Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: 7zegBQBp73+qumFwtGpPDHQy6dHob3kCk7m7Yp/Gj+I=
Subject key identifier: FA:7E:A5:99:28:02:D1:4C:1A:61:24:07:EB:EE:48:BF:85:36:E3:31
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019D98BD9D9B0FAA02C1B88CCBF99421ED81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:56 +0000
Manifest this update: Fri 17 Apr 2026 00:00:56 +0000
Manifest next update: Sat 18 Apr 2026 00:00:56 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: w7KsoeSO8Ug+TNB15TkExtz/wsJDR8+vKUFlZ2WkKBc=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9d:9b:0f:aa:02:c1:b8:8c:cb:f9:94:21:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Apr 17 00:00:56 2026 GMT
Not After : Apr 18 00:00:56 2026 GMT
Subject: CN=fa7ea5992802d14c1a612407ebee48bf8536e331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:27:ef:3d:a6:35:e6:c4:e5:2d:7a:f7:f1:
c5:f6:98:4a:14:a8:1d:b7:0c:aa:2a:5a:a8:23:bf:
7d:86:bc:e8:49:58:17:bf:99:cb:88:1b:02:9b:b5:
43:df:4c:8c:02:73:5f:c4:22:9b:9f:a2:02:a5:df:
28:12:a1:84:05:48:83:84:bd:b8:aa:05:90:78:9b:
45:e5:72:44:f0:4a:09:c6:8f:e8:11:24:dd:e5:94:
ef:bf:88:bc:ae:33:a1:1d:f8:e9:50:c4:f1:71:8e:
1b:c8:12:44:b4:82:c1:9f:20:c6:cd:3e:69:ac:6e:
b2:6e:95:11:41:1c:34:c9:ba:0b:70:a6:94:e1:01:
e9:c4:d5:d0:af:f3:fd:61:c7:67:8d:32:80:e4:69:
40:ba:8c:b4:c2:f0:bd:b0:ca:2c:3e:ca:81:5d:19:
53:77:8f:1c:56:3e:a6:6c:28:71:35:b5:f0:fd:c2:
9f:0d:de:5d:48:ca:c9:0e:1e:2f:46:64:62:69:f8:
a6:0f:55:2b:a6:62:97:e4:4d:38:0c:c4:fb:9c:cb:
06:08:8c:db:29:04:cc:e3:04:64:6b:1e:78:68:b3:
12:84:e5:ce:00:59:91:28:4c:21:fb:80:c1:c9:0f:
70:79:13:04:2a:24:cc:7a:f0:6a:4c:b3:e3:50:9a:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:A5:99:28:02:D1:4C:1A:61:24:07:EB:EE:48:BF:85:36:E3:31
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:87:1e:6b:1d:f1:90:10:3f:b9:88:d3:18:60:ea:da:7d:
69:d5:64:5d:69:2e:03:96:12:19:d1:d4:38:49:5a:7f:55:00:
74:cc:96:3d:e9:71:0e:bc:05:82:94:89:2a:be:2d:9c:4f:4d:
53:b3:9d:a2:12:a4:de:7e:4e:61:d2:ac:02:7a:01:be:30:8f:
ff:a2:5a:03:11:6e:db:c4:1e:d4:c3:64:1b:01:7d:31:ba:df:
46:23:2a:6b:09:0d:88:b2:8b:31:d9:0e:29:54:53:15:2f:bf:
c8:8e:cb:57:bc:3d:77:d0:a2:0f:4b:ab:33:b3:ef:83:e0:27:
e2:a4:5c:21:4a:a1:13:3f:1f:59:f1:04:80:a4:e3:65:c7:cd:
d3:a4:e8:4b:26:42:13:93:8b:3a:a3:b2:f6:48:33:63:95:f1:
bf:0f:2d:d6:8b:96:00:36:8c:5c:68:5d:02:50:48:58:10:b6:
de:08:a8:96:9b:ea:0c:32:5e:81:c8:99:8c:21:57:4b:4f:3f:
6d:84:01:10:52:d6:f9:d7:a6:6b:38:80:47:58:df:1a:81:c4:
80:10:cd:0b:bf:46:99:51:3f:39:18:ca:cc:ff:13:5a:61:85:
2d:4e:d6:05:d7:92:b4:e7:07:46:0e:8d:9f:ea:e8:ba:5e:76:
df:95:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:10 2026 by rpki-client