Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: OUHl5J8ZWCLcyhkb39jM0zhNVqJr5eIKwAV0lPxxX8o=
Subject key identifier: 5B:B9:8A:E7:08:A7:F3:A9:1D:6A:A7:35:88:94:CE:49:E0:7E:74:57
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 01A1103BB1DD7BFACEA53ED181D8A4304E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 05B1
Signing time: Tue 06 Oct 2026 08:01:49 +0000
Manifest this update: Tue 06 Oct 2026 08:01:49 +0000
Manifest next update: Wed 07 Oct 2026 08:01:49 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: LoXECHmBHrdligSLYoCuS2tTWVPGib9rg2TTLFvMhL4=)
2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:b1:dd:7b:fa:ce:a5:3e:d1:81:d8:a4:30:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Oct 6 08:01:49 2026 GMT
Not After : Oct 7 08:01:49 2026 GMT
Subject: CN=5bb98ae708a7f3a91d6aa7358894ce49e07e7457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:12:3b:5f:9f:11:21:f1:36:be:0f:70:b1:
aa:b1:02:e1:2c:04:4a:da:b3:f6:f1:02:55:40:fb:
c4:38:04:00:e1:fb:35:a8:5e:52:0b:a4:c3:eb:cb:
80:98:6f:c1:8a:de:50:32:b1:f1:63:83:d0:a1:1e:
f6:3d:15:c6:76:bc:fe:c9:b0:75:3e:dc:ae:26:dd:
31:95:2a:c3:f2:fc:74:4e:94:9a:12:4e:d5:71:93:
2f:81:24:76:ed:d6:c6:33:30:30:27:78:7b:95:57:
7d:32:32:14:dd:e4:c3:c1:75:f6:59:ae:12:3e:a0:
75:0d:97:1d:8f:95:03:1c:d7:f8:af:b0:2b:a7:88:
d5:bb:92:22:9c:e1:08:db:35:2a:35:ad:e7:51:90:
3b:00:5d:56:25:8b:31:97:85:71:a6:53:f6:e6:e7:
a2:0f:62:bb:7a:3f:f3:cb:8a:60:c3:05:27:82:61:
b1:6e:1f:53:d1:b8:3f:72:cd:3a:77:50:84:41:fc:
8d:dc:24:c2:c5:69:5d:de:f8:aa:ea:82:56:38:55:
a0:bb:92:88:05:a0:cb:a7:a2:3a:f3:70:b1:93:d5:
b7:1e:a6:4b:ac:aa:30:4e:21:90:8a:f3:27:b7:a7:
88:84:94:43:60:5a:22:cc:3d:9b:dc:41:f3:5f:70:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:8A:E7:08:A7:F3:A9:1D:6A:A7:35:88:94:CE:49:E0:7E:74:57
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:ce:54:86:35:b8:4c:e2:36:e2:46:be:8f:07:44:15:5a:
19:b6:e9:49:a6:91:12:42:8d:73:56:bd:83:af:73:06:c8:b8:
33:ec:b0:31:31:48:64:1d:7c:28:bc:1b:30:64:de:2b:79:9f:
a8:b9:f7:27:14:b9:62:9b:99:37:13:cf:da:e2:15:9a:65:17:
f6:4e:0d:53:04:90:d0:63:e5:e6:b9:d4:8c:5a:f8:14:83:b3:
df:22:f4:65:f2:c9:fa:1d:05:71:7e:65:06:4e:dd:a5:2c:97:
c5:73:a4:a5:72:12:17:8d:95:64:b2:d2:e0:e3:f3:73:e0:e8:
07:f5:d0:c8:07:87:2a:5a:2f:d7:53:c3:28:9b:88:59:97:be:
4a:92:0b:8e:c5:fd:86:f0:c8:ad:ae:c0:a6:d6:bf:e1:19:0c:
8e:3a:1f:7c:30:68:ce:ed:e3:86:5f:a3:42:d7:03:f2:4f:f1:
2a:41:aa:0b:a7:98:ff:a2:75:18:07:89:36:8c:a8:5d:4c:f0:
31:dd:90:20:f8:7e:b8:32:d5:15:b0:16:4b:7b:db:96:38:27:
2d:ed:dc:e0:18:56:b6:94:1b:be:fb:89:30:98:f1:25:ea:3c:
7a:61:6d:f2:0d:af:31:6a:c3:86:34:0a:49:fe:0c:25:c2:9b:
d8:73:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:40:57 2026 by rpki-client