Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: aCTrTK+rnT3yJc2tHkKs+ZP71LMOV6a7IwE+BGzhfCc=
Subject key identifier: A2:EC:97:80:2C:4D:74:6E:A4:62:80:C2:83:1F:A2:F9:DC:3F:CA:CD
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019EC0A3B29CC4ECE9449539FA5DD0B5771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 16AC
Signing time: Sat 13 Jun 2026 11:00:13 +0000
Manifest this update: Sat 13 Jun 2026 11:00:13 +0000
Manifest next update: Sun 14 Jun 2026 11:00:13 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: pi/Yqf3WobLWdvOwe2m21VRFUfI8bKNR12Ux3VVRrRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:b2:9c:c4:ec:e9:44:95:39:fa:5d:d0:b5:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jun 13 11:00:13 2026 GMT
Not After : Jun 14 11:00:13 2026 GMT
Subject: CN=a2ec97802c4d746ea46280c2831fa2f9dc3fcacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:99:88:dd:ef:a6:bc:ea:6b:cd:9b:f6:c3:
23:2d:b2:38:94:45:f4:e5:2a:47:e0:5c:68:f5:e0:
ea:97:f6:40:dd:4d:7c:27:ad:3d:86:db:71:a5:76:
c3:a1:8a:a4:fe:ec:a2:e4:c5:01:27:a6:76:77:1c:
fe:47:f5:0c:82:21:c4:20:d9:4d:8a:8c:52:25:58:
7d:a0:98:3f:ee:5e:7a:b2:8d:30:7d:7c:e6:34:f7:
91:b2:bf:0c:87:29:ba:71:4e:6a:22:22:38:98:f1:
b2:e7:20:f3:c4:1d:ff:00:b5:58:ac:9a:68:b4:bd:
48:75:9f:cc:06:75:ea:54:93:69:a7:1e:ed:e6:ca:
a1:31:b8:54:c4:9b:12:76:8c:1d:88:b0:d5:72:b7:
37:b7:bc:e0:28:1e:66:95:8f:c3:8c:86:5c:38:5f:
84:b3:40:71:25:e1:8c:8e:b0:ea:3e:c0:b7:c7:48:
d0:02:2e:d9:79:cc:c7:c6:e0:91:50:51:7a:4d:8d:
1c:1c:23:2f:e8:55:b1:46:84:cc:a8:c9:c5:af:65:
29:0a:3e:9d:62:c3:a3:fd:9c:2d:d0:65:73:80:70:
71:6a:51:95:ff:66:f0:ad:f3:67:10:7b:6b:d4:52:
48:4f:1a:8e:49:fb:cf:49:2a:62:f5:77:9e:94:28:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:97:80:2C:4D:74:6E:A4:62:80:C2:83:1F:A2:F9:DC:3F:CA:CD
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:53:19:45:91:8a:4f:c7:d3:58:5b:2f:23:36:f3:19:ff:fc:
4b:81:b8:e5:49:ae:74:77:32:c5:36:a3:92:bd:b0:fb:73:8b:
da:ca:75:65:61:ac:77:01:89:88:26:51:81:a5:4b:ac:2e:08:
26:c0:e2:94:8c:f9:d0:27:65:44:98:a2:c1:61:b3:1e:9e:bf:
f8:6a:c2:d0:84:ac:8c:01:b5:09:e5:c3:31:59:92:42:78:50:
57:b5:03:1a:8d:26:6e:e0:97:8f:06:eb:73:5f:ab:16:2b:10:
0c:85:21:4b:ab:9b:cc:5a:98:53:cb:50:19:2e:aa:a7:38:7f:
4d:ee:6d:dc:b7:28:b0:9c:73:ca:06:0a:81:c3:e6:c1:a2:a8:
93:f3:bb:cd:aa:29:19:cf:22:f3:6c:f0:4e:73:98:7a:d2:f2:
b2:7e:d7:88:59:6e:d9:5f:aa:4f:84:ec:36:09:84:dc:d2:1e:
57:9c:f5:42:89:9a:7e:ee:36:80:0a:f3:2f:0e:62:71:7c:73:
d6:31:58:b5:05:c4:92:23:71:93:2d:3f:fb:9e:46:ab:a8:af:
d6:58:eb:37:48:13:f6:97:75:47:ed:ba:2b:24:0a:64:19:c8:
43:6f:71:d9:39:07:cd:e5:97:96:ec:10:6b:8f:06:8e:cf:d3:
74:4a:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:39 2026 by rpki-client