Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: /PTOPnJnxZUbozZaTFNiqaxSzG9Am30lbJPB2UaB5Cg=
Subject key identifier: CA:D2:84:93:60:8C:32:64:8E:78:19:9D:1E:BA:63:8B:05:4C:4E:98
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019FAA19ED32ADFE0D59E6EFF3873777B6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 1136
Signing time: Tue 28 Jul 2026 19:00:53 +0000
Manifest this update: Tue 28 Jul 2026 19:00:53 +0000
Manifest next update: Wed 29 Jul 2026 19:00:53 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: a+WXy02HCIb/T7Z6UujuEUd4m1PsEjacSsevHsvU9ZQ=)
2: caKUs3eqb1C-2Yju8MusRYTam6U.roa (hash: NPWp22I7VFgBs3i27P5Ky/kdDBlPWyPBqWXmEv0PUv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ed:32:ad:fe:0d:59:e6:ef:f3:87:37:77:b6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jul 28 19:00:53 2026 GMT
Not After : Jul 29 19:00:53 2026 GMT
Subject: CN=cad28493608c32648e78199d1eba638b054c4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:ae:6a:3d:21:96:22:dd:e4:53:57:94:15:
fe:45:74:7f:3c:a8:fd:df:60:bc:0f:41:36:2e:49:
98:e0:b4:84:9c:4d:c7:c2:60:d0:f8:2c:83:61:44:
f5:98:47:01:d6:4b:6d:b6:2b:67:c5:30:b6:af:1f:
dc:b4:7b:3e:ea:44:aa:48:66:f5:c8:79:74:fc:bb:
e2:d1:cf:86:4d:de:d4:87:e3:8d:c7:a9:ff:bd:8f:
5f:40:76:84:51:d8:f8:a8:c5:0b:61:0c:5f:14:ea:
94:bf:8a:a3:eb:62:f4:de:96:d3:09:80:d3:81:37:
82:c6:c4:7f:29:f6:e9:c3:7f:06:1c:e3:a2:71:c9:
3e:02:8b:e7:a2:80:85:3b:83:44:a3:75:36:15:2c:
4f:b6:bc:39:95:b5:fa:95:eb:ba:38:27:5c:ba:d2:
91:4b:4e:0e:4c:9a:16:9c:0c:10:a2:ac:91:75:52:
3d:d6:f6:be:71:0c:2e:c3:f5:8c:be:03:c1:c3:6e:
6b:fb:09:32:c6:95:4d:0e:38:91:18:f5:28:40:d6:
1c:06:51:ad:f6:88:b7:32:f6:ae:57:86:78:c7:68:
a1:1e:f8:9b:f2:cb:bb:b1:f9:b6:c4:51:cf:46:98:
5e:2b:df:36:8e:e5:99:85:46:d9:c5:c3:55:5a:b6:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:84:93:60:8C:32:64:8E:78:19:9D:1E:BA:63:8B:05:4C:4E:98
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2d:09:f7:91:c3:d6:c4:3f:e2:e0:f4:80:ed:a6:5e:1f:d3:
65:67:df:76:63:a9:f4:da:15:b1:54:e3:85:7a:d9:06:88:4d:
68:3a:22:36:b8:30:8b:88:6f:0b:bf:64:c1:32:7f:b8:ef:ea:
20:c5:4c:72:cb:7e:98:32:1d:dd:bf:78:40:51:47:c9:35:0a:
3f:a0:b6:3c:d5:70:dc:8c:ed:57:f3:30:d3:9d:7b:0b:00:71:
d8:1a:2b:99:eb:73:ba:57:b9:ce:33:bd:45:2c:a1:3c:90:66:
2b:2d:4a:70:6e:49:73:78:20:fc:c4:16:fb:2f:79:84:41:ce:
d3:f1:02:ed:e1:93:c1:32:a4:10:13:9f:a1:fd:d6:98:43:c4:
f8:62:5d:32:70:a8:90:dd:e1:0e:a1:77:38:6a:8b:69:df:7f:
59:e4:4d:6f:ac:c3:33:a6:a0:47:98:8b:3c:05:73:9d:e4:d4:
fc:87:aa:56:67:32:f5:df:03:ba:c5:4b:29:2b:d4:f6:b4:72:
46:73:91:57:62:5b:10:69:87:1f:a4:e2:ff:17:c6:8d:c4:6b:
0f:ff:8b:5c:96:21:11:42:11:09:ca:50:1d:ed:42:4e:40:14:
5e:69:e1:1e:17:0c:61:ac:c1:d0:c3:33:43:ba:0c:03:82:d5:
d1:25:d7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGe0yrf4NWebv84c3d7bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0
MWExNmEwHhcNMjYwNzI4MTkwMDUzWhcNMjYwNzI5MTkwMDUzWjAzMTEwLwYDVQQD
EyhjYWQyODQ5MzYwOGMzMjY0OGU3ODE5OWQxZWJhNjM4YjA1NGM0ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzmuaj0hliLd5FNXlBX+RXR/PKj9
32C8D0E2LkmY4LSEnE3HwmDQ+CyDYUT1mEcB1ktttitnxTC2rx/ctHs+6kSqSGb1
yHl0/Lvi0c+GTd7Uh+ONx6n/vY9fQHaEUdj4qMULYQxfFOqUv4qj62L03pbTCYDT
gTeCxsR/Kfbpw38GHOOicck+AovnooCFO4NEo3U2FSxPtrw5lbX6leu6OCdcutKR
S04OTJoWnAwQoqyRdVI91va+cQwuw/WMvgPBw25r+wkyxpVNDjiRGPUoQNYcBlGt
9oi3MvauV4Z4x2ihHvib8su7sfm2xFHPRpheK982juWZhUbZxcNVWraTDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrShJNgjDJkjngZnR66Y4sFTE6YMB8GA1UdIwQY
MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt
MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk
LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC0J95HD
1sQ/4uD0gO2mXh/TZWffdmOp9NoVsVTjhXrZBohNaDoiNrgwi4hvC79kwTJ/uO/q
IMVMcst+mDId3b94QFFHyTUKP6C2PNVw3IztV/Mw0517CwBx2Bormetzule5zjO9
RSyhPJBmKy1KcG5Jc3gg/MQW+y95hEHO0/EC7eGTwTKkEBOfof3WmEPE+GJdMnCo
kN3hDqF3OGqLad9/WeRNb6zDM6agR5iLPAVzneTU/IeqVmcy9d8DusVLKSvU9rRy
RnORV2JbEGmHH6Ti/xfGjcRrD/+LXJYhEUIRCcpQHe1CTkAUXmnhHhcMYazB0MMz
Q7oMA4LV0SXXEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:21 2026 by rpki-client