Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
File: 68eblrav29rstN8gQ40TbDgujS0.mft (raw, json)
Hash identifier: Wl3+35cE7khbX1kuTxz2jASsaCihUkjUuh9DGcV3Q70=
Subject key identifier: A4:85:C4:E1:F3:CA:8D:5F:B4:9E:55:27:5F:8E:8D:EF:EB:61:C1:66
Authority key identifier: EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
Certificate issuer: /CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Certificate serial: 01A0D9BA706A414D2B28CA3D73053A536110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:09 +0000
Manifest this update: Fri 25 Sep 2026 18:01:09 +0000
Manifest next update: Sat 26 Sep 2026 18:01:09 +0000
Files and hashes: 1: 68eblrav29rstN8gQ40TbDgujS0.crl (hash: vWHBROCSQ36kQ+eQbB+3vIdUUgcrjTDqZ2tgvSYl5/Q=)
2: XWXdPFbNew782HEBRcsR75N8I6E.roa (hash: O/wTZsRn6pYeIL3wiTECfyYWWAfLVEcLCSgYI0EujJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:70:6a:41:4d:2b:28:ca:3d:73:05:3a:53:61:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Validity
Not Before: Sep 25 18:01:09 2026 GMT
Not After : Sep 26 18:01:09 2026 GMT
Subject: CN=a485c4e1f3ca8d5fb49e55275f8e8defeb61c166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:27:0a:51:eb:16:3e:3a:df:ab:5f:58:e4:
91:67:89:44:4e:38:bf:ae:7a:09:06:2e:0c:9d:e7:
3c:48:93:2a:0d:b6:45:9c:10:31:61:1f:27:24:04:
cf:43:9d:e2:9b:96:88:13:33:19:f2:e8:10:02:91:
08:b2:37:42:65:09:ee:e2:0d:76:d3:84:9d:d8:f3:
14:4b:7f:a3:6b:e5:9c:cc:40:e6:0e:c9:e9:18:30:
15:0d:47:36:99:83:64:2c:47:cc:80:54:dd:2c:fc:
84:1e:2e:f5:76:c5:a2:6c:05:d6:2b:5b:0f:91:85:
70:fd:08:1a:f3:cc:74:1a:76:73:65:10:1c:0a:e9:
53:9d:bb:aa:62:8c:64:01:88:65:fe:fb:66:b4:80:
67:36:f0:45:a9:56:3e:42:da:0e:00:a5:62:02:c6:
bc:cb:07:d9:55:75:c5:98:b8:e6:70:e2:f8:a9:ae:
b0:a2:07:9d:43:e6:40:f2:56:a5:06:48:a2:7d:78:
cb:c7:98:d6:1c:7a:a9:94:9d:bb:63:9e:a6:53:54:
48:6c:b2:94:32:36:bb:f8:f6:0c:95:22:c4:43:10:
11:f0:10:08:7d:a9:11:41:42:84:b3:ce:fb:b8:5f:
f9:a1:e6:af:28:b3:06:d0:03:e3:83:f2:f9:cb:39:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:C4:E1:F3:CA:8D:5F:B4:9E:55:27:5F:8E:8D:EF:EB:61:C1:66
X509v3 Authority Key Identifier:
keyid:EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7f:79:70:7d:92:fe:93:3d:6b:6f:70:af:a9:20:92:12:3c:
ce:45:23:d6:51:0f:75:64:cf:70:a0:69:e7:46:ac:fb:63:7d:
56:47:d5:af:e8:12:11:17:a9:3a:71:0d:c4:c1:d5:63:18:5c:
e9:4c:3b:92:4b:61:75:eb:f4:d0:48:e4:90:1c:50:13:5f:b0:
6b:26:0e:23:db:e6:94:5e:c0:74:9a:9c:d1:1c:7f:da:d5:28:
cc:4b:2f:0c:fd:a4:68:5d:65:8f:6b:0d:37:37:20:e7:67:90:
5a:e5:4f:4f:19:e1:8b:36:d6:07:89:a6:3d:09:5f:33:1f:e6:
55:f2:43:d1:2a:94:a6:56:b6:d0:15:f8:5f:2e:5b:dc:8f:82:
8b:34:d9:9e:68:2c:a5:5b:fc:e2:32:79:39:bd:9b:4b:6b:97:
d7:6a:d4:a7:a0:c8:af:28:cf:b4:51:21:3c:60:8c:91:1b:27:
37:50:dd:7b:94:9b:ae:f2:ee:a0:66:f8:a2:8d:96:0a:e1:f2:
83:b1:03:63:ff:14:e5:eb:be:4f:30:80:ca:7a:0f:8b:80:f9:
9d:ff:17:98:c4:dc:7f:d0:df:16:04:36:76:e4:a4:98:7f:06:
87:5f:b8:7e:80:c2:e6:ea:b8:68:2c:ed:38:25:3f:e7:1c:fa:
c0:d3:bd:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZunBqQU0rKMo9cwU6U2EQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzc5Yjk2YjZhZmRiZGFlY2I0ZGYyMDQzOGQxMzZjMzgy
ZThkMmQwHhcNMjYwOTI1MTgwMTA5WhcNMjYwOTI2MTgwMTA5WjAzMTEwLwYDVQQD
EyhhNDg1YzRlMWYzY2E4ZDVmYjQ5ZTU1Mjc1ZjhlOGRlZmViNjFjMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtQnClHrFj4636tfWOSRZ4lETji/
rnoJBi4Mnec8SJMqDbZFnBAxYR8nJATPQ53im5aIEzMZ8ugQApEIsjdCZQnu4g12
04Sd2PMUS3+ja+WczEDmDsnpGDAVDUc2mYNkLEfMgFTdLPyEHi71dsWibAXWK1sP
kYVw/Qga88x0GnZzZRAcCulTnbuqYoxkAYhl/vtmtIBnNvBFqVY+QtoOAKViAsa8
ywfZVXXFmLjmcOL4qa6wogedQ+ZA8lalBkiifXjLx5jWHHqplJ27Y56mU1RIbLKU
Mja7+PYMlSLEQxAR8BAIfakRQUKEs877uF/5oeavKLMG0APjg/L5yzmmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSFxOHzyo1ftJ5VJ1+Oje/rYcFmMB8GA1UdIwQY
MBaAFOvHm5a2r9va7LTfIEONE2w4Lo0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhlYmxyYXYyOXJzdE44Z1E0MFRiRGd1alMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEt
NTBjOWY1YjNjM2U0LzEvNjhlYmxyYXYyOXJzdE44Z1E0MFRiRGd1alMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEtNTBjOWY1YjNjM2U0
LzEvNjhlYmxyYXYyOXJzdE44Z1E0MFRiRGd1alMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJX95cH2S
/pM9a29wr6kgkhI8zkUj1lEPdWTPcKBp50as+2N9VkfVr+gSERepOnENxMHVYxhc
6Uw7kkthdev00EjkkBxQE1+wayYOI9vmlF7AdJqc0Rx/2tUozEsvDP2kaF1lj2sN
Nzcg52eQWuVPTxnhizbWB4mmPQlfMx/mVfJD0SqUpla20BX4Xy5b3I+CizTZnmgs
pVv84jJ5Ob2bS2uX12rUp6DIryjPtFEhPGCMkRsnN1Dde5SbrvLuoGb4oo2WCuHy
g7EDY/8U5eu+TzCAynoPi4D5nf8XmMTcf9DfFgQ2duSkmH8Gh1+4foDC5uq4aCzt
OCU/5xz6wNO9JQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:59:49 2026 by rpki-client