Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: 73rVfgyRTE/OXgjvc9at38/whhAGpWshFcoDdTP1lLI=
Subject key identifier: 51:DC:1F:9D:18:E2:54:DC:BA:B5:92:92:31:FB:8A:8E:B2:B5:05:93
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019CAB34A4FFD57B28723F16C6357DD02644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: cQahB6Gk0p1l43bYOixAxC//qX5hEv3iA8zk1ZhXriU=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a4:ff:d5:7b:28:72:3f:16:c6:35:7d:d0:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=51dc1f9d18e254dcbab5929231fb8a8eb2b50593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:d7:85:66:3b:6a:ef:0e:65:96:e6:fe:56:
d7:ff:0d:74:d9:5f:e1:65:4e:c7:c7:98:4b:b1:d6:
9a:36:b4:22:58:6a:ce:df:2d:67:3b:24:fa:18:20:
81:8b:32:ff:b3:7a:06:f4:74:5b:56:f1:d9:ab:dc:
f0:57:f6:a4:f6:0c:d5:23:aa:55:13:eb:97:12:9e:
3e:75:96:6f:d0:fc:78:4c:1f:51:02:bd:ad:1d:12:
2c:8c:fe:50:50:e5:5a:36:06:7e:3d:7b:f4:ea:1c:
bc:53:77:bb:ab:a3:d4:d9:df:4b:01:63:fc:89:74:
c8:29:6a:cd:2c:3e:c1:a9:e0:13:fe:88:bd:15:88:
77:0a:1e:d9:8f:43:e4:60:31:b9:26:41:9a:ea:1d:
8d:54:14:6d:a0:3b:1b:f1:5e:79:43:05:7d:f9:8c:
b4:e0:22:e3:03:31:7d:47:3f:8d:c7:c5:f9:02:78:
e0:e6:ef:4f:94:57:99:88:e4:d2:d7:28:79:69:a4:
03:1d:2b:1a:d7:5a:b1:b9:c6:1c:57:94:eb:42:9a:
9a:1d:bd:e8:55:f2:89:47:02:68:9a:d1:bf:dd:01:
0a:27:17:c7:0d:d4:73:d5:5c:d4:aa:4b:a8:e7:04:
d0:ed:22:fc:b0:56:73:9e:ea:21:85:c5:86:27:24:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:1F:9D:18:E2:54:DC:BA:B5:92:92:31:FB:8A:8E:B2:B5:05:93
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:16:53:b8:1a:3e:43:c4:73:02:7e:67:91:d0:f8:83:05:50:
b8:cf:8b:ba:51:14:c8:0b:26:be:35:be:b1:16:57:31:af:b3:
4c:1c:27:37:73:cc:04:ba:23:e1:31:41:a9:d3:e1:b0:16:31:
cc:a4:cf:71:bd:27:80:34:3e:48:0c:27:69:a4:e0:4f:b0:ff:
51:56:88:d7:2f:b1:83:70:41:33:b1:6f:96:1c:45:2e:6e:71:
75:a7:0a:10:75:8e:06:cf:1f:49:00:81:2d:5c:b5:a9:0c:88:
34:38:69:fb:cf:9c:91:0a:5c:1e:7d:0c:e8:32:83:46:76:92:
87:20:4a:20:35:14:8f:16:bb:3e:ad:2e:16:dd:55:38:93:4c:
8c:6b:7c:79:31:b5:81:d7:0f:9e:f1:4e:7f:d1:97:cf:11:e1:
9f:7b:d8:2f:29:74:77:1c:ee:9f:1e:b8:d3:bf:b9:20:06:39:
9b:ae:a3:8f:3c:68:72:0d:9a:4d:ce:ed:94:12:56:de:18:01:
8b:1a:a7:c8:f7:7c:21:a7:b6:fe:25:76:c6:d5:7b:bb:7a:ea:
e6:66:6f:d5:d8:59:4a:bc:2a:95:5f:4d:5b:16:7e:8e:a9:36:
5e:8d:52:49:48:c2:52:f1:11:61:17:f0:59:60:3f:58:d8:a8:
f8:06:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:28 2026 by rpki-client