Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: 1+qEV3r0FTt8FRiSyglgKJQJ9P3js/kP2hD9OB8/MYQ=
Subject key identifier: 79:AC:A2:27:1F:64:BA:5D:5E:2D:AA:69:62:33:FE:96:26:39:83:7B
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01A1DF15847375AAA34DE18A99BC47BC6AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1B0D
Signing time: Sun 15 Nov 2026 12:01:31 +0000
Manifest this update: Sun 15 Nov 2026 12:01:31 +0000
Manifest next update: Mon 16 Nov 2026 12:01:31 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: WL2Wc6CP+Bgd/SDAiZLeuIqme+Ql3UP8xCXdQLfnfYg=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:84:73:75:aa:a3:4d:e1:8a:99:bc:47:bc:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Nov 15 12:01:31 2026 GMT
Not After : Nov 16 12:01:31 2026 GMT
Subject: CN=79aca2271f64ba5d5e2daa696233fe962639837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:47:17:93:87:34:b9:8f:e8:6f:58:88:61:
e9:84:90:59:60:1b:76:dc:6a:98:ab:82:c5:f4:ef:
e4:5d:08:b8:23:2b:be:cf:1f:1e:e5:07:6e:e6:27:
66:a7:58:bc:b0:27:0f:01:f6:4d:2b:60:c7:56:1a:
df:c3:bb:e2:36:32:9f:a4:3b:fa:8c:c6:9d:6a:29:
16:eb:aa:ba:06:60:a8:8d:a3:cf:cf:c0:43:3a:ac:
4b:5d:2d:1e:ad:69:78:6f:03:7b:e5:a7:96:ff:a4:
e7:bd:f0:8c:d7:70:19:bd:8a:2a:fb:e2:40:aa:cf:
a7:f0:28:33:45:73:c0:54:47:b0:b7:29:6d:32:16:
ba:37:59:2f:85:b0:93:b1:9a:56:a1:92:be:c4:20:
07:1e:62:49:b7:c7:d7:77:81:3d:f6:3c:9f:70:ca:
78:1f:2a:87:4f:02:a5:ea:d9:69:c8:ae:51:b9:d9:
38:e9:d3:57:7a:bf:63:0d:b6:70:b0:22:d2:6e:55:
23:b8:11:22:04:b9:d6:46:8f:47:9c:e6:6a:be:70:
0e:d4:61:fa:3e:ff:4e:db:18:dd:11:4f:04:61:18:
af:98:d0:8f:fe:f2:d2:ad:46:f7:2c:28:95:d2:af:
f5:67:d7:ae:e1:eb:78:21:d1:01:b1:c0:94:a0:a4:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AC:A2:27:1F:64:BA:5D:5E:2D:AA:69:62:33:FE:96:26:39:83:7B
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:47:b4:d9:5b:de:2b:a4:fb:f6:60:42:97:d0:40:9f:34:52:
5c:f9:10:e6:95:7d:ef:b9:62:bd:88:65:13:bd:46:73:b9:a4:
5a:8e:ea:39:a1:a6:6e:ce:14:0e:22:2e:3e:30:1d:9b:39:43:
7c:de:e0:af:b1:d5:f3:7c:ac:e8:b1:97:ae:08:71:46:39:c5:
44:bb:03:4d:a7:a5:80:60:51:9d:e5:a6:8d:9d:37:49:a6:29:
6d:e1:84:16:d6:53:e6:7d:46:31:25:c0:6a:95:30:63:aa:1c:
c0:97:d5:f1:56:47:5e:a0:f5:26:a1:74:eb:32:7e:5a:0e:06:
fe:25:f3:d9:9f:8f:13:cf:d4:fc:2a:d5:9d:38:43:d2:58:79:
f8:ee:62:fe:33:48:9c:7f:1a:b9:50:0b:45:1e:44:56:74:5b:
26:79:ee:60:12:60:db:78:9a:6f:e5:95:c7:1e:56:e5:93:8e:
4e:29:bd:3d:03:6e:ed:40:2e:b2:58:37:f8:e1:dd:2c:6d:f7:
64:73:76:68:22:53:d5:e7:4f:8d:f7:91:e1:84:b6:61:bb:56:
99:75:ef:f9:bc:60:b6:9a:b8:48:eb:48:86:ff:da:d4:2e:d7:
a0:34:28:d9:d5:b5:62:4c:d1:49:55:2a:9d:2b:4b:c8:a2:1a:
50:f1:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:44:49 2026 by rpki-client