Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: 8fqmBdBYOItGHqyaLq7C1J29Q6aPKCw++SnmezdzFmc=
Subject key identifier: 49:78:68:4F:D8:1B:FB:5B:10:2F:CF:65:27:55:33:3E:FB:68:73:A8
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019F9022E386ECA8B603A6B28D9C0E92BEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 19DB
Signing time: Thu 23 Jul 2026 18:00:33 +0000
Manifest this update: Thu 23 Jul 2026 18:00:33 +0000
Manifest next update: Fri 24 Jul 2026 18:00:33 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 3Lm9/ARNY557OhaMt8xqoiVvb+0ZmtfIqnHNv18QGe4=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e3:86:ec:a8:b6:03:a6:b2:8d:9c:0e:92:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jul 23 18:00:33 2026 GMT
Not After : Jul 24 18:00:33 2026 GMT
Subject: CN=4978684fd81bfb5b102fcf652755333efb6873a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:f1:15:c1:95:5d:e4:1c:bf:a1:08:2f:5b:
e5:74:3d:8c:6f:c7:4d:4f:26:6c:47:f8:c3:96:dc:
bb:83:2a:39:ab:5a:fe:36:0d:f7:aa:7f:e2:35:44:
3d:a5:af:05:07:b2:85:0c:c6:25:d7:34:f4:93:f8:
20:9a:ce:3e:6d:29:e0:31:5b:ec:c0:f6:e2:e3:e8:
a8:a6:50:8a:77:b4:18:cc:54:9b:1f:8d:e8:6c:bc:
5a:be:41:96:01:88:02:28:57:90:f8:71:1d:36:d6:
8d:eb:f2:4a:98:84:33:8b:48:7c:86:e8:5d:4f:92:
8c:30:ed:8e:29:b0:68:57:60:39:d5:d4:6f:a9:e8:
b8:ca:2e:60:cb:b5:c1:48:6c:c1:ef:c4:76:08:c2:
dc:f0:91:e8:7d:89:ef:bd:14:24:44:ae:94:c6:39:
97:97:ca:44:8c:a9:a2:a5:87:42:c1:ea:37:fb:b4:
74:85:04:c4:dc:d3:17:16:d3:00:4b:e5:af:03:2d:
d9:56:94:95:96:2f:5a:20:52:cc:00:15:be:19:fb:
e1:e7:b7:f2:a8:69:a8:63:9a:53:01:28:75:78:50:
17:99:db:aa:33:1c:88:68:53:f7:7e:f8:e2:c2:68:
0a:c9:09:b7:30:39:47:42:7b:b5:43:af:89:03:11:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:68:4F:D8:1B:FB:5B:10:2F:CF:65:27:55:33:3E:FB:68:73:A8
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:72:80:34:8f:8e:4a:e4:8e:0c:58:41:4b:7b:8e:d2:16:
81:48:00:15:47:6a:2c:36:60:19:d9:be:67:04:c5:6d:c1:3e:
35:32:50:39:33:b4:23:f7:a0:c2:d7:6f:0f:ec:77:46:4a:1c:
af:57:7c:cd:fa:c0:fd:82:5a:c5:3f:73:89:77:e1:8e:fb:f9:
c2:e7:4d:19:84:f3:1c:0c:2e:41:76:b6:76:56:08:e7:9f:ae:
4e:e1:81:dc:9e:7a:b2:56:e2:b6:63:ab:f7:a4:6e:26:31:82:
f7:7f:08:b6:cc:cf:59:b8:d9:f8:62:26:d0:c5:67:9c:49:ad:
f0:dd:ee:2d:11:ad:43:d7:70:93:da:86:11:20:a7:bc:2f:d7:
8c:18:3d:0d:43:1f:11:4d:e8:81:fe:83:95:36:df:2b:fd:94:
89:53:aa:7c:93:e7:49:37:84:8c:78:bc:c0:32:a0:9d:69:8e:
17:f1:55:6b:d1:10:93:e3:81:2d:b6:28:10:cf:1e:89:af:23:
6d:72:54:0d:a6:4a:ec:40:99:c2:5a:40:47:eb:5b:3a:46:0c:
50:28:b6:eb:73:e8:b7:44:ce:f1:56:21:aa:ec:09:0f:b1:15:
96:e3:2f:ad:57:3c:35:d6:75:a4:06:05:dc:36:63:3c:41:00:
17:75:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:27 2026 by rpki-client