Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: TXaqPz3p/81NunV/qOW2BU/4U/6Unqme2O9BQ+RgDy0=
Subject key identifier: C8:1E:08:F2:BE:C6:55:5D:D8:54:FA:DD:58:BB:22:80:1B:25:22:F1
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 019CAEDA35AC87B079271C2543B9B8B28829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 025E
Signing time: Mon 02 Mar 2026 14:01:01 +0000
Manifest this update: Mon 02 Mar 2026 14:01:01 +0000
Manifest next update: Tue 03 Mar 2026 14:01:01 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: gGNufZeAehWMBCbfBvpDF+2gdyay4apl18X4R0+bjWc=)
2: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (hash: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:35:ac:87:b0:79:27:1c:25:43:b9:b8:b2:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Mar 2 14:01:01 2026 GMT
Not After : Mar 3 14:01:01 2026 GMT
Subject: CN=c81e08f2bec6555dd854fadd58bb22801b2522f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:26:3a:2f:17:63:92:f0:3f:52:26:f1:05:
22:f3:28:42:0c:05:d2:92:10:63:32:c7:55:d4:3d:
29:d7:1e:33:b2:52:c5:be:f1:df:19:bb:0d:3a:a6:
28:09:c9:54:58:29:b2:b3:a6:fb:42:47:23:15:13:
ad:a2:24:a3:0f:83:ad:92:1d:e2:cf:33:f8:ae:09:
17:c4:44:83:75:e4:5e:49:7e:80:0d:2f:f6:f2:4e:
da:a6:47:49:cf:80:4b:7e:42:47:6e:cb:1b:d1:f8:
87:31:b6:ae:0f:01:0e:6a:08:63:21:8e:a6:45:7b:
b0:c3:fe:2b:19:e4:e2:4b:31:44:c1:0a:fa:cd:41:
08:a0:96:d3:cc:76:08:67:9c:6a:3e:b7:af:0f:4f:
16:da:16:8a:6a:b5:41:9f:5c:eb:e8:e3:92:10:9c:
73:37:0e:99:b1:f3:49:1f:5a:33:93:a5:b1:ad:cb:
c6:d1:77:98:40:ec:12:9e:53:14:66:a3:13:e8:e0:
a7:5d:b5:2a:38:93:1d:58:8b:05:0b:b4:fe:fe:be:
e8:19:b1:c9:cd:ef:a8:f2:4a:74:7a:ce:3a:a4:1f:
52:06:88:0c:21:86:e1:2b:76:81:6d:d2:b9:86:4c:
ea:78:f4:42:80:01:9a:f2:94:a4:1d:c8:ac:41:1f:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:08:F2:BE:C6:55:5D:D8:54:FA:DD:58:BB:22:80:1B:25:22:F1
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:9c:82:40:12:6c:71:6e:37:e9:22:73:7d:0c:b0:71:7c:
34:b1:3c:9d:1a:87:58:27:04:a0:49:fa:ae:7a:08:58:7b:11:
df:a9:42:e6:a8:91:12:69:49:1c:bd:8a:6a:33:86:81:80:db:
42:97:45:1d:4d:6b:f9:8d:ab:70:1d:c4:a4:53:3e:d8:28:32:
5a:23:c0:e5:ea:1a:d7:ec:f1:6c:b3:17:78:fa:a6:75:d9:53:
e9:49:7e:f5:b7:97:48:55:61:df:25:18:af:0b:4c:5f:5b:f7:
ec:3b:23:2c:35:bb:6a:1f:30:95:75:b5:56:3d:1d:52:10:c3:
95:7c:c2:89:7c:84:ee:51:ac:41:13:11:2c:f8:ae:64:f8:87:
9a:52:7c:ae:60:9b:16:88:2d:8e:bd:a3:a4:a4:7a:4e:a0:b2:
2c:94:19:1a:1f:ca:81:d2:d9:a1:6d:86:cf:74:da:70:b3:d4:
c4:2d:79:d4:f0:ee:f9:92:7b:ff:e5:a8:b1:e2:72:4e:e2:2c:
23:12:cf:e6:62:c7:f6:b9:87:33:5c:3e:5d:2d:38:8c:4f:2f:
e2:e5:3a:3e:86:9d:f4:fa:fd:a9:7d:74:1b:c8:0a:59:c5:96:
16:e4:0d:17:75:c6:60:69:28:0f:82:32:20:c1:9d:4f:95:7a:
c7:aa:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:49 2026 by rpki-client