Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: AHHCKfPdS81P7LuEdqxnXRz5wHGSA1ItTWxnhw4cxvo=
Subject key identifier: 1F:D9:AE:0B:0E:ED:76:C8:50:DE:40:6F:A5:0C:EB:18:52:2A:86:A4
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019CAB6BDDAF8AD555C2AD552559B939FCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0FA9
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: xrNmOSddw4PY3gPvtGh898p1Gt7+oG33w9YGKidkmFw=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:dd:af:8a:d5:55:c2:ad:55:25:59:b9:39:fc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=1fd9ae0b0eed76c850de406fa50ceb18522a86a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:5c:70:ec:86:32:90:68:14:83:2d:99:fc:
4b:ed:65:0e:e5:ee:30:a6:b5:00:09:4a:49:0d:48:
42:6c:85:4f:a2:cd:7f:a8:81:d9:56:63:67:c6:97:
46:f3:16:37:77:44:28:b7:22:bf:4e:0b:74:67:32:
8b:cf:16:71:67:2d:d1:b4:4d:d0:19:a8:43:36:c9:
b8:c7:49:bf:2e:ff:05:39:e9:27:26:39:5f:c7:e2:
f7:76:93:39:b6:54:0c:b8:8c:89:5c:c0:d8:bb:14:
d9:98:11:46:b1:9f:77:1f:eb:3a:8b:6c:ad:98:7d:
f2:79:1c:b7:22:a7:cc:25:b8:af:dd:63:4e:55:6d:
f3:32:ce:45:07:3a:35:fc:69:e2:68:8c:9d:ef:15:
2c:2b:ee:2c:40:07:a7:a2:72:83:71:d5:5a:0b:de:
d4:15:5d:7b:2a:03:31:59:70:25:bd:76:65:f5:28:
9b:27:ae:11:60:97:5b:6d:00:03:60:29:89:7b:24:
46:df:b0:9c:ae:2d:78:7e:5f:df:18:ee:64:68:29:
53:b1:ea:68:01:24:96:68:8c:75:fb:af:73:da:22:
25:bc:4b:07:db:cd:3e:8a:e3:75:e1:ea:d4:5e:ec:
93:3f:e6:97:13:ee:a7:82:ab:82:9b:db:7b:d2:3e:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:AE:0B:0E:ED:76:C8:50:DE:40:6F:A5:0C:EB:18:52:2A:86:A4
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:27:af:0d:7a:d7:93:df:a8:a7:36:06:7d:80:4e:de:cc:
77:56:34:bb:13:60:68:e2:ac:9c:e7:b0:84:c7:0f:49:d5:2e:
70:4a:fd:5a:23:50:23:39:c8:f4:0f:25:ba:dd:33:8f:af:24:
9b:e1:19:f8:95:34:e0:05:07:7f:6a:a6:d7:fa:c8:be:3d:1b:
91:8a:93:2f:db:5d:57:09:5b:1e:17:a2:2b:16:48:0a:3c:22:
42:5f:88:8c:a7:c5:61:14:c6:68:ec:80:1b:91:93:9b:aa:c5:
1b:a8:11:00:56:61:b5:b4:23:39:e3:16:1e:ca:57:c0:04:6a:
16:1e:89:90:fb:73:92:33:d6:35:14:8d:87:f8:a3:c2:4f:05:
0b:f3:0f:27:14:88:00:e0:b0:ad:de:33:cb:22:b5:a2:d3:a8:
00:b4:66:b4:00:58:86:23:f6:fa:c2:64:e3:69:06:54:0c:f7:
87:d7:b8:cc:bb:6d:c0:84:4f:f9:6b:89:f3:94:8c:02:3e:08:
24:da:b8:79:89:d7:56:a0:88:3d:22:a2:26:4f:c5:94:75:2d:
da:c9:7a:fc:29:d5:31:b1:06:29:f7:01:59:1c:09:62:bd:f9:
fb:4f:d0:aa:23:29:2a:94:c2:df:38:df:26:49:00:a8:30:27:
01:31:0e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra92vitVVwq1VJVm5OfzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0
MWExNmEwHhcNMjYwMzAxMjIwMTM4WhcNMjYwMzAyMjIwMTM4WjAzMTEwLwYDVQQD
EygxZmQ5YWUwYjBlZWQ3NmM4NTBkZTQwNmZhNTBjZWIxODUyMmE4NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yVccOyGMpBoFIMtmfxL7WUO5e4w
prUACUpJDUhCbIVPos1/qIHZVmNnxpdG8xY3d0QotyK/Tgt0ZzKLzxZxZy3RtE3Q
GahDNsm4x0m/Lv8FOeknJjlfx+L3dpM5tlQMuIyJXMDYuxTZmBFGsZ93H+s6i2yt
mH3yeRy3IqfMJbiv3WNOVW3zMs5FBzo1/GniaIyd7xUsK+4sQAenonKDcdVaC97U
FV17KgMxWXAlvXZl9SibJ64RYJdbbQADYCmJeyRG37Ccri14fl/fGO5kaClTsepo
ASSWaIx1+69z2iIlvEsH280+iuN14erUXuyTP+aXE+6ngquCm9t70j51FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/ZrgsO7XbIUN5Ab6UM6xhSKoakMB8GA1UdIwQY
MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt
MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk
LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUInrw16
15PfqKc2Bn2ATt7Md1Y0uxNgaOKsnOewhMcPSdUucEr9WiNQIznI9A8lut0zj68k
m+EZ+JU04AUHf2qm1/rIvj0bkYqTL9tdVwlbHheiKxZICjwiQl+IjKfFYRTGaOyA
G5GTm6rFG6gRAFZhtbQjOeMWHspXwARqFh6JkPtzkjPWNRSNh/ijwk8FC/MPJxSI
AOCwrd4zyyK1otOoALRmtABYhiP2+sJk42kGVAz3h9e4zLttwIRP+WuJ85SMAj4I
JNq4eYnXVqCIPSKiJk/FlHUt2sl6/CnVMbEGKfcBWRwJYr35+0/QqiMpKpTC3zjf
JkkAqDAnATEO8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:04 2026 by rpki-client