Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: RdGdmHuPLCzvPQlitMXgb+wLci6mQSM/gkP12Wj8ugU=
Subject key identifier: A6:F8:E2:62:A8:23:CF:E8:B9:CA:D1:5A:45:0C:EC:F5:CB:05:F7:6F
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019EBE482062F98619014ACC36B09083EF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 00:00:58 +0000
Manifest this update: Sat 13 Jun 2026 00:00:58 +0000
Manifest next update: Sun 14 Jun 2026 00:00:58 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: /+yZ/mgVnV3dNCdcsF/ZN8zrHawL463QL66Z+ChBhMM=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:20:62:f9:86:19:01:4a:cc:36:b0:90:83:ef:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jun 13 00:00:58 2026 GMT
Not After : Jun 14 00:00:58 2026 GMT
Subject: CN=a6f8e262a823cfe8b9cad15a450cecf5cb05f76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:91:9a:d9:89:5b:7c:f0:9c:cb:9b:80:3e:
ed:1c:66:c0:09:0c:a0:ae:c8:06:92:52:40:1c:d1:
c6:7e:28:16:61:64:b8:c5:9a:2c:e9:4d:85:db:52:
94:51:ca:0d:ab:8a:c2:29:0b:f7:4d:c2:c8:1f:02:
18:86:a0:07:0d:c2:16:8a:ee:b0:83:f9:e1:53:55:
df:bb:a2:44:27:e3:43:17:2b:4a:f4:bd:23:13:e9:
1d:48:b3:22:77:8e:d8:a9:23:77:c9:73:4c:d9:ab:
73:91:9c:4e:b9:02:c8:f5:47:2a:96:e7:52:14:51:
1e:5f:f4:e6:a5:8b:55:35:85:e2:46:24:d4:a0:ea:
05:86:e6:02:46:aa:19:83:80:21:ba:9e:93:d0:f3:
d9:9c:45:3f:a4:4f:0d:02:d8:da:63:19:d0:4d:b0:
0f:ee:d1:8e:3b:8e:ca:5b:80:71:87:da:7d:1c:35:
8c:58:53:77:5d:52:06:0c:86:f2:fc:d5:70:99:2a:
9f:cd:eb:f8:4e:ab:91:a1:eb:e4:e6:bd:c1:0c:cf:
c5:68:fd:fb:77:81:55:be:b5:e6:a1:e1:11:b6:9a:
39:56:08:c8:23:41:c5:17:f2:b2:2a:dd:35:ce:31:
e9:d2:fc:84:0d:94:c9:a1:37:4e:3d:ee:cb:73:12:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:E2:62:A8:23:CF:E8:B9:CA:D1:5A:45:0C:EC:F5:CB:05:F7:6F
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1e:1a:68:c5:c5:92:1e:57:a3:e8:63:fe:c4:06:92:9f:07:
66:c5:e3:10:90:c0:db:93:ab:8f:59:bb:05:d3:d2:cb:d5:30:
64:fc:b5:3a:9b:0f:43:71:97:e6:73:d9:44:df:b8:6b:89:f9:
79:02:4d:d5:70:ae:57:f2:a0:e7:8f:b2:fa:84:86:a3:0f:38:
34:5c:60:31:dd:0c:6f:4d:7e:b2:a6:7b:44:6d:be:74:1c:0d:
3b:a0:9f:86:ef:81:b1:a7:bd:30:b1:0c:5c:ce:76:25:b1:4e:
b2:82:2b:77:f5:6c:dc:06:c5:c6:cd:dd:e5:a0:67:d4:fc:61:
cc:09:3d:e5:66:a7:f1:04:07:5a:9e:79:ca:a9:01:a9:34:7a:
ba:c4:3e:ab:29:6c:d2:b2:63:c0:ad:d3:82:93:c9:c4:25:ef:
90:86:dd:e4:5a:4b:cb:37:4e:0e:50:10:92:ec:0c:11:80:e1:
2d:cd:31:a7:4e:9b:65:1c:fd:94:85:37:42:74:65:9e:90:50:
16:0f:dc:c9:c8:e6:d7:41:47:fc:01:6f:a6:34:16:65:ea:e3:
81:8d:f4:cb:5b:4b:6b:b5:42:c4:18:f3:c9:12:7a:30:51:2d:
4c:97:fc:5b:68:07:f7:a3:72:34:6e:b9:70:37:76:0e:1b:bf:
04:04:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:23 2026 by rpki-client