Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: 47H95nJdpabiKn+2YzjiR7jknjRp5VM62x+LBIhQAFQ=
Subject key identifier: C6:E0:06:3A:AB:3F:E6:B4:FA:8B:80:95:3F:BB:4A:93:5B:60:F9:79
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 01A0C821703CEF492290951ABD54EA1C728A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 17B9
Signing time: Tue 22 Sep 2026 08:00:29 +0000
Manifest this update: Tue 22 Sep 2026 08:00:29 +0000
Manifest next update: Wed 23 Sep 2026 08:00:29 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: UPRhtC2BPVslokcTnBBvWMjgu2QAvcpAsdawLwQDpnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:70:3c:ef:49:22:90:95:1a:bd:54:ea:1c:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Sep 22 08:00:29 2026 GMT
Not After : Sep 23 08:00:29 2026 GMT
Subject: CN=c6e0063aab3fe6b4fa8b80953fbb4a935b60f979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:24:e4:ca:d3:43:da:d1:c2:4d:ac:96:e2:
2f:23:30:86:aa:22:01:71:5e:62:1b:30:c3:dd:b9:
0d:ff:e4:e9:67:1f:39:65:cf:4b:9f:db:ad:71:73:
2f:5f:05:b3:db:f1:16:ba:91:fa:ba:88:4e:9f:02:
86:e7:78:94:7c:58:42:b3:e6:99:17:25:ea:dd:72:
76:ee:96:12:8b:db:50:b9:98:53:c5:13:31:08:4a:
7f:de:17:c1:c4:df:82:82:e6:72:ee:88:7b:1e:8a:
6e:15:11:a2:e1:c9:6b:3c:85:3e:25:5b:27:2b:c7:
96:b9:fe:96:ea:c2:95:35:ab:49:f7:38:f0:a7:c5:
1c:bb:b1:0c:0d:b4:9e:b7:f9:01:ce:40:1f:ce:e3:
ee:3f:e5:0d:46:a8:99:a6:b8:af:ec:ad:a7:a6:25:
49:e1:0c:42:92:45:15:d8:f5:c1:03:b8:78:cd:87:
af:f9:b5:cd:8d:9f:1b:89:65:79:a6:71:a3:6d:9e:
ae:ae:fc:d7:13:1a:45:f4:5c:cb:f7:38:cf:70:3d:
c2:63:11:83:d8:ac:0f:f1:5e:71:4d:cd:e4:d3:ae:
ce:ad:48:00:da:12:38:b7:79:08:e3:cd:6f:0b:90:
cc:a3:07:e7:71:ed:1a:a1:f5:c1:78:da:c7:60:07:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:06:3A:AB:3F:E6:B4:FA:8B:80:95:3F:BB:4A:93:5B:60:F9:79
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a4:19:1a:f5:d5:bd:ba:95:36:13:23:e7:8b:23:84:13:3e:
a4:e2:8f:53:8c:44:3b:c8:56:06:cc:9e:bc:74:22:d8:4d:f4:
5e:83:16:3b:1d:b3:fb:df:99:a2:07:9b:40:65:42:de:41:42:
c7:74:6b:ed:3b:b7:73:86:fb:61:a2:f1:9c:4a:fe:09:10:a0:
ee:59:03:d0:40:b5:f3:48:3a:06:59:cb:e8:01:ba:ca:5b:06:
a7:f6:24:d9:a1:42:f4:51:6b:b1:5f:5c:19:b3:11:d2:50:a0:
81:79:a8:82:7b:5b:cc:a1:d6:7c:77:c6:10:03:a3:3d:7e:44:
67:c4:0c:7d:4a:01:6c:ec:09:50:37:a3:9f:81:03:32:ca:37:
8a:6f:a1:29:8c:3d:b9:93:42:68:8f:4f:7e:b6:be:42:a0:1c:
9f:2b:9c:25:5f:93:ee:0d:ba:19:b5:e1:44:a4:1a:78:75:4b:
8a:88:cb:59:62:b9:4e:dc:22:ca:4e:e9:7f:28:0a:bc:0e:07:
64:49:74:1a:17:b0:e9:30:43:d0:2f:a0:e4:8e:f6:ee:fc:06:
dc:7c:f4:f3:0b:c4:02:ea:7c:d6:36:5a:f8:9f:ef:0a:53:4f:
1a:e1:b2:62:22:32:ca:66:6e:24:6a:d7:00:4d:dd:02:dd:45:
46:b5:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:45:01 2026 by rpki-client