Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: AJgXUAOyATaB2ZHGMzajITJdkzqbeWFSnMzyjW/j8oA=
Subject key identifier: BA:CC:D3:1F:3D:74:A8:B3:CE:F0:70:CD:94:4F:21:D0:3A:3F:C0:83
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 01A0C5C5375D581D32BEB000218C56861CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 21:00:31 +0000
Manifest this update: Mon 21 Sep 2026 21:00:31 +0000
Manifest next update: Tue 22 Sep 2026 21:00:31 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: uynRiGzHwTUNnBQ2gdtRWBSEAqnMhBoJSeQVOO5Z3XQ=)
2: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (hash: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:37:5d:58:1d:32:be:b0:00:21:8c:56:86:1c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Sep 21 21:00:31 2026 GMT
Not After : Sep 22 21:00:31 2026 GMT
Subject: CN=baccd31f3d74a8b3cef070cd944f21d03a3fc083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:73:73:16:b3:a2:38:b3:9f:9f:b8:eb:f7:
65:40:46:d0:3a:65:a5:38:0b:1f:ed:06:84:29:c2:
e2:45:d6:c3:cb:6b:2c:3f:fe:4f:fe:e6:1c:18:66:
89:d8:bb:28:da:02:b9:7c:9e:cc:5b:79:5d:9f:df:
7a:7a:d5:c5:60:9a:32:6b:c8:ff:ca:98:ef:cb:6b:
52:e8:ed:42:86:66:f3:c9:70:3f:0d:18:f1:97:88:
ad:63:e1:c7:0a:f1:28:5d:67:20:7d:5f:b6:4d:49:
aa:60:fd:1b:ef:0d:51:a8:c2:8c:68:35:52:5f:d0:
ff:4a:4b:4a:0f:08:40:d5:80:02:26:cf:7b:91:b7:
f1:8a:b0:01:a1:fa:ea:79:55:e7:8a:cd:4a:8a:2a:
69:6e:99:c6:73:16:85:fc:44:cb:11:86:64:2d:39:
45:42:16:34:09:bb:ad:db:e7:32:0d:39:ca:0c:2f:
c4:01:44:65:d1:25:36:e4:59:43:ae:bf:9c:dd:09:
7f:8d:0a:aa:de:f1:8d:56:90:5c:00:6f:ba:5c:29:
1b:86:e7:e6:13:cb:14:96:48:01:44:34:6f:bb:07:
7e:83:0e:ff:bc:58:e8:97:d7:b5:99:77:ad:88:c7:
fc:ae:fb:65:5e:65:5b:66:25:af:ea:c0:8b:f8:a5:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:D3:1F:3D:74:A8:B3:CE:F0:70:CD:94:4F:21:D0:3A:3F:C0:83
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:4c:f5:2f:f2:dc:15:f7:9a:fa:1e:7d:fd:ca:14:46:7a:6e:
68:3b:78:f6:9a:8f:95:de:c6:6c:78:62:e4:42:cb:e2:49:cd:
06:84:6b:36:ea:82:90:1a:18:b2:5e:bd:85:a1:54:85:6b:6b:
e7:5b:f1:e4:2e:fc:39:09:5e:5e:04:5b:45:5b:6c:62:b0:f0:
ab:95:05:87:1b:46:fb:6e:02:48:4a:99:45:24:90:f2:06:4a:
0a:c2:d5:62:9d:ca:41:d5:ba:95:33:b9:6d:77:de:a6:43:e9:
d4:1c:8b:14:ff:4e:f2:2b:3f:43:fa:a2:3e:77:fb:2d:05:de:
48:06:0f:78:c5:b7:14:04:a8:5e:ed:53:8b:fb:6b:c1:a8:72:
67:e1:b2:7b:6f:2d:03:6c:91:4d:e8:6d:4b:ac:4e:be:b8:ff:
e9:cc:14:82:e1:5c:d8:8f:c6:50:cc:cb:3d:6b:59:0f:bc:29:
ac:11:05:2f:1f:ea:ca:08:3d:a0:b2:10:a7:38:2c:c7:aa:dc:
38:da:cc:50:ff:2a:23:2e:2b:36:3e:91:61:95:49:a4:19:65:
a2:27:75:d6:e9:9d:28:37:15:c7:66:2d:0a:14:9b:0e:62:3d:
ac:0c:5b:4a:47:92:b0:cb:6f:3e:54:6b:99:36:9f:bd:6a:e6:
57:aa:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:32:23 2026 by rpki-client