Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: 2zcJird4ZRWwmt7boMDtVtNKmE2vX2p8jjPY9H1mDok=
Subject key identifier: 22:D0:1C:70:9E:FC:25:08:C1:FC:20:31:08:CE:32:CE:A6:4B:7F:4C
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019D992AEEE8C7BBF3EF6009F62B4D3DFC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 1613
Signing time: Fri 17 Apr 2026 02:00:20 +0000
Manifest this update: Fri 17 Apr 2026 02:00:20 +0000
Manifest next update: Sat 18 Apr 2026 02:00:20 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: aACzciffbGYxwaWcyl9sAzqRcBE+hgbQVscF+BXPOec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:ee:e8:c7:bb:f3:ef:60:09:f6:2b:4d:3d:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Apr 17 02:00:20 2026 GMT
Not After : Apr 18 02:00:20 2026 GMT
Subject: CN=22d01c709efc2508c1fc203108ce32cea64b7f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:1d:c4:11:df:a1:18:e3:58:80:5f:ab:56:
e5:0a:19:eb:64:d1:8e:91:f4:a2:d2:0c:f6:34:e2:
9d:25:79:92:15:1e:e6:2a:97:8b:54:ad:07:38:e9:
f6:6c:bd:11:be:90:a6:c1:30:f6:8a:86:39:a4:b9:
48:f1:4d:65:e8:23:a4:b9:18:88:a2:b2:86:0b:ac:
67:c5:66:6b:95:a5:e3:d4:c6:71:d7:b9:51:5c:44:
9c:d9:e7:41:9d:f8:71:2f:23:fb:a7:51:21:35:80:
0d:80:82:27:92:65:43:45:39:4c:b9:5f:e2:d1:09:
2e:c2:b7:4d:54:32:dc:a7:82:c4:1e:15:5d:5e:64:
ec:37:6a:04:f4:cb:cf:8c:71:83:40:48:61:ec:7e:
c3:ab:64:c8:fc:58:b0:92:1f:be:2b:cf:ec:b7:7c:
17:c5:ef:b5:e1:81:ff:ee:c9:57:b2:92:81:6d:62:
7d:0e:4a:39:19:56:33:10:cb:8a:66:e1:f8:5c:48:
26:10:f5:90:66:c9:84:bd:0d:30:92:27:14:49:a9:
8e:fe:b9:99:a6:75:51:5a:6d:57:3f:dc:e4:f8:d2:
a8:6f:fc:97:65:32:66:55:e1:eb:37:a7:ce:22:2d:
85:40:44:e9:5e:df:ed:c0:ad:e9:47:22:8a:25:c1:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:1C:70:9E:FC:25:08:C1:FC:20:31:08:CE:32:CE:A6:4B:7F:4C
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:33:ed:4d:90:09:62:7c:99:46:51:d3:ce:a4:48:2d:62:b5:
5c:d2:a3:a6:26:3c:25:67:f1:bb:42:18:27:3f:ba:e2:e3:66:
b7:40:a3:6d:8d:06:4b:d8:61:c0:61:6d:cd:6d:ca:04:bc:05:
8a:92:a9:bb:a7:3b:6f:64:95:60:31:c0:ce:6b:74:fc:d7:e8:
42:b4:a1:ed:05:cd:06:de:42:07:cc:6e:2c:f9:06:56:bc:51:
b7:2c:2e:dc:39:fc:cf:3a:d8:2e:7d:04:27:3c:ac:af:63:da:
de:d1:5a:ea:00:2a:2c:f4:d2:c3:b4:a8:29:00:8c:4e:1f:ba:
d9:61:1b:82:68:dc:38:f0:03:4b:20:14:72:09:b0:95:07:c8:
4d:8a:52:f5:02:e1:94:f7:11:8c:02:7c:64:69:45:a7:f1:0d:
29:5e:78:4e:0e:e5:ae:83:3a:9d:1c:35:e0:10:ee:c3:54:b0:
9f:aa:fb:42:58:47:ae:47:7f:db:6d:d9:51:cb:d9:72:b5:48:
e6:98:5b:92:ed:c1:ff:ac:5b:5e:45:bb:94:37:e7:19:48:21:
a5:19:ca:6e:ca:58:5f:a3:24:a1:2a:05:a4:42:35:1e:c0:e6:
5c:58:a1:22:34:43:c4:37:40:5a:fd:78:01:0e:17:6d:93:5f:
5a:5d:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:03 2026 by rpki-client