Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: 9gTqzN9PWVw3SuyD23sPTY4B2WpRFqSFc/K5z7e9XwA=
Subject key identifier: DC:F4:A6:17:DF:C1:6F:FD:1F:CE:21:9E:68:96:A1:31:16:E8:E2:DC
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019FA90720E6D71DEA9A71AA8EB6839F5A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: 01B0
Signing time: Tue 28 Jul 2026 14:00:44 +0000
Manifest this update: Tue 28 Jul 2026 14:00:44 +0000
Manifest next update: Wed 29 Jul 2026 14:00:44 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: M9+aHqy5Xa54XELl9tZkwyFTqZo9JEGCoz0XjpHX7YQ=)
2: 8_uN9lxayPNFYSFMe_-SzdqsN_M.roa (hash: JquMORB08SkqUpDd0r0GoDrQiAxCIucTbEwQ0tt/Va0=)
3: EgUddJnQyW-DZo-6cboASv4IDkM.roa (hash: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=)
4: SEYQgtC_8BplrZD7grL5ljlcID0.roa (hash: Ee29iLIQ6Fe9LUgXTWVjmo6kKFtR4CoXYo22/zo9Gpw=)
5: VpPugUwpNHHib5991tPCGdRefFY.roa (hash: EpUcGsNtANn2I92T+Rtp83mAtSBCb2jhc++YQOzThrE=)
6: lwR4CDLvnTUuVyA34wT6tah5mv0.roa (hash: JomOdXVvYDHYetjFnHtJimdxkzg8t7h8C+QxsLpI72o=)
7: vcuseHHUp2SFcc7WFCquL547C34.roa (hash: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=)
8: vk3vIZrZ9FMklVLLHWzL1-UixoU.roa (hash: tn/h/KlQHmIkGxmpVq1uDx8JRv/7qIwfuJJhsLuiJGY=)
9: zRMtSyG0erquHg8eDcLfOh4BpSs.roa (hash: fv01yx8YQE61hN1VLmCbWMtgYoNsmN10wZe2YdF/txM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:20:e6:d7:1d:ea:9a:71:aa:8e:b6:83:9f:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jul 28 14:00:44 2026 GMT
Not After : Jul 29 14:00:44 2026 GMT
Subject: CN=dcf4a617dfc16ffd1fce219e6896a13116e8e2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:22:86:ed:7a:40:bd:e1:84:eb:55:9c:0e:
90:2f:95:7c:64:cb:0c:4a:78:5f:04:db:3a:3d:0a:
af:87:70:07:c3:0d:bb:05:0f:a5:cd:28:e5:dc:5a:
68:46:cd:8e:b7:0c:29:a8:7a:03:d0:38:8a:6c:1e:
33:b8:46:37:2f:48:4e:ab:1b:19:fc:27:35:d9:18:
12:f3:38:32:8f:7a:78:41:29:87:6e:aa:09:f4:64:
ed:68:9e:0d:0d:0b:ba:ba:ec:1b:69:72:2f:99:b4:
16:ae:30:d8:cc:9f:d4:a0:ca:33:03:f1:47:ee:a3:
7a:47:90:fd:e7:2f:0c:2e:db:fb:70:db:cf:b0:a3:
31:96:8d:7b:95:2f:b9:a4:6b:e3:a5:0d:35:25:2a:
c4:ea:d0:00:e5:d9:5b:d7:8a:0b:86:61:98:76:cc:
3a:3d:d5:6e:78:ac:3c:cf:e2:8e:3e:0f:1b:f8:09:
d1:8d:8e:02:6b:eb:bc:a9:1d:a5:5b:8a:d4:88:56:
37:64:75:7e:17:1c:c7:38:65:7d:d6:22:ce:73:2b:
7e:21:30:c9:7b:9e:66:bc:d0:94:68:97:e0:74:73:
0b:86:86:e7:ee:b3:f2:39:6c:d1:c7:fb:f1:8d:1d:
cf:3e:b1:36:e2:28:6b:0e:38:51:d7:69:4d:6e:03:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:A6:17:DF:C1:6F:FD:1F:CE:21:9E:68:96:A1:31:16:E8:E2:DC
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e3:28:57:01:51:f3:fe:91:38:e3:b7:0e:c0:4e:e9:28:1d:
ce:b7:4a:f6:92:68:c5:eb:38:27:32:8a:97:2a:2f:80:17:0c:
5f:9d:22:b4:0a:75:e8:d7:f4:ac:63:ba:c9:7c:80:7a:08:29:
da:a2:fb:d1:73:67:11:b6:0c:fe:54:89:24:5e:fb:39:8b:c8:
b5:16:da:be:95:fd:1b:44:71:78:6d:4a:bf:1c:2b:04:2b:6f:
84:f3:44:d5:69:eb:a1:78:25:29:d3:e4:01:e3:44:11:9b:88:
30:fe:d6:03:02:4a:4b:99:a9:d6:0a:e2:36:62:d9:7f:53:23:
2e:6a:8b:be:1d:7c:52:6c:a5:d6:d1:13:bf:c5:4d:fb:a1:56:
c6:b8:04:06:e0:11:78:a2:84:4d:6e:2a:ba:ea:51:e4:4c:52:
e3:53:be:02:7d:61:68:10:e2:7c:a7:d0:f0:07:68:77:cc:1d:
95:e4:ba:1a:bc:a9:a0:ba:a4:f5:42:73:38:cd:6a:eb:d8:a3:
1e:06:90:0d:73:e3:a4:1c:18:62:1d:08:50:31:d8:3b:e7:64:
f8:fa:d3:8b:7c:7a:0e:6d:ce:68:d1:b1:4e:e4:76:1a:74:b6:
bb:24:51:60:0e:bb:8e:58:a6:b2:d6:aa:8a:41:e8:ee:c9:44:
2c:6b:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:45 2026 by rpki-client