirbXtVuKdf
ygdeyirBqY5/9FzLvJhphQStbVMHw4QTbNG2sTtzIcar9UW5r6qUiAdOeTRUvWlc
c56K05zaf7yrjai9itJxEvH8TXg0tw89SWdOF1y9/VFDbeTnyrhoQaD2X90IyznZ
c9AT2PUFNMbc44wfq2P2m2nTjoflUbcN8TZJ02vePt0a8uGVCAuxuf5LvqlqQHiX
5Oa5eQlZ1+O1hD4eXFPR0hx2TcklVF+erPvycyuqsv6i9IWK4IV0VyekcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1D6HF+sHt6O7OIc0jIm8euZOIdMB8GA1UdIwQY
MBaAFOu2K3MZBhCEEctVVdgb3Do/3G24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdZcmN4a0dFSVFSeTFWVjJCdmNPal9jYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zMzJmMGEtNTdkMS00MGQwLWE4NmIt
NzcyMTNmOTkxZGI5LzEvNjdZcmN4a0dFSVFSeTFWVjJCdmNPal9jYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zMzJmMGEtNTdkMS00MGQwLWE4NmItNzcyMTNmOTkxZGI5
LzEvNjdZcmN4a0dFSVFSeTFWVjJCdmNPal9jYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFqDrD7q
hWnNJPuAUb1QRVFF1Yg2f2hVzY+hRz9nlfi1ifGnxGYi3SzsRwepUcBhwICp93e5
dEfZ/FU9LRcSZs/oTzkjt9A0065GDliaYfo/gcR/2h1p/7IAMbqzvjbVGBfIc6Dv
gjmx4AYikJsQjb81x92Wg5gDq5w8sZopMdBSBYIw7IGFlA9JwdKW0iplZvPuZr4v
TvZmyMmDY1LIdNOA/dfo+kaigCrXY64mup9y8b656HDtQXsC4qypcqtrMr4w/yQ7
4x81wpVtQ3M0qLKtZSvXptaBAkfPGQ1dKusQl0WFqHtwo3oDpqIpPIFFVnsEjfmh
0K/9EO1pDe4ebg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:15 2026 by rpki-client