Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: xqG93wddMkTpNJQfRsy4h0qni//yd0/AZeXcnMrEeTo=
Subject key identifier: 35:3E:2D:45:C8:6F:91:E5:A9:4A:98:D2:15:2D:59:36:52:5E:35:18
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019E1D594FBF32161251415E53DF7E628672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 191B
Signing time: Tue 12 May 2026 18:00:52 +0000
Manifest this update: Tue 12 May 2026 18:00:52 +0000
Manifest next update: Wed 13 May 2026 18:00:52 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: rg/LK4BPEmUFZXyLGMUhmohzb6SzaENjACrvziu9K0w=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:4f:bf:32:16:12:51:41:5e:53:df:7e:62:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: May 12 18:00:52 2026 GMT
Not After : May 13 18:00:52 2026 GMT
Subject: CN=353e2d45c86f91e5a94a98d2152d5936525e3518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:ad:bf:76:e6:31:62:b1:3e:3b:d8:26:90:
70:3c:c9:21:f3:6c:0b:f2:f6:3a:39:14:f4:c8:e3:
c3:f8:bd:c5:f6:a5:b2:82:fa:35:e7:50:24:02:4f:
a9:d7:d7:50:d3:a3:af:61:01:ca:3b:54:e5:81:30:
3b:f0:17:37:35:74:dc:81:40:9c:60:15:3f:c7:2d:
ec:6d:1b:d3:96:67:82:83:c2:61:c4:2e:2d:09:09:
af:1e:63:58:d6:23:7c:00:df:37:1b:59:89:02:62:
22:f1:9a:35:c8:02:c6:14:11:27:0a:cd:fb:8a:57:
45:d4:00:c5:c7:ce:1d:a8:da:86:80:74:4e:cc:95:
df:b5:83:e5:5f:2a:4e:ab:ad:c6:45:06:60:54:7c:
46:76:ca:ad:73:54:f2:b9:6a:b4:0e:f3:df:55:0d:
a9:93:f7:6f:c8:6d:ef:2c:fc:af:57:2a:ca:ba:b3:
1a:c5:26:5d:97:d5:33:92:32:69:ce:52:64:66:87:
20:8e:f2:78:5f:0c:35:8b:5d:17:88:df:eb:30:b3:
94:4a:ba:2f:37:5c:ab:9f:49:43:57:85:08:8b:12:
3c:85:a2:9c:48:b5:9f:6c:fc:d0:fc:40:81:03:08:
b4:b5:bb:21:d4:3b:ea:d2:dd:de:21:44:0d:a8:2e:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:2D:45:C8:6F:91:E5:A9:4A:98:D2:15:2D:59:36:52:5E:35:18
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:95:45:8c:cf:09:ca:21:7f:3f:e5:61:45:24:fa:32:69:
8f:26:9a:fa:60:59:d5:0a:0f:bf:20:11:81:cb:33:10:0c:d1:
cf:30:69:0e:d1:ab:c2:08:3e:dd:54:b8:36:bd:1f:e9:6b:30:
eb:1d:42:18:79:8a:dd:fa:7d:30:a4:4a:7a:08:19:3a:b3:65:
a6:39:7c:ac:74:4e:2f:fa:53:e9:64:96:bf:7c:87:78:2a:04:
ae:55:5b:e5:da:d4:88:bb:0e:a7:88:97:66:ec:d3:3c:a4:95:
13:64:6c:da:1f:0c:03:62:fc:f7:12:ec:c0:5c:cf:3f:55:33:
69:19:bf:67:74:a9:6c:e3:46:02:f7:64:37:74:4e:3b:1f:e6:
79:f1:cf:2d:e7:f0:69:81:db:a1:69:42:46:75:69:9e:77:cc:
f3:4d:12:69:cc:e1:58:95:d0:5b:59:f4:bf:39:4f:a0:dd:d1:
72:b3:79:2d:f8:84:1e:b8:91:ff:27:9a:08:83:92:4c:2f:78:
bd:24:c3:3d:bb:f2:8f:59:ae:b6:a3:a0:c2:be:91:76:89:f9:
f6:0d:8e:fd:8e:5d:1c:99:d2:52:c3:90:bc:30:ac:0d:8f:67:
ad:8a:af:22:cc:b3:4b:1f:e5:fe:e0:46:16:8d:b9:01:29:de:
fc:d1:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:36 2026 by rpki-client