Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: Xq/wgwqGc0jUONVMJWxXpHTYxC0Qb/IcQFJlc016Cb8=
Subject key identifier: 52:8E:1D:1A:3B:AF:52:71:EA:FF:B8:49:09:F5:E5:A5:E9:FA:DE:26
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019CAA8FA5658F2FF9A1178001CC9CB090FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: 0E
Signing time: Sun 01 Mar 2026 18:01:06 +0000
Manifest this update: Sun 01 Mar 2026 18:01:06 +0000
Manifest next update: Mon 02 Mar 2026 18:01:06 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: iJOjEZM1msD47cltZpXz1U8RigIrhrC1nlPlFQXU9PA=)
2: pKEJ7DFWHbBkVzp3bQLrdzxNPJY.roa (hash: TMTD7mh7ooZTdBqCU8hqfvjG3It5Zy3T0eHIJx3jzjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a5:65:8f:2f:f9:a1:17:80:01:cc:9c:b0:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Mar 1 18:01:06 2026 GMT
Not After : Mar 2 18:01:06 2026 GMT
Subject: CN=528e1d1a3baf5271eaffb84909f5e5a5e9fade26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:00:b3:f5:21:10:38:c4:8b:8b:2c:40:86:
62:09:3c:e4:1e:e2:8c:d7:ba:2e:90:5e:fc:bf:af:
8c:94:33:a6:30:6e:41:bb:13:30:83:77:91:f5:54:
a9:fd:a3:f9:bd:51:96:b1:96:0c:24:06:5d:34:75:
5e:cc:ec:bc:e6:eb:e3:56:8b:fa:73:bf:24:9e:97:
6f:72:86:1a:0c:d4:da:d3:a5:71:5a:32:b2:c4:07:
6d:34:93:c1:bc:70:03:0c:11:7a:bb:d9:f9:01:5d:
a7:df:85:35:4f:da:48:76:ed:cb:a8:2d:d1:ed:52:
c7:79:9f:67:43:4c:bf:30:b0:1d:4a:4a:6c:ac:60:
9e:03:e1:fd:31:a8:6b:9e:c9:3f:f6:5b:03:d1:91:
19:1b:4c:e6:8c:fe:4e:d7:6a:ff:4f:63:0f:68:aa:
83:45:93:b8:24:b1:4b:c7:26:ea:4d:6c:f0:f1:37:
7d:83:79:b9:2c:8c:5d:2f:0c:c7:4d:eb:a8:d7:d2:
3b:ba:d4:6c:db:f3:50:31:75:04:56:08:fa:f0:10:
15:8a:f4:bb:2b:31:85:fb:ca:7c:11:4a:b5:b9:db:
ac:5f:b7:db:cd:ab:7d:d1:dd:fc:b9:0e:70:27:f8:
e6:cd:8f:91:c6:ab:53:c5:20:9d:7a:d6:5a:b0:28:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8E:1D:1A:3B:AF:52:71:EA:FF:B8:49:09:F5:E5:A5:E9:FA:DE:26
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:70:44:f2:e2:b0:58:fe:d6:91:7f:cc:0e:9c:b2:72:02:
e8:8b:8f:87:68:d0:9a:16:d9:17:8e:d4:9e:b7:9d:8f:58:ee:
0e:5b:7c:1f:03:ae:39:c0:f8:bc:4d:d7:01:56:e4:17:c8:4f:
da:0d:be:aa:96:09:bf:f5:ef:0f:91:91:ca:bc:9a:5d:0a:a2:
20:57:22:65:99:93:f8:1f:20:a8:be:95:9a:3f:7c:9a:29:2c:
c0:06:7e:a8:53:35:de:29:c8:58:9f:d9:46:a4:5a:f3:b8:04:
10:8a:8b:b3:80:73:c4:53:f9:59:32:61:19:4a:62:00:23:58:
4e:38:e4:57:e8:c5:76:81:4f:1b:5d:98:98:a8:11:ca:d6:2b:
01:b1:20:2d:19:45:67:c9:0d:ec:42:82:02:f6:68:de:02:cc:
8f:77:f1:8a:bd:40:f8:ba:2f:c5:36:28:27:f0:7b:6e:c8:d1:
c9:ea:34:bf:2d:7d:3e:2b:d1:ad:29:f1:f2:0f:b8:bd:c8:a6:
68:7c:04:44:9d:d3:ef:13:72:63:dd:1d:56:3d:f5:ed:6f:f7:
28:77:e7:68:3e:03:77:47:48:77:cc:f3:13:72:e1:a0:49:96:
59:94:6d:b8:25:08:13:97:32:b9:59:0e:1c:16:15:9c:5b:cf:
ae:55:d7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:09 2026 by rpki-client