Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: DeE68LaZWpuBWZrg4sbTLVvAoA2k9ysLtHsmyRyoQU0=
Subject key identifier: F8:51:C1:6C:6C:F0:DC:CC:B9:4B:50:51:D8:18:F3:F4:0F:62:2F:C1
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 019D37F77D9C50AD8F58739E67EC4157DF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 02A5
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: kmrVjBNNHL4UoCM3IROi7HZd0LWQP+LpN2Nzzk6KZjU=)
2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7d:9c:50:ad:8f:58:73:9e:67:ec:41:57:df:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=f851c16c6cf0dcccb94b5051d818f3f40f622fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7a:98:55:b8:10:a9:a7:4a:f4:97:a6:db:33:
e2:ce:d3:5d:20:04:13:d3:d6:b0:61:c1:05:9c:c7:
52:35:74:a5:07:7b:1d:41:4d:c4:e0:93:b9:5b:de:
82:8f:df:83:2d:ed:53:ca:d5:0b:ef:ee:8e:42:30:
6f:0a:0c:e5:b0:7a:2a:29:76:b7:1f:1a:78:d1:e4:
6e:bb:61:22:77:63:5e:46:37:f8:52:d1:cf:ba:10:
08:65:7b:e1:4b:7c:ba:05:27:91:07:f4:1a:2c:dd:
22:1f:92:a1:1f:5f:fa:a0:9d:e7:1d:68:81:9a:fa:
03:30:00:96:71:d3:02:16:e6:fa:b1:85:27:6d:a3:
9e:c9:a6:a7:40:3a:c1:64:47:b8:f3:ad:80:04:ab:
aa:27:75:6f:e5:d0:f1:83:6e:2c:9b:f5:a7:31:86:
ec:87:7a:e0:25:69:18:b3:bd:4e:e2:5a:c4:af:74:
cd:85:75:e2:b3:a2:68:78:54:23:b2:cb:6c:a0:60:
06:1a:c7:c2:af:43:44:5f:8b:14:3a:06:26:47:5f:
26:00:e6:8d:8d:05:4a:51:26:8d:03:cd:4d:a4:c5:
b3:4b:cf:17:f6:f3:1d:75:d4:4f:13:79:67:0d:97:
f5:46:49:a1:03:07:ef:05:7d:99:6a:a8:7c:2b:fd:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:C1:6C:6C:F0:DC:CC:B9:4B:50:51:D8:18:F3:F4:0F:62:2F:C1
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:42:79:ff:29:fb:bf:78:45:46:ce:53:12:e0:f7:9c:d2:99:
21:f1:31:d8:07:2f:3b:ed:5c:e5:f7:8b:5d:08:22:5d:95:29:
cf:91:4d:5c:c0:32:55:a1:bc:2e:65:1a:32:28:41:7e:7c:e5:
25:6d:98:a5:e1:44:83:ac:51:4f:0e:a3:f7:52:59:07:54:19:
21:8f:52:44:be:a3:cb:38:85:b6:bd:e3:ba:a6:4b:63:68:41:
0d:2b:cf:4d:04:74:d4:f8:bc:c3:e1:09:89:64:02:20:38:61:
59:4c:e6:9a:b9:57:1f:cc:3a:cf:0f:89:bf:e1:d5:13:bd:80:
6e:d6:0e:2e:66:98:2c:30:a9:a2:63:17:af:8f:80:e3:8a:c9:
eb:de:aa:b9:50:da:d4:06:9e:f6:36:fd:ea:c4:5a:02:d9:44:
4a:fe:36:0e:d6:6a:16:55:d3:57:6a:98:fc:bf:eb:ae:c0:53:
f8:e2:e2:e8:0c:c7:e6:96:50:6b:41:a1:66:e5:15:64:18:9a:
1a:8a:92:ad:a8:db:15:6a:b8:89:7a:2a:41:c3:e9:59:3f:cf:
62:8e:28:cb:35:bc:4b:f6:a1:30:b6:b7:ae:24:40:41:36:2d:
b3:fe:40:2f:d7:a5:1a:2f:c1:15:92:30:e5:1b:87:cd:4b:fa:
6e:91:47:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03932cUK2PWHOeZ+xBV98MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWNkOThkZTc5MTkyMzU3YWRjZjlkZjBhZGJlODMxOTIy
MjhiZDUwHhcNMjYwMzI5MDUwMDU5WhcNMjYwMzMwMDUwMDU5WjAzMTEwLwYDVQQD
EyhmODUxYzE2YzZjZjBkY2NjYjk0YjUwNTFkODE4ZjNmNDBmNjIyZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HqYVbgQqadK9Jem2zPiztNdIAQT
09awYcEFnMdSNXSlB3sdQU3E4JO5W96Cj9+DLe1TytUL7+6OQjBvCgzlsHoqKXa3
Hxp40eRuu2Eid2NeRjf4UtHPuhAIZXvhS3y6BSeRB/QaLN0iH5KhH1/6oJ3nHWiB
mvoDMACWcdMCFub6sYUnbaOeyaanQDrBZEe4862ABKuqJ3Vv5dDxg24sm/WnMYbs
h3rgJWkYs71O4lrEr3TNhXXis6JoeFQjsstsoGAGGsfCr0NEX4sUOgYmR18mAOaN
jQVKUSaNA81NpMWzS88X9vMdddRPE3lnDZf1RkmhAwfvBX2Zaqh8K/2auQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhRwWxs8NzMuUtQUdgY8/QPYi/BMB8GA1UdIwQY
MBaAFOus2Y3nkZI1etz53wrb6DGSIovVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgt
Njk5YzQ1YmE3ZTU4LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgtNjk5YzQ1YmE3ZTU4
LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEJ5/yn7
v3hFRs5TEuD3nNKZIfEx2AcvO+1c5feLXQgiXZUpz5FNXMAyVaG8LmUaMihBfnzl
JW2YpeFEg6xRTw6j91JZB1QZIY9SRL6jyziFtr3juqZLY2hBDSvPTQR01Pi8w+EJ
iWQCIDhhWUzmmrlXH8w6zw+Jv+HVE72AbtYOLmaYLDCpomMXr4+A44rJ696quVDa
1Aae9jb96sRaAtlESv42DtZqFlXTV2qY/L/rrsBT+OLi6AzH5pZQa0GhZuUVZBia
GoqSrajbFWq4iXoqQcPpWT/PYo4oyzW8S/ahMLa3riRAQTYts/5AL9elGi/BFZIw
5RuHzUv6bpFHMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:34 2026 by rpki-client