Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: gU8fi9tPJafe3g5RsdrWxnyqZgNk7fuRBzzUIxM0xgs=
Subject key identifier: FB:1A:22:95:6E:AC:81:8A:67:E6:E3:D1:10:CA:13:FE:A4:6D:D1:8F
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019D99997E5A01137C6B799FDD39E73E942B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: AnqW0hO926dsYodrw8rxVV3a5/F3LKwp6y+aJZpXsxU=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7e:5a:01:13:7c:6b:79:9f:dd:39:e7:3e:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=fb1a22956eac818a67e6e3d110ca13fea46dd18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:cf:8c:d4:ed:8c:a0:6b:af:b1:dc:b3:db:
64:40:53:2b:c9:29:f4:29:2e:aa:76:27:10:05:24:
39:db:8c:e9:79:05:1d:3f:a7:69:0e:4c:46:a6:0c:
1f:25:1d:98:6c:55:15:25:9e:83:a6:12:31:d3:f3:
cc:1a:f1:ea:a5:7c:82:af:59:31:31:97:74:70:ce:
68:20:35:0e:bd:6a:f6:7a:b9:67:a0:ba:ee:92:67:
81:cc:7a:e8:5a:9e:db:22:39:35:f7:71:b8:e1:8e:
6f:d5:1b:5b:0f:f7:fa:16:56:4c:e9:27:b4:24:2a:
62:6f:ed:f3:1b:39:4a:3f:1f:27:c4:2a:a0:56:1d:
73:30:97:a8:fa:ed:d9:8e:ce:56:9a:18:04:91:fb:
9a:91:83:5a:59:4b:3f:59:f5:aa:0e:3a:55:1c:2e:
90:c0:d9:ed:33:a0:df:5b:e0:f2:4c:df:0b:b0:f6:
1e:f4:f4:a2:e0:17:a1:f1:69:7d:cd:7a:fd:b8:44:
96:6f:87:aa:70:04:29:66:8e:d0:90:cf:af:f9:17:
8b:82:e8:38:cf:53:7f:bf:1f:55:c9:63:51:a9:8b:
1e:70:bd:e4:2a:cc:42:d6:0c:cd:32:39:ee:fd:b7:
43:c8:4e:46:00:b3:2e:0a:76:eb:7e:31:b0:b5:cf:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1A:22:95:6E:AC:81:8A:67:E6:E3:D1:10:CA:13:FE:A4:6D:D1:8F
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:d8:bf:57:15:9d:bd:8f:32:d0:ff:4e:f3:1f:95:99:c0:
02:3b:1c:f0:d6:95:ef:9c:9e:b4:21:7f:09:8a:a7:be:65:29:
ed:df:ae:c1:2f:93:df:2a:2e:9a:50:fd:61:e6:dd:17:c3:d9:
85:95:29:61:6a:36:06:92:22:18:28:e5:eb:93:d5:f2:9a:7d:
89:a8:c7:86:5e:6b:20:56:a9:3c:e7:a3:fd:f6:6d:99:de:55:
5f:3c:37:9b:70:3f:19:2e:9c:f9:77:9a:22:04:ed:65:65:22:
fd:be:30:4c:30:6a:b1:c7:72:0c:55:b6:df:45:57:7d:b7:e8:
09:25:4a:81:12:2b:96:0f:9c:50:fb:82:8e:76:8d:2c:62:69:
8e:68:5b:dd:9c:9a:6e:80:35:a4:46:05:ad:65:b7:8e:8d:74:
ce:72:c6:15:ec:19:6c:d7:a7:ba:2d:e8:08:b4:08:ae:61:c9:
36:06:43:4f:e4:44:42:4b:47:ce:de:26:94:c4:85:51:7d:4e:
47:39:bd:2c:4d:9b:7d:fc:0a:b7:92:41:75:88:f5:ba:e6:50:
54:10:ab:4b:68:f2:bb:15:c2:01:cc:a9:86:4e:04:2a:0d:f3:
b3:59:ea:a1:69:b0:82:f6:db:7d:fd:b9:ba:06:e6:c1:b2:6a:
17:47:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:51:32 2026 by rpki-client