Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: CbLjIJgMMiTJzt6RBdn3kjEN3BWsxmPljZN2D1T3T+M=
Subject key identifier: 6D:8D:3C:21:E0:13:02:C8:E6:6F:D6:18:67:0D:2D:4F:59:A4:25:AD
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 019D9B507537867D1A3FB4B35BE97F18ED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0CF1
Signing time: Fri 17 Apr 2026 12:00:34 +0000
Manifest this update: Fri 17 Apr 2026 12:00:34 +0000
Manifest next update: Sat 18 Apr 2026 12:00:34 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: sVcIDezRokraac2+Rq94nICHa4dv3wvBEhlcC/tFwYE=)
2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:75:37:86:7d:1a:3f:b4:b3:5b:e9:7f:18:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Apr 17 12:00:34 2026 GMT
Not After : Apr 18 12:00:34 2026 GMT
Subject: CN=6d8d3c21e01302c8e66fd618670d2d4f59a425ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:0c:82:c0:bc:b2:13:ae:7f:9f:56:15:1a:
a0:3e:e3:e7:8d:61:2e:d1:19:97:1b:1d:10:b4:6a:
49:4d:77:22:a3:af:94:a4:37:72:f9:b0:b9:a8:cd:
3f:11:b2:bc:d0:de:5e:12:d7:ce:89:19:19:ab:6c:
8c:0a:90:0a:28:2f:cd:5e:ba:42:52:12:9c:ce:f3:
0f:43:a4:ad:0d:2f:2c:1b:19:99:48:d3:7a:19:b6:
f2:16:d9:04:a2:f0:a4:27:0b:4c:6c:db:5f:44:85:
8e:90:8b:f7:cc:8a:80:0b:c6:2c:95:f0:a9:9f:9a:
20:f7:45:ec:cb:82:5f:ea:8d:13:31:6e:44:52:60:
bd:f7:f1:e4:a4:cb:b7:e6:49:a1:6b:2e:05:8b:b6:
56:89:c4:77:08:f2:04:48:eb:fe:24:02:3f:cf:03:
7a:52:ed:a8:a2:15:c6:a8:8e:2b:c3:6a:93:18:56:
d6:33:fe:e1:00:bf:72:82:b6:0e:2c:24:c1:8e:c8:
96:0a:79:7c:83:83:1f:63:91:46:c9:7b:11:1f:34:
65:a5:af:b5:46:1b:ea:66:30:ad:b4:28:86:59:d7:
05:df:df:78:e1:7e:90:b9:74:ca:98:d5:ec:1c:b9:
a1:f1:3c:dc:a0:3e:32:da:be:8c:6e:01:c9:ee:72:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:3C:21:E0:13:02:C8:E6:6F:D6:18:67:0D:2D:4F:59:A4:25:AD
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d1:b3:45:41:87:06:f3:15:03:9c:2a:5a:f5:9d:7f:75:24:
66:3d:21:ca:5e:0c:6c:e3:22:c4:d6:e7:47:a9:84:7c:01:49:
d5:c1:a3:b7:bb:f5:e0:61:36:97:83:9a:97:18:3f:5a:07:ad:
98:24:45:68:04:21:15:53:bb:f7:00:0e:e8:8a:9e:73:06:7e:
ba:e7:7d:ba:17:2c:eb:70:5e:0c:9f:3d:53:a7:f8:de:18:c2:
e6:bf:79:0b:e1:da:bf:75:e5:9b:ba:d9:73:c9:59:d8:ae:55:
20:4e:2e:7d:97:14:68:69:50:1b:45:c3:5e:75:4a:be:4b:ee:
22:6b:3b:f5:eb:ca:3a:5d:6f:20:25:59:bb:39:d3:ee:4e:77:
e2:a2:29:41:4e:f9:f7:ac:f7:5f:25:3c:4c:45:2a:11:e9:c4:
a5:37:2e:17:d6:67:82:4b:df:1e:7f:78:94:e7:d7:26:52:86:
fe:2e:aa:5d:f8:d4:09:ac:d4:13:76:06:06:97:15:26:3f:38:
c8:79:8f:76:c8:6e:fb:30:02:76:9e:78:fb:2c:d1:e3:32:85:
65:39:e1:d0:c1:d8:27:ee:16:95:d1:13:2a:98:e8:19:03:c5:
92:23:87:89:39:7e:ac:34:42:33:02:a9:d7:bb:2d:65:00:38:
a7:ca:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:19 2026 by rpki-client