Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: Ws1inV13xBuYMC9OBmzxtuUZ3o7Q+phSl+1+Wx/a9Ig=
Subject key identifier: 84:A7:E4:00:2E:22:88:C2:A7:B6:D1:6C:7D:03:74:39:79:8F:D5:BE
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019CAC0FD7CCBC80BBF7F5E67FBC93C78DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: 6bLGAGHTy0Y1yvJ6c20vGncHd4Vmn+CmiI+gM/WEMoY=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:cc:bc:80:bb:f7:f5:e6:7f:bc:93:c7:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=84a7e4002e2288c2a7b6d16c7d037439798fd5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:d0:e4:30:f3:69:48:5c:38:40:59:27:5b:
9d:4f:50:45:9a:b1:1f:53:9c:b0:09:82:3d:4f:25:
c3:89:9c:e1:9d:f4:14:cf:5b:79:c5:d8:33:39:9a:
1a:b4:7b:4c:04:71:a3:bf:4f:00:21:a9:84:06:c5:
3b:33:95:49:23:97:12:a9:cc:e3:bb:88:6d:db:ec:
65:ba:a5:48:c1:ea:0e:ea:b8:c4:13:b7:a1:24:bf:
b3:10:e9:14:77:cf:e1:4f:00:09:71:43:06:6c:e9:
03:08:8d:34:50:fe:92:5f:e0:e8:e2:df:75:e3:3e:
07:07:1f:d4:65:22:91:f7:cc:29:42:28:9d:ae:ff:
5b:65:bf:39:e0:2a:72:1c:38:8e:98:26:12:e1:ff:
0b:a8:2b:14:1b:28:1d:e6:ae:30:3a:2f:1b:ce:67:
1c:56:69:eb:0c:c2:3f:4b:a4:1d:77:12:f9:6a:76:
1c:1e:21:2f:8b:53:f2:fd:3b:fd:b5:46:15:5f:4a:
8d:f8:82:e6:f1:34:6b:05:d3:9f:84:9b:d0:c9:1f:
5d:c0:20:7d:bb:e1:00:d3:70:99:ef:81:07:cc:c8:
96:65:ec:a4:ab:00:89:75:55:5d:bd:59:3a:54:a1:
42:af:82:b8:e6:89:04:c3:df:25:2f:fd:d2:7d:6c:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:E4:00:2E:22:88:C2:A7:B6:D1:6C:7D:03:74:39:79:8F:D5:BE
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:ef:3c:34:aa:91:e0:fa:f9:65:b0:23:c6:4d:0c:f3:2e:
bb:f2:59:66:31:3d:34:1d:85:7d:d9:5c:30:ad:4f:19:9a:25:
b4:83:1a:81:29:8c:df:41:2b:f4:4b:9f:53:70:60:b6:f2:28:
78:bd:07:d0:cc:48:bc:ec:10:8b:3d:48:19:43:db:f7:67:f7:
56:92:3c:59:0f:f7:d7:7b:3d:94:be:6e:7a:50:4f:57:05:72:
57:dd:03:54:2b:ba:57:91:27:c2:1a:ec:d6:d9:63:d2:bf:fe:
0d:44:50:dd:30:64:34:03:f8:ed:c7:a9:d2:1a:d3:e0:e4:d5:
0d:96:8f:d2:be:42:fb:ba:6e:f0:27:e8:3d:b7:7d:36:e6:21:
31:9d:a5:79:cc:26:2e:ac:7b:1d:e1:9b:e9:51:35:55:8a:c2:
8c:7c:b6:4a:79:5e:d9:9b:58:48:d8:14:ee:eb:d2:e2:3b:76:
e5:17:34:d2:07:7a:1b:03:2b:57:2c:ed:42:53:f5:e2:93:ea:
bc:d2:01:a9:27:48:e4:b0:e9:0b:f0:87:21:0f:98:e2:a6:a5:
41:6b:55:e5:d3:c2:66:40:69:65:59:d1:0f:34:d2:31:77:89:
55:0a:52:ed:06:63:4c:7a:a2:5d:7b:b0:35:cf:b2:05:1f:4c:
61:bf:51:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9fMvIC79/Xmf7yTx432MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk
MGVjOGMwHhcNMjYwMzAyMDEwMDQ1WhcNMjYwMzAzMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg4NGE3ZTQwMDJlMjI4OGMyYTdiNmQxNmM3ZDAzNzQzOTc5OGZkNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykzQ5DDzaUhcOEBZJ1udT1BFmrEf
U5ywCYI9TyXDiZzhnfQUz1t5xdgzOZoatHtMBHGjv08AIamEBsU7M5VJI5cSqczj
u4ht2+xluqVIweoO6rjEE7ehJL+zEOkUd8/hTwAJcUMGbOkDCI00UP6SX+Do4t91
4z4HBx/UZSKR98wpQiidrv9bZb854CpyHDiOmCYS4f8LqCsUGygd5q4wOi8bzmcc
VmnrDMI/S6QddxL5anYcHiEvi1Py/Tv9tUYVX0qN+ILm8TRrBdOfhJvQyR9dwCB9
u+EA03CZ74EHzMiWZeykqwCJdVVdvVk6VKFCr4K45okEw98lL/3SfWzX6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISn5AAuIojCp7bRbH0DdDl5j9W+MB8GA1UdIwQY
MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt
YmE5ZDUxZmU5ZTJiLzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi
LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoTvPDSq
keD6+WWwI8ZNDPMuu/JZZjE9NB2FfdlcMK1PGZoltIMagSmM30Er9EufU3BgtvIo
eL0H0MxIvOwQiz1IGUPb92f3VpI8WQ/313s9lL5uelBPVwVyV90DVCu6V5Enwhrs
1tlj0r/+DURQ3TBkNAP47cep0hrT4OTVDZaP0r5C+7pu8CfoPbd9NuYhMZ2lecwm
Lqx7HeGb6VE1VYrCjHy2Snle2ZtYSNgU7uvS4jt25Rc00gd6GwMrVyztQlP14pPq
vNIBqSdI5LDpC/CHIQ+Y4qalQWtV5dPCZkBpZVnRDzTSMXeJVQpS7QZjTHqiXXuw
Nc+yBR9MYb9RtA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:56 2026 by rpki-client