Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: c3aJi8T8uT/ihFdi7TcW7RfyCUY/vcTek9pvf0qMDWs=
Subject key identifier: FB:D3:C3:F0:CB:83:CC:7A:33:CA:94:2E:47:51:F0:D2:FC:CB:A9:55
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01A1BFC19C26C7E738C4F4A55151C52EC32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1AE9
Signing time: Mon 09 Nov 2026 10:01:38 +0000
Manifest this update: Mon 09 Nov 2026 10:01:38 +0000
Manifest next update: Tue 10 Nov 2026 10:01:38 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: ELniXN5RWT/kpbwVLZ1JzCzFHynPSwOSG78qRiUVqMs=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:c1:9c:26:c7:e7:38:c4:f4:a5:51:51:c5:2e:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Nov 9 10:01:38 2026 GMT
Not After : Nov 10 10:01:38 2026 GMT
Subject: CN=fbd3c3f0cb83cc7a33ca942e4751f0d2fccba955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:1c:d2:47:5c:2a:20:bf:33:22:d0:0a:4c:
2d:0d:cc:15:b8:05:1c:1a:e7:31:14:8a:e6:1c:5c:
9f:3b:35:d7:d5:d1:40:e2:8f:ff:94:0d:f7:6d:4e:
32:18:5b:2d:c2:5b:76:df:66:06:b4:2d:ba:a0:1a:
c2:e5:e9:59:e5:3a:6f:be:7f:58:8d:56:b6:2a:35:
ed:5a:05:61:8c:b3:37:b0:42:54:bd:d5:ac:9b:30:
f0:c1:91:da:10:be:78:ce:44:7f:c2:a5:a5:2c:e4:
6c:af:50:6b:97:71:7a:c3:2f:df:58:4d:f9:47:a3:
8c:3b:f2:f8:10:55:eb:3a:3f:65:0d:5a:0f:a0:5d:
d1:d6:a7:d7:f0:e3:87:5d:60:68:be:5b:26:d7:1f:
23:8f:0c:df:e8:d6:6b:5a:b6:80:88:85:3d:a9:93:
f3:3a:fc:17:3f:fe:76:36:fe:38:0b:6e:a8:61:2b:
89:20:f4:72:d8:98:91:7e:7b:b9:c2:ac:ea:9b:e1:
0c:8c:71:63:10:5f:6f:d1:83:cd:91:6d:3a:c7:13:
39:97:1b:5d:a1:fb:ba:5a:fd:27:a3:48:c1:70:68:
df:b1:51:06:c8:4f:cf:0f:05:10:db:33:f3:1c:9c:
84:4f:f1:54:0f:c7:67:67:11:5e:a6:23:7f:0c:10:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D3:C3:F0:CB:83:CC:7A:33:CA:94:2E:47:51:F0:D2:FC:CB:A9:55
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:88:01:c2:85:29:04:65:d0:c6:eb:aa:e6:95:f8:0c:ea:
86:14:73:62:f1:e4:a8:5c:d9:e8:8f:2d:62:d7:2d:14:f8:77:
45:55:b0:0e:96:12:75:df:e5:4b:0a:b4:92:51:58:df:c9:9d:
1d:29:ed:4c:e9:31:91:1e:34:4d:b4:d2:1c:fe:df:51:3e:ba:
2b:a5:50:33:4f:b4:4a:0f:4d:33:eb:30:15:b8:0a:76:91:a7:
b4:af:22:13:bf:d6:ac:5f:f7:ba:75:64:aa:ce:b4:a2:92:ec:
d5:13:1e:cf:df:f1:bd:51:eb:8b:a4:dd:3a:7f:24:83:ba:9a:
b2:a9:3c:39:7f:f3:37:1c:99:df:73:32:6d:af:56:9f:74:39:
a9:61:49:3d:bb:39:03:0e:7e:da:20:51:e4:cc:fa:48:d9:79:
e1:d4:a0:41:82:bc:e2:3a:96:88:1f:dd:8c:99:0f:69:b7:c4:
ee:35:48:e3:2c:75:19:a2:74:e0:b1:1f:92:1a:04:4b:a9:ac:
85:50:f4:4a:ec:50:fd:84:4f:de:03:9d:5a:69:35:cd:20:f2:
e0:45:08:57:e3:bd:65:a7:00:dd:64:17:69:48:68:5e:96:ef:
67:dd:59:86:57:a1:b6:79:43:3c:e6:1a:1f:bc:f3:ed:f1:81:
7b:76:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 18:02:47 2026 by rpki-client