
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: kcfZhA4sYTxLQuZONa2lPS4SPes4G5A4c0ze065P8eA=
Subject key identifier: BA:26:89:32:7B:6F:8B:A1:2B:12:45:A9:5B:C5:A3:42:BA:68:70:78
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 01A0DEA9FE752C3D69B1B1B37293C5052EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 0489
Signing time: Sat 26 Sep 2026 17:01:17 +0000
Manifest this update: Sat 26 Sep 2026 17:01:17 +0000
Manifest next update: Sun 27 Sep 2026 17:01:17 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: ZO2G4c8XlKafgGGGgiE2IaAm13nngLpg+ECurNd0+fU=)
2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:a9:fe:75:2c:3d:69:b1:b1:b3:72:93:c5:05:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Sep 26 17:01:17 2026 GMT
Not After : Sep 27 17:01:17 2026 GMT
Subject: CN=ba2689327b6f8ba12b1245a95bc5a342ba687078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:6c:d9:93:3c:6d:c7:c4:bf:16:b4:6f:ae:
b7:f3:40:fb:53:63:47:44:29:09:39:28:42:34:14:
7b:96:f6:51:98:42:6c:96:4a:15:5d:b6:65:0c:78:
2f:79:24:0d:c7:1f:d7:09:82:bb:63:57:32:6b:0d:
59:cc:29:da:84:bc:f2:c2:3c:5a:ad:15:75:7e:1d:
99:df:53:74:a1:30:fa:b0:9e:f9:c5:bf:a2:4d:8f:
9f:8d:d8:65:35:1e:5a:3f:cb:8b:7b:7b:02:6a:a6:
1e:63:82:22:46:72:e7:f3:5b:64:89:fc:e1:e1:1b:
f2:28:92:58:a2:c2:86:29:17:7c:c1:d3:b0:09:17:
3e:67:fe:11:86:ce:49:16:ca:ec:10:cc:f5:ed:36:
49:4d:2f:66:38:ff:0c:09:09:fa:75:6e:f0:69:d7:
40:9e:a7:bb:63:8d:5b:44:e3:1f:b7:55:8f:08:45:
8b:cc:54:5f:ff:aa:6c:50:41:e9:08:c3:cd:09:ac:
fc:96:6c:cb:85:5d:6a:dc:15:c2:ab:44:f0:33:68:
17:f6:b0:8d:7e:da:e9:22:99:b3:b3:7d:64:da:bf:
cb:aa:a3:9f:7e:77:6e:22:11:0b:f3:b2:32:fe:e3:
7d:22:5d:5d:a7:a0:15:84:3e:81:a2:ef:75:c0:f1:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:89:32:7B:6F:8B:A1:2B:12:45:A9:5B:C5:A3:42:BA:68:70:78
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1c:0a:3b:f5:0a:46:10:af:bd:0b:7c:7a:9b:31:29:47:9e:
51:da:af:85:98:8f:ca:0a:3e:34:2d:2e:81:99:bd:27:ea:e2:
24:be:7f:1e:c3:f4:9d:f6:ee:4f:e3:b0:9b:1a:cf:ae:eb:15:
65:49:fa:9c:a4:04:ef:38:a6:eb:ca:f5:56:0a:71:5e:f1:f3:
34:a5:b2:8f:6d:01:56:77:67:0a:92:96:7f:0a:4b:57:7e:05:
da:dd:82:e4:88:74:eb:78:cd:48:52:f2:16:8a:96:b4:13:68:
f8:e8:00:ee:8d:27:6a:f0:2f:24:78:d4:b6:18:64:56:95:b5:
6a:1c:fc:af:26:14:d5:73:44:4a:03:8f:79:08:5d:3c:df:5c:
90:02:b9:6f:05:ab:e6:a6:55:d9:f0:68:a4:8d:91:d7:a5:36:
4d:b9:53:f9:a5:19:5d:4b:3a:97:5f:c7:de:d9:3c:50:c7:c2:
ca:61:b5:98:82:36:32:ab:b3:05:e0:2d:60:96:c7:01:d8:92:
25:c0:0d:5b:c6:3b:32:60:eb:ce:07:cf:17:18:a8:eb:9d:c6:
e8:a6:3b:76:e3:d9:1b:b7:6d:ca:b9:ac:d7:32:64:6f:af:be:
92:08:64:51:6b:eb:af:8c:bc:b7:f7:ea:5b:8a:8f:6b:cb:a3:
2a:8a:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:36:03 2026 by rpki-client