Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: 5vEIu3cw53YVVBj/5NECnkwezKLsAJBZEGvOWtykS5U=
Subject key identifier: FB:8E:D5:6A:68:54:98:3D:48:D6:E6:74:54:C2:19:62:AA:2E:FC:BA
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019FA8CFFFA13256B1F41EF766A3CC50AD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:31 +0000
Manifest this update: Tue 28 Jul 2026 13:00:31 +0000
Manifest next update: Wed 29 Jul 2026 13:00:31 +0000
Files and hashes: 1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: hT2sAmNjPzvVJvb+cPEEkiEv/KJbIu3Qw2QktuT4nGc=)
3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:ff:a1:32:56:b1:f4:1e:f7:66:a3:cc:50:ad:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jul 28 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=fb8ed56a6854983d48d6e67454c21962aa2efcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:d6:7c:e5:7e:05:1c:bf:b4:55:1e:f0:b6:
cf:f7:d4:cc:58:11:0d:9e:f4:9d:96:b4:3e:b8:2f:
17:d1:30:ff:b9:22:d3:63:67:3e:93:98:31:b9:6a:
45:f5:cf:2f:1f:02:2a:8c:9e:ac:76:6e:05:a2:78:
fe:5a:9b:1a:34:c5:3f:36:32:f0:43:60:ff:bb:fb:
aa:ff:8f:07:8f:49:47:bd:ca:0c:98:dc:c2:1c:15:
86:e9:01:bf:38:04:93:f7:84:09:73:d2:ec:51:9d:
fb:65:5a:1f:ec:0b:2c:ee:05:cb:80:9c:71:39:44:
38:04:7a:0b:b5:f0:9a:d5:33:95:10:df:5f:bd:01:
b7:7a:2d:86:28:52:89:e1:a2:e0:b6:35:4a:e7:67:
48:cc:1a:7a:13:74:1e:e3:e7:9a:98:ec:67:d9:c8:
cf:18:b9:de:82:ec:44:9e:2b:0f:e9:62:99:7e:c0:
a5:10:58:7b:a2:cd:f3:29:7f:8b:ff:8f:ae:5d:e8:
7b:e2:8e:8f:17:a8:40:5b:45:c3:9f:dc:00:51:ce:
58:a8:cc:4b:78:5f:88:41:a1:84:ea:05:50:96:81:
4f:a0:8d:f5:fd:cb:6f:ba:dc:6b:93:1e:bc:70:5a:
e7:ff:3d:c1:7a:af:86:b1:05:4c:27:b4:69:dd:f0:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:D5:6A:68:54:98:3D:48:D6:E6:74:54:C2:19:62:AA:2E:FC:BA
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:be:7f:1b:ff:02:5f:82:10:cb:10:7d:30:29:1b:f9:db:
67:44:aa:1d:b7:37:c9:4f:02:50:7e:87:d8:e7:fa:12:3f:20:
f6:59:12:50:bd:48:5a:9c:6d:91:77:32:90:ea:95:8e:86:1b:
1f:48:03:6c:3f:6b:ae:ca:65:46:ec:13:31:5f:04:f3:7a:b5:
92:29:32:94:cd:0f:31:7a:aa:79:bc:40:52:63:00:4a:b4:35:
6a:0f:f7:8f:c8:16:14:69:41:9c:b7:1c:e3:71:3e:8b:bd:51:
d0:63:08:10:b2:5b:2c:7e:87:87:af:ac:d1:8f:e3:3e:ff:10:
ea:5e:b1:d6:39:66:d8:39:85:d5:b6:63:6d:5f:37:0a:63:38:
ef:6f:bd:0b:78:a2:e0:27:13:ac:05:9f:16:eb:e9:99:f9:d0:
44:7f:8b:e6:18:96:ce:63:2e:d6:ea:1f:99:75:31:2f:0e:f0:
c8:5d:60:24:c6:ab:18:8d:31:08:c4:37:c9:8a:24:71:7d:2b:
0b:b0:bb:15:60:78:f4:ad:b4:5c:0d:71:d3:22:85:3f:61:11:
71:cf:7d:8e:64:87:35:35:a8:8c:e9:5f:dd:34:23:cb:ed:f9:
b5:29:2d:cb:e7:e5:21:99:e1:51:39:b5:7d:16:47:4b:e9:87:
69:41:6f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz/+hMlax9B73ZqPMUK0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk
MGVjOGMwHhcNMjYwNzI4MTMwMDMxWhcNMjYwNzI5MTMwMDMxWjAzMTEwLwYDVQQD
EyhmYjhlZDU2YTY4NTQ5ODNkNDhkNmU2NzQ1NGMyMTk2MmFhMmVmY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqDWfOV+BRy/tFUe8LbP99TMWBEN
nvSdlrQ+uC8X0TD/uSLTY2c+k5gxuWpF9c8vHwIqjJ6sdm4Fonj+WpsaNMU/NjLw
Q2D/u/uq/48Hj0lHvcoMmNzCHBWG6QG/OAST94QJc9LsUZ37ZVof7Ass7gXLgJxx
OUQ4BHoLtfCa1TOVEN9fvQG3ei2GKFKJ4aLgtjVK52dIzBp6E3Qe4+eamOxn2cjP
GLneguxEnisP6WKZfsClEFh7os3zKX+L/4+uXeh74o6PF6hAW0XDn9wAUc5YqMxL
eF+IQaGE6gVQloFPoI31/ctvutxrkx68cFrn/z3Beq+GsQVMJ7Rp3fDM8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuO1WpoVJg9SNbmdFTCGWKqLvy6MB8GA1UdIwQY
MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt
YmE5ZDUxZmU5ZTJiLzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi
LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoy+fxv/
Al+CEMsQfTApG/nbZ0SqHbc3yU8CUH6H2Of6Ej8g9lkSUL1IWpxtkXcykOqVjoYb
H0gDbD9rrsplRuwTMV8E83q1kikylM0PMXqqebxAUmMASrQ1ag/3j8gWFGlBnLcc
43E+i71R0GMIELJbLH6Hh6+s0Y/jPv8Q6l6x1jlm2DmF1bZjbV83CmM472+9C3ii
4CcTrAWfFuvpmfnQRH+L5hiWzmMu1uofmXUxLw7wyF1gJMarGI0xCMQ3yYokcX0r
C7C7FWB49K20XA1x0yKFP2ERcc99jmSHNTWojOlf3TQjy+35tSkty+flIZnhUTm1
fRZHS+mHaUFvuA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:09:24 2026 by rpki-client