Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: qMmC+EUcfwGe7z/J2A6eyH6YZK+A7vSCXMAvEG7SyyY=
Subject key identifier: 18:D3:5F:B5:DF:52:E4:AB:88:F0:3D:7E:C2:6A:01:1D:1D:B3:97:1E
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 01A0DF1851F8266FBEFDDC882CD19DCECC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 11D6
Signing time: Sat 26 Sep 2026 19:01:47 +0000
Manifest this update: Sat 26 Sep 2026 19:01:47 +0000
Manifest next update: Sun 27 Sep 2026 19:01:47 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: icN4UEdQmnKzcrzzsxWrF62gfY74vf8fay4JVzsTuuw=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:51:f8:26:6f:be:fd:dc:88:2c:d1:9d:ce:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Sep 26 19:01:47 2026 GMT
Not After : Sep 27 19:01:47 2026 GMT
Subject: CN=18d35fb5df52e4ab88f03d7ec26a011d1db3971e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:07:f6:98:c9:a8:50:b0:1e:c0:d7:a5:51:
85:6d:82:ec:46:fe:8d:71:bf:b1:bf:3f:fb:21:1f:
53:1b:cf:f3:1a:0f:ff:ac:72:be:10:45:3d:2f:80:
94:54:96:d1:df:81:22:4e:80:d6:e9:53:2b:38:9c:
a4:6a:71:95:b6:15:92:37:4e:4d:27:62:81:2a:fd:
14:2d:7a:c3:f9:39:4a:3b:58:b2:13:8a:af:41:91:
fb:fd:4e:bd:d5:ae:f9:da:43:71:e8:4f:ba:9b:51:
30:f8:f7:99:10:3f:ce:f1:7a:ac:2c:31:3f:80:22:
18:f8:bf:20:3e:fa:2b:f8:54:5d:2d:02:01:40:2f:
75:9d:51:8c:c6:e7:b9:7e:26:f0:08:53:27:4b:88:
91:c2:a8:b0:2e:09:fd:29:26:7e:76:19:3e:2f:b9:
29:22:fd:a9:b2:9a:d6:48:17:83:e2:18:ba:27:5e:
2a:42:3f:07:34:08:a7:1d:53:70:d3:4a:2f:15:4a:
95:93:15:62:a9:fa:4d:db:6c:34:ba:13:95:0b:35:
d1:d7:51:10:43:a6:72:1f:d8:da:9e:01:38:a7:91:
52:f5:fe:a0:10:67:99:6d:cb:53:51:42:46:e5:fe:
fa:9c:85:45:0b:c6:53:da:6a:d9:cd:9b:aa:0d:63:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:5F:B5:DF:52:E4:AB:88:F0:3D:7E:C2:6A:01:1D:1D:B3:97:1E
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:35:08:58:4a:ef:88:4f:9e:48:29:ff:10:7b:5a:f4:64:
65:62:d7:87:95:e5:ce:35:7a:a3:26:8e:2b:2e:19:e1:a1:a8:
2c:73:72:c3:6a:33:41:0c:70:f8:3d:e7:f6:78:34:ad:50:4f:
e2:5d:32:14:86:f9:40:2b:c8:a9:d5:12:0a:27:06:53:6d:ba:
b3:1b:e7:20:01:e5:27:8c:e4:9b:54:e9:9b:62:3c:69:8d:ab:
49:ff:3d:7d:d1:c3:95:1c:70:cd:28:f2:5d:17:9f:19:48:19:
17:e2:74:f1:ba:05:ce:1a:8a:0b:71:01:d7:c0:6c:93:03:ba:
76:23:47:d8:df:15:5e:b2:49:fe:f8:cb:06:2a:e5:75:19:df:
88:d3:a3:e0:7d:b2:fc:77:41:ea:61:18:a1:48:47:38:a9:3d:
2c:9b:cd:40:9f:56:44:3c:e5:2e:63:87:83:9c:86:b2:b0:97:
52:6a:17:b0:6f:e2:3b:7c:70:a9:fb:34:9d:99:c1:9e:e3:4c:
f9:39:83:95:99:7d:35:42:45:6d:ca:be:a7:6f:8e:dd:68:60:
80:cf:e7:01:74:19:8e:7b:e1:64:fc:42:89:8a:b4:30:0c:d9:
5c:3a:2a:06:b9:cf:ee:ad:9b:b8:b9:88:a4:5d:9e:07:c4:e2:
02:18:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:54:36 2026 by rpki-client