Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
File: 68eblrav29rstN8gQ40TbDgujS0.mft (raw, json)
Hash identifier: vHWEO9JEP5kwlqm79PSYvZ4lTXxmCQp/gIX73h/7Zq8=
Subject key identifier: 31:A9:FE:06:3E:8D:98:96:B0:3A:47:41:5E:14:DE:C9:FA:B4:1E:0E
Authority key identifier: EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
Certificate issuer: /CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Certificate serial: 019F8F7E0FAE9A81ECB77C8036EA56697E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:31 +0000
Manifest this update: Thu 23 Jul 2026 15:00:31 +0000
Manifest next update: Fri 24 Jul 2026 15:00:31 +0000
Files and hashes: 1: 68eblrav29rstN8gQ40TbDgujS0.crl (hash: iW+hbzbRGmIToSausQWIZGiJ1GAJPoio0OjnjF+Np+A=)
2: XWXdPFbNew782HEBRcsR75N8I6E.roa (hash: O/wTZsRn6pYeIL3wiTECfyYWWAfLVEcLCSgYI0EujJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:0f:ae:9a:81:ec:b7:7c:80:36:ea:56:69:7e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Validity
Not Before: Jul 23 15:00:31 2026 GMT
Not After : Jul 24 15:00:31 2026 GMT
Subject: CN=31a9fe063e8d9896b03a47415e14dec9fab41e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:91:b2:d7:52:be:b9:b7:dd:9f:3b:f8:44:
b3:59:d6:fb:2a:f2:77:ad:73:be:f5:57:b4:94:ee:
c5:f6:1a:4d:12:0e:2a:0b:a0:c9:10:12:23:58:5a:
75:2b:99:f5:40:f4:bd:67:c1:d3:60:77:48:14:d5:
89:5b:a1:b2:4f:2d:8e:93:57:bb:3f:0d:01:80:34:
de:6e:a6:8c:e1:f7:cd:c9:66:dd:36:15:9d:08:6e:
8f:82:15:3d:4d:6d:5b:82:a9:68:c6:bf:d7:a8:02:
d0:d2:0d:c7:d4:f7:60:b8:a4:61:42:fa:d1:13:98:
dd:22:6e:00:db:c0:82:78:30:d0:16:36:d4:9c:d6:
de:e7:70:5f:d3:f1:be:84:53:dd:85:c1:b6:3f:a1:
94:23:1b:68:f5:a3:7f:9f:cd:59:fa:a6:70:e3:e4:
e9:86:28:67:6e:21:17:59:0c:d5:55:fa:41:a2:86:
7c:c4:0e:f7:c2:0f:2d:6e:93:e4:ae:fb:57:b0:d6:
fe:67:27:43:42:0f:b8:4a:2f:3d:65:02:d0:39:0e:
f0:ac:e6:5d:cf:e7:03:62:34:5e:bb:63:cf:32:c3:
aa:7d:c0:29:31:9c:3f:a8:91:31:b6:41:7f:e3:41:
40:9c:06:e8:36:e3:70:01:12:37:39:b9:5a:1f:bd:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A9:FE:06:3E:8D:98:96:B0:3A:47:41:5E:14:DE:C9:FA:B4:1E:0E
X509v3 Authority Key Identifier:
keyid:EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5d:ca:90:ae:b3:4b:72:2f:8e:42:07:f2:f7:7e:ef:64:f5:
8d:7c:fb:9e:d2:ff:c3:b9:72:33:90:7b:5d:2e:4d:42:cf:d9:
bc:23:a9:6f:68:73:fd:c9:ed:44:8b:2e:8b:87:7c:6b:a1:6f:
84:14:a2:b1:72:38:77:e3:b2:4f:48:73:24:cb:17:c7:0e:45:
73:5c:6b:c4:58:b9:99:03:6e:47:74:ea:29:65:30:95:2a:14:
db:b9:89:37:48:ea:32:15:37:74:23:33:d5:70:e7:63:cf:6c:
e2:71:de:76:57:d7:e2:3d:c4:ea:67:4a:05:95:99:42:6c:d0:
e9:b5:21:54:12:03:ad:19:9e:69:15:b1:47:a2:28:e8:b0:e0:
85:b0:aa:95:0d:19:09:4c:77:1c:34:d7:c8:d0:7f:49:57:33:
e0:f2:57:2d:55:15:33:24:f3:1b:59:83:43:47:a4:0a:ef:b8:
2f:68:5f:d4:bd:35:b8:2f:36:ed:3b:27:9a:3c:4d:11:b1:48:
1d:b2:e1:8c:04:7c:28:c9:ee:14:73:9d:2f:ce:f0:ce:fe:65:
28:3d:8d:5b:94:6e:5b:e2:ed:17:ec:88:4b:4d:18:95:3a:2f:
79:04:e9:91:e1:8c:c7:fa:2c:40:11:1c:b4:dc:2f:7b:81:9f:
c4:1d:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:49 2026 by rpki-client