Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: 0rJ2+NfD+CiFGoB+3p5U/FzBivZBJB3UnKbHiPA15x8=
Subject key identifier: 95:E1:A0:12:8A:72:AC:C5:52:DE:D9:85:B3:58:F1:10:AD:5C:B1:67
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019D28164A5C812A27732FCFF6A04CD97A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 03:00:42 +0000
Manifest this update: Thu 26 Mar 2026 03:00:42 +0000
Manifest next update: Fri 27 Mar 2026 03:00:42 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 4fwtBq6URc4Ybfj1ywyxl4d63xuSHbqOfQtsQgf/uug=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4a:5c:81:2a:27:73:2f:cf:f6:a0:4c:d9:7a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Mar 26 03:00:42 2026 GMT
Not After : Mar 27 03:00:42 2026 GMT
Subject: CN=95e1a0128a72acc552ded985b358f110ad5cb167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:31:17:62:50:6f:81:b7:4e:66:66:1f:ac:
88:a8:54:8c:a9:53:c7:b8:2c:6e:d3:56:83:7e:6c:
93:4f:b7:aa:1e:8c:24:0b:65:57:3a:31:0d:b4:05:
66:dc:6d:cb:c2:e4:64:22:39:ef:16:37:2e:11:cf:
08:77:ce:da:c5:37:62:80:26:11:88:13:67:6c:3e:
e1:15:eb:ce:de:31:60:db:dd:f0:67:73:14:52:67:
74:3a:ab:10:e0:34:a2:34:f1:17:9c:b8:54:a7:f5:
ca:2b:28:4e:d9:d4:ca:ef:48:be:ea:fc:fb:b9:72:
c3:1b:3d:8c:c2:05:ac:12:f4:11:85:46:2f:55:b5:
de:53:b2:42:13:f6:25:81:10:fe:07:8d:e8:3e:ed:
d4:f4:62:74:c2:27:7f:04:72:c3:ae:cb:7e:84:0d:
c9:8d:36:7b:c0:f0:94:5e:39:f6:1e:95:d3:23:ca:
46:84:c0:20:61:d9:2e:cc:f3:47:ce:fb:ff:d9:0d:
47:49:e5:ba:47:81:e3:43:0d:4e:74:35:91:a5:77:
4e:bc:6d:94:68:c1:28:4a:a2:db:5a:c9:f8:f3:7b:
fd:83:57:11:ee:9c:25:0b:5d:1a:10:2a:d5:e8:bb:
68:87:67:60:6f:95:75:25:39:f6:a7:92:b3:79:97:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:A0:12:8A:72:AC:C5:52:DE:D9:85:B3:58:F1:10:AD:5C:B1:67
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:e4:d6:4f:d1:5f:23:6c:1f:d3:e2:ad:d7:34:3c:d4:90:
27:11:28:f2:85:51:5e:50:2a:66:c3:08:e7:15:e5:54:cb:a0:
80:61:ac:81:06:da:c3:f5:cd:f2:94:f7:d7:64:4a:59:b0:6b:
d4:46:bb:6f:a6:be:73:9b:7d:b6:0c:bf:d7:73:27:a6:c2:f0:
72:36:c6:b4:1f:66:21:de:33:c3:33:64:91:87:99:18:bd:28:
8c:0a:65:29:95:5d:d6:0b:1c:da:6f:1a:ae:72:69:52:77:c0:
61:78:21:c4:29:33:7b:3c:4f:c6:fd:50:48:f2:85:13:b3:fb:
d7:a2:da:66:4a:68:35:7d:bd:9f:7c:1e:fb:72:2d:77:02:29:
2f:71:84:2e:08:13:18:9b:74:ce:0f:ea:19:24:5f:a7:e6:3f:
1c:3a:19:1e:5e:9d:2b:97:50:20:68:2d:b7:93:c2:a4:6e:75:
31:d5:b2:51:5b:de:a2:67:66:18:53:5c:65:da:fd:ca:33:e9:
00:bf:d0:06:59:f2:6c:a1:0d:2a:ac:24:75:e7:05:05:44:ba:
88:5d:27:ff:f1:92:9b:a3:b9:73:48:b6:76:26:31:32:72:47:
f8:06:23:a3:15:80:2b:1a:6b:14:89:c2:13:f2:18:96:6f:ed:
83:70:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:23 2026 by rpki-client