Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: aKFl/tG9TuWopLZsj0t7RKCsZli8gIb543bzfZi594s=
Subject key identifier: A2:D0:9E:BE:B3:80:48:C6:DD:F2:AD:E5:CB:DF:37:9E:A2:C9:18:E1
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01A0D2A5B888A83B9262A3B2F82D5CFBF6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1A82
Signing time: Thu 24 Sep 2026 09:01:11 +0000
Manifest this update: Thu 24 Sep 2026 09:01:11 +0000
Manifest next update: Fri 25 Sep 2026 09:01:11 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 9yWskixS/4qd2FcdQKBRRgcKH1RdhibPQag6KDSSFI4=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:b8:88:a8:3b:92:62:a3:b2:f8:2d:5c:fb:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Sep 24 09:01:11 2026 GMT
Not After : Sep 25 09:01:11 2026 GMT
Subject: CN=a2d09ebeb38048c6ddf2ade5cbdf379ea2c918e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:33:f8:78:c1:b6:65:ee:69:5b:a1:6c:f7:
d2:3f:11:2b:1e:e4:51:f8:ff:0a:04:9a:9d:30:51:
11:7b:10:ae:b1:7a:72:0a:1c:71:1f:db:8d:1b:4d:
ae:22:09:dc:1a:5b:4d:c4:e6:47:79:9e:51:52:6e:
f4:51:8d:85:33:31:4c:7b:86:26:c7:7a:74:0f:d8:
a4:ec:12:6f:f7:a0:44:02:e9:1a:62:da:99:74:23:
00:3e:55:e2:71:67:d2:b4:e0:9a:19:21:b5:73:41:
92:01:a9:ac:95:31:ef:a2:a3:2a:45:82:2b:8c:47:
7c:32:9b:8b:fb:52:ee:69:53:a5:29:ef:2a:01:d4:
69:d4:af:e2:47:fe:c8:9e:93:e3:b9:f1:7a:c7:88:
31:f0:5e:97:e8:b8:18:43:44:5c:d5:a7:a3:0a:44:
98:aa:94:20:85:c1:88:df:de:63:18:8c:7f:31:25:
e6:82:52:7e:d5:dd:48:65:75:74:1a:e3:1d:42:48:
84:f2:34:65:71:64:93:3a:0c:72:35:48:c4:39:c5:
0a:22:6b:b9:98:32:07:d4:f3:c5:da:b5:b2:57:59:
45:08:d9:5c:82:0a:c8:b1:15:96:d8:fc:57:c4:4c:
73:8c:56:7a:04:b6:0c:99:e7:d4:59:ae:85:ad:aa:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:9E:BE:B3:80:48:C6:DD:F2:AD:E5:CB:DF:37:9E:A2:C9:18:E1
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:29:e2:55:d7:0f:e0:d1:ec:58:27:72:33:34:26:63:b2:
99:a8:c6:2d:0d:3f:8b:3b:4e:d8:0d:a3:d9:17:38:38:32:7a:
c2:fc:1c:f2:90:c1:b1:38:90:2d:da:cb:71:8a:1e:2d:87:d3:
d7:a1:8d:22:6f:b1:22:1a:a7:fe:cd:ae:8e:89:20:d4:47:15:
42:80:fe:b0:be:65:00:fd:11:18:64:46:c7:8a:a9:c3:bb:a3:
94:1b:55:23:aa:e7:d9:29:dd:2f:7d:73:9d:6e:36:3b:df:09:
6d:57:07:6a:09:10:3d:c6:1e:8c:51:91:8a:bb:e4:b8:37:3e:
19:df:39:60:c5:a9:00:78:32:ac:df:1a:90:70:bb:49:f1:02:
80:56:0a:d7:2f:0f:ab:11:37:f9:f1:11:0c:d3:a2:e1:8e:6e:
71:23:e3:92:a7:2b:03:98:17:0d:22:66:79:92:f1:7f:f9:40:
f9:88:23:7f:a7:74:3a:21:ab:89:b8:17:a2:0f:08:e0:82:62:
c8:f5:95:70:02:23:26:48:6d:37:d7:0b:b6:1d:9b:aa:48:6b:
1f:9f:75:3c:68:0e:c1:0e:34:78:5e:cc:41:92:8d:e0:13:2e:
6c:6b:6a:68:61:f8:fd:78:22:fe:a2:44:fe:70:f6:49:ab:9b:
3e:2e:e3:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpbiIqDuSYqOy+C1c+/a7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjYwOTI0MDkwMTExWhcNMjYwOTI1MDkwMTExWjAzMTEwLwYDVQQD
EyhhMmQwOWViZWIzODA0OGM2ZGRmMmFkZTVjYmRmMzc5ZWEyYzkxOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tAz+HjBtmXuaVuhbPfSPxErHuRR
+P8KBJqdMFERexCusXpyChxxH9uNG02uIgncGltNxOZHeZ5RUm70UY2FMzFMe4Ym
x3p0D9ik7BJv96BEAukaYtqZdCMAPlXicWfStOCaGSG1c0GSAamslTHvoqMqRYIr
jEd8MpuL+1LuaVOlKe8qAdRp1K/iR/7InpPjufF6x4gx8F6X6LgYQ0Rc1aejCkSY
qpQghcGI395jGIx/MSXmglJ+1d1IZXV0GuMdQkiE8jRlcWSTOgxyNUjEOcUKImu5
mDIH1PPF2rWyV1lFCNlcggrIsRWW2PxXxExzjFZ6BLYMmefUWa6FraotjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLQnr6zgEjG3fKt5cvfN56iyRjhMB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFUp4lXX
D+DR7FgncjM0JmOymajGLQ0/iztO2A2j2Rc4ODJ6wvwc8pDBsTiQLdrLcYoeLYfT
16GNIm+xIhqn/s2ujokg1EcVQoD+sL5lAP0RGGRGx4qpw7ujlBtVI6rn2SndL31z
nW42O98JbVcHagkQPcYejFGRirvkuDc+Gd85YMWpAHgyrN8akHC7SfECgFYK1y8P
qxE3+fERDNOi4Y5ucSPjkqcrA5gXDSJmeZLxf/lA+Ygjf6d0OiGribgXog8I4IJi
yPWVcAIjJkhtN9cLth2bqkhrH591PGgOwQ40eF7MQZKN4BMubGtqaGH4/Xgi/qJE
/nD2SaubPi7j6A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:54:10 2026 by rpki-client