Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: nkab/UgF1heZcotlFZtNHoRWGAR1nOREjQFVgaCjVGQ=
Subject key identifier: 0B:F9:10:A5:A0:75:4C:36:73:74:75:27:5F:B2:36:30:89:B5:F3:FB
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01A0C2C3E921DF52D94F0FF4CF7EB6E3D3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 07:00:14 +0000
Manifest this update: Mon 21 Sep 2026 07:00:14 +0000
Manifest next update: Tue 22 Sep 2026 07:00:14 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: B7cJDm1eqfFG1+DzzK3YuJvPNGxNALExhN99/ghOSbw=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:e9:21:df:52:d9:4f:0f:f4:cf:7e:b6:e3:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Sep 21 07:00:14 2026 GMT
Not After : Sep 22 07:00:14 2026 GMT
Subject: CN=0bf910a5a0754c36737475275fb2363089b5f3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:2e:1a:6e:2b:50:ab:0c:e6:3c:9b:4f:66:
44:2f:c3:c6:e7:cd:60:ef:28:c8:39:52:43:92:c2:
84:2e:38:84:e0:43:3c:bb:e6:22:d7:11:00:c5:b7:
ae:db:01:f8:59:1c:86:b3:80:b5:21:32:32:bb:f0:
a7:ff:72:28:a6:1a:8c:8a:61:0b:45:68:bf:41:51:
cb:00:5a:0e:c1:db:c5:bd:8d:dc:0c:f8:47:a2:a7:
7c:f6:05:61:d3:0e:5a:60:db:27:40:a1:b6:67:c9:
d7:e2:b1:0e:00:e7:82:80:e8:5f:15:8a:36:86:c7:
4b:e5:39:27:88:84:fd:9b:ed:4c:a9:bd:d0:06:9a:
4c:08:5a:4c:c3:0e:1e:0d:49:19:10:73:a1:34:3c:
3d:8f:3c:44:0d:f4:ed:a0:36:e2:3e:78:06:ee:28:
22:41:7a:6a:64:bd:d2:f1:30:01:1b:3c:0c:a6:43:
40:78:5e:73:1a:74:e7:73:25:f6:d3:49:5c:96:00:
5a:95:4d:6b:9a:b8:4d:5e:5c:db:ca:00:5d:93:8f:
8c:9e:ac:0e:da:70:22:73:a5:19:82:bd:fc:73:11:
b8:1b:78:5e:6f:11:76:37:8a:e0:9b:6b:5e:74:7d:
39:5b:99:2f:0d:e0:55:fe:f4:ec:b7:21:af:c8:bd:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F9:10:A5:A0:75:4C:36:73:74:75:27:5F:B2:36:30:89:B5:F3:FB
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:22:e9:6c:ab:af:5b:4f:60:d6:d4:08:df:b4:c3:2b:80:07:
8f:c0:01:a0:e8:1e:18:a6:9f:92:bf:80:de:97:c3:47:6c:35:
6d:e1:b8:26:2e:af:d9:60:81:c9:f2:4a:3f:57:a3:d8:b9:c8:
c2:ed:b9:f6:89:ff:fc:6f:df:6a:81:f4:87:d8:4c:3d:5f:b3:
6d:74:1c:e2:97:eb:ec:76:6f:e4:ff:ca:4b:ff:bf:cb:09:40:
f5:ee:84:06:98:aa:90:c7:6f:d5:fb:5b:1c:2a:31:bb:a7:64:
89:03:5a:db:13:e0:b1:26:25:20:35:a3:54:b0:cb:95:8d:9c:
45:46:10:0b:12:dc:bd:d6:5e:62:c4:0f:f8:5a:5e:63:3e:75:
73:55:de:23:27:48:1d:69:87:86:4e:7b:f2:61:21:ab:4a:2d:
0f:e2:41:56:5a:22:7e:58:7e:b5:0d:67:d8:3d:0e:1f:db:9f:
b6:30:05:00:d4:05:e7:de:4e:5c:c1:1e:45:d1:78:d4:02:e2:
7f:64:1b:b8:b5:d6:36:4a:ae:cc:fc:eb:1f:60:af:cc:64:dd:
38:a0:24:7a:dc:18:af:34:f0:05:4c:d4:77:76:cc:c0:8b:b5:
19:de:90:93:cc:8a:64:f9:d6:78:d8:e8:11:6b:3e:e4:66:15:
fb:31:69:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCw+kh31LZTw/0z36249PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk
MGVjOGMwHhcNMjYwOTIxMDcwMDE0WhcNMjYwOTIyMDcwMDE0WjAzMTEwLwYDVQQD
EygwYmY5MTBhNWEwNzU0YzM2NzM3NDc1Mjc1ZmIyMzYzMDg5YjVmM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeYuGm4rUKsM5jybT2ZEL8PG581g
7yjIOVJDksKELjiE4EM8u+Yi1xEAxbeu2wH4WRyGs4C1ITIyu/Cn/3IophqMimEL
RWi/QVHLAFoOwdvFvY3cDPhHoqd89gVh0w5aYNsnQKG2Z8nX4rEOAOeCgOhfFYo2
hsdL5TkniIT9m+1Mqb3QBppMCFpMww4eDUkZEHOhNDw9jzxEDfTtoDbiPngG7igi
QXpqZL3S8TABGzwMpkNAeF5zGnTncyX200lclgBalU1rmrhNXlzbygBdk4+MnqwO
2nAic6UZgr38cxG4G3hebxF2N4rgm2tedH05W5kvDeBV/vTstyGvyL3OEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv5EKWgdUw2c3R1J1+yNjCJtfP7MB8GA1UdIwQY
MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt
YmE5ZDUxZmU5ZTJiLzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi
LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCLpbKuv
W09g1tQI37TDK4AHj8ABoOgeGKafkr+A3pfDR2w1beG4Ji6v2WCByfJKP1ej2LnI
wu259on//G/faoH0h9hMPV+zbXQc4pfr7HZv5P/KS/+/ywlA9e6EBpiqkMdv1ftb
HCoxu6dkiQNa2xPgsSYlIDWjVLDLlY2cRUYQCxLcvdZeYsQP+FpeYz51c1XeIydI
HWmHhk578mEhq0otD+JBVloiflh+tQ1n2D0OH9uftjAFANQF595OXMEeRdF41ALi
f2QbuLXWNkquzPzrH2CvzGTdOKAketwYrzTwBUzUd3bMwIu1Gd6Qk8yKZPnWeNjo
EWs+5GYV+zFpLg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:56:40 2026 by rpki-client