Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: KnEo8zfIVz7TEB6mNmBjcc4c2RAN1GY0BS2piZkogcw=
Subject key identifier: 1F:F4:99:EC:B0:E0:F4:C6:8A:67:C3:4D:28:21:7D:64:C1:61:F0:B5
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 01A1C0D3C2AD0A152D0F9AA417A15EFD7DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 15:01:05 +0000
Manifest this update: Mon 09 Nov 2026 15:01:05 +0000
Manifest next update: Tue 10 Nov 2026 15:01:05 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: bZwj/wfO59SZcIMv11PzoR/dl+Fj8BRxoRnjBkiuEno=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:d3:c2:ad:0a:15:2d:0f:9a:a4:17:a1:5e:fd:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Nov 9 15:01:05 2026 GMT
Not After : Nov 10 15:01:05 2026 GMT
Subject: CN=1ff499ecb0e0f4c68a67c34d28217d64c161f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:d2:83:92:d1:a1:6c:c9:9f:d9:99:0f:8f:
eb:b5:3a:22:a7:f8:9e:8a:8e:a9:c3:b8:fd:91:c2:
ee:64:e0:5b:44:77:ca:87:3f:90:f6:7d:88:fd:cc:
08:3d:a9:b3:43:2f:76:72:80:9e:ba:10:67:bf:76:
80:26:e3:b6:72:72:29:1b:ec:b7:f6:bc:96:13:85:
57:0f:42:6c:1c:c6:fc:a2:cc:28:6a:4b:39:f0:37:
fd:9e:aa:ba:68:97:2d:c6:b9:5d:3a:37:ff:12:94:
f2:6d:9b:34:e6:6e:93:05:56:80:85:e0:43:93:16:
00:ab:44:36:26:4a:23:06:ba:26:01:da:ed:c8:55:
a3:bd:d3:76:eb:6e:12:ba:a9:3c:26:fd:fe:8c:24:
6a:13:f6:43:5f:0f:ea:c7:4e:0c:f8:57:e9:69:ac:
69:6e:5e:cc:41:39:d3:38:19:3f:43:55:95:7f:f1:
9b:2d:10:26:de:de:36:60:77:d7:55:c1:ca:2d:63:
24:db:4c:34:b5:67:b0:53:77:7c:b3:b2:5b:ec:0a:
d5:0a:fd:31:1f:f8:37:95:82:60:35:8f:f6:b4:3d:
c3:4f:3f:51:d6:fa:48:77:43:ec:97:ba:4e:04:2d:
ca:df:70:ff:c2:25:ef:28:ee:a3:94:74:29:d7:f7:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:99:EC:B0:E0:F4:C6:8A:67:C3:4D:28:21:7D:64:C1:61:F0:B5
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c0:41:40:8d:3c:0f:15:07:bb:8c:02:af:8d:08:8e:e4:77:
d1:02:74:b4:4c:f0:98:f3:ff:88:78:50:80:4c:4e:5f:a6:50:
c5:56:9a:f5:8e:8e:c7:7f:c5:14:ee:6c:ff:29:e1:0c:67:14:
30:9e:c1:65:67:09:87:b0:0d:2a:81:72:c3:42:2b:e5:4e:70:
de:57:3c:83:c5:76:1c:36:d8:bf:8f:b3:09:47:04:c5:b0:a3:
e1:8b:97:f6:55:24:4f:07:a9:6c:87:2d:dd:a5:ba:df:06:64:
54:e5:d0:74:df:42:1f:d9:40:8e:bc:50:2c:26:8c:af:ce:00:
f4:31:bb:d0:6b:0e:ea:58:a8:39:dc:2f:27:ba:72:ae:f3:dc:
a4:5b:10:76:1a:bf:24:48:bf:65:5c:ac:d8:b8:38:a3:17:e1:
a4:54:f9:46:19:b2:4f:8a:a0:bc:ce:5a:cb:0b:00:bd:94:6e:
bd:ed:aa:fb:4d:15:bb:3b:94:b4:24:e3:49:d3:6b:50:8e:ca:
58:de:07:e3:19:82:e9:ee:71:48:1c:63:17:a8:d2:dd:1a:61:
29:79:e2:00:e2:43:b3:b2:b7:38:84:4e:32:25:a6:5c:dc:2f:
fc:58:ac:4f:1e:1d:d5:b7:7e:8a:07:f6:19:a4:6b:91:5e:ad:
62:99:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 21:21:22 2026 by rpki-client