Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: xoq21qEh0j2IoA23DZHO9J2D5s58GOrAxB0J5Kz4pT0=
Subject key identifier: 96:8A:DC:30:4B:65:DE:7B:D8:BB:41:78:50:08:F6:09:09:29:5B:87
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019FA9E319DBF7186EEB8B4B8EF3F031967F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:01:00 +0000
Manifest this update: Tue 28 Jul 2026 18:01:00 +0000
Manifest next update: Wed 29 Jul 2026 18:01:00 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: kkyw7BmYyYxU1aJzjJdG4C8wlV+JJ9+UlTX5TFHf/1w=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:19:db:f7:18:6e:eb:8b:4b:8e:f3:f0:31:96:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jul 28 18:01:00 2026 GMT
Not After : Jul 29 18:01:00 2026 GMT
Subject: CN=968adc304b65de7bd8bb41785008f60909295b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:cc:71:39:92:be:70:c8:b4:c2:31:59:24:
95:8c:91:fe:43:4d:38:da:47:32:74:2c:24:64:05:
c6:c8:85:1b:9e:0f:6f:c1:cc:cb:e8:b5:0f:61:21:
e8:5a:c8:f6:3d:9c:ff:7a:81:33:4d:b7:2d:5c:a2:
7b:c0:e4:09:b4:94:fb:e3:65:ba:eb:69:21:b3:54:
ef:28:68:16:5f:bf:15:db:23:22:57:0d:e4:97:df:
fa:e5:24:e9:44:5a:cc:89:46:66:7d:98:2d:6f:46:
1b:e7:6b:de:5f:05:61:a6:3a:6e:97:31:15:6e:5f:
c1:84:b3:29:da:18:17:ce:5f:4d:a6:76:c4:79:49:
bb:37:94:2e:67:f8:f6:2c:60:f1:92:4a:62:89:a3:
36:b0:95:ad:3f:07:b3:45:4b:4c:16:15:50:e5:65:
4b:28:43:a3:12:da:3e:5d:b6:df:72:7a:cf:85:8b:
8c:2b:96:13:f8:13:49:ec:92:d0:43:a6:f8:b8:f0:
50:da:f4:0e:5a:8f:03:2a:29:a4:2b:9d:8f:4b:eb:
2b:02:de:ae:34:60:10:58:cd:e8:5b:06:37:97:10:
e6:80:2a:4a:a5:50:45:70:46:b5:d3:2f:fb:4b:29:
06:38:d7:0e:9a:ac:8b:12:d0:97:1b:a1:31:62:b2:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:DC:30:4B:65:DE:7B:D8:BB:41:78:50:08:F6:09:09:29:5B:87
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4e:fa:f4:c8:f5:df:9a:82:2f:ed:d4:0b:2d:32:33:85:00:
22:73:b3:c3:41:32:4d:23:cf:28:cc:79:50:bc:cf:12:4e:51:
f8:e2:25:46:64:af:64:6c:2b:90:96:62:15:f3:61:e1:c4:b9:
7a:25:95:13:66:5e:87:fa:5f:46:57:56:f0:1e:ff:4b:7f:5f:
f5:fd:c4:0d:ef:ae:c9:ed:33:08:fc:64:e1:c7:56:35:72:a0:
0c:72:1f:b3:05:2a:d3:9e:22:31:ff:8f:34:b8:ea:7b:3d:8b:
1e:c3:e8:1d:ac:d7:70:6c:73:d1:69:cb:dc:38:79:18:71:3a:
de:6f:6d:29:13:ef:de:a7:d2:b9:aa:db:45:85:8d:83:f1:c4:
c5:53:b4:bc:2f:c7:87:92:04:6a:a5:b4:b4:dd:a3:75:16:8a:
61:d7:23:29:50:5b:2d:a1:3f:74:29:7d:dc:d2:56:cb:c4:84:
37:05:82:0a:d6:a7:37:13:c7:2b:8c:bf:3e:f6:59:35:d4:44:
80:aa:c6:2b:cf:90:6c:fe:8b:d7:3c:f1:b5:bb:2c:69:94:56:
45:d5:42:7a:af:c8:c0:7f:bf:cf:04:30:e6:a6:5f:2f:db:77:
c2:34:c6:85:54:e4:96:32:04:8b:d0:36:ae:0a:21:44:04:2d:
10:79:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:45 2026 by rpki-client