Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: JycI1ZqL3uwVKAkROnITymFeWlgcaF8PazizpFk0lq0=
Subject key identifier: DA:52:1A:FB:AE:DC:BB:77:1E:41:AE:BA:00:CB:6A:21:4A:D5:CC:7A
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019D9AE306CE8D86687CCD9E0295326D4B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: 8D
Signing time: Fri 17 Apr 2026 10:01:02 +0000
Manifest this update: Fri 17 Apr 2026 10:01:02 +0000
Manifest next update: Sat 18 Apr 2026 10:01:02 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: rVdjrKGMun9muRXGFTTX3EyfSU3Tmxexufow27AuUV8=)
2: j77VlxKGZFTBeMoq8dRpC_01Kvs.roa (hash: /23p2YQZi+3zBIY8FsXmhv9zCZT3wm/sCfekirsWiKI=)
3: mUoDBRXkgTNzdjas0Ha_cdFwJ-0.roa (hash: PfPSIrSAOylS94Xd2snc5lAmLj9DBBVThou8n98ALEY=)
4: yk3NAuQ0NoST9PEW0vgb3LGhviE.roa (hash: VQ5a/vSth0KQuphYV4DJB31TjGhP1sRfoX91QXXY+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:06:ce:8d:86:68:7c:cd:9e:02:95:32:6d:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Apr 17 10:01:02 2026 GMT
Not After : Apr 18 10:01:02 2026 GMT
Subject: CN=da521afbaedcbb771e41aeba00cb6a214ad5cc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:b3:27:e9:70:99:42:38:7a:34:52:7e:10:
13:ba:e3:13:f0:ab:1c:4c:d7:28:78:93:f6:98:f0:
0d:25:83:81:24:61:06:f4:aa:1a:88:40:43:67:71:
07:80:47:6c:2e:a4:24:e2:eb:46:29:c4:7d:ec:0d:
35:4e:e2:f5:d6:a0:d1:6a:af:17:15:f6:9a:43:05:
f4:09:49:15:78:cb:9d:5e:97:b7:87:f3:b3:f0:01:
ea:d0:36:1a:87:f2:3e:a9:ab:ef:48:7f:37:1e:d8:
a3:13:6b:b1:83:bb:58:b4:81:32:2b:b0:61:5d:a0:
a7:85:21:20:44:b0:65:48:0e:fd:0d:d0:aa:d9:c2:
2b:f9:ac:05:10:eb:d5:ff:87:06:87:ae:55:96:30:
07:ef:a0:88:82:91:c3:4a:be:de:1c:a6:85:41:86:
bd:70:23:79:cf:54:61:fd:a2:f0:54:e9:87:b7:56:
ac:e4:62:0c:d7:0f:8c:e4:70:f5:18:eb:aa:80:09:
55:7c:8d:e6:58:ff:2a:22:da:43:5c:b1:e5:df:5f:
a9:59:e5:2f:46:9a:08:5d:9e:1a:fa:b4:4a:f7:0f:
c7:9a:11:f6:63:7f:8b:d8:32:52:7a:a2:f9:db:f7:
aa:b7:64:32:e4:a4:67:e1:72:e8:52:65:07:c8:5a:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:1A:FB:AE:DC:BB:77:1E:41:AE:BA:00:CB:6A:21:4A:D5:CC:7A
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5f:9d:35:26:23:9b:b1:04:68:b0:0e:94:e9:a9:e3:70:21:
c3:ee:f7:88:d7:e6:d4:95:cb:e5:37:6c:1c:3f:2a:02:85:d5:
29:c8:59:f4:d0:98:00:87:b3:5e:d6:81:06:fe:d5:cd:3b:4c:
22:c8:03:0a:d1:37:e2:21:70:9f:b6:f1:58:45:63:37:69:7b:
b1:75:4b:32:d6:6a:6f:f9:f3:4d:0b:92:bb:87:2e:01:d4:7f:
55:d9:b1:44:9e:e2:50:9a:aa:3f:d7:45:d3:1f:b2:c7:b0:18:
1e:d6:71:0b:3c:47:23:ae:f1:b8:c2:df:de:3b:2f:81:4a:ad:
bf:0e:1a:24:21:f5:d9:39:08:57:50:50:19:73:94:c6:cf:02:
c9:cf:4c:d3:82:ee:51:b1:8a:7a:00:e4:5a:f5:58:82:a5:bb:
70:9f:69:bc:6d:bd:18:58:9b:66:57:af:e0:8e:ca:54:fe:63:
d1:80:05:b7:56:50:7e:43:82:6d:64:ab:8d:50:53:3e:17:73:
38:82:b7:3a:35:97:9b:05:0f:a1:31:0b:09:d4:c3:be:69:bd:
32:bb:aa:8f:a3:bb:d8:aa:8d:a8:ae:4d:a7:a8:07:04:9a:ed:
39:46:99:57:26:00:70:aa:77:0c:27:c5:91:dd:ec:f5:00:ce:
a7:49:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:05 2026 by rpki-client