Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
File: 68sOe5lBX5hvTQgXf4i1uPfrp_k.mft (raw, json)
Hash identifier: zDWwNQuBgpiJh87z+wzLJI136J/ppf+o3jfohqSAF04=
Subject key identifier: BA:37:CC:A8:03:D0:D9:3E:A4:82:49:54:CC:2D:41:4D:64:1C:E5:87
Authority key identifier: EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
Certificate issuer: /CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Certificate serial: 019F9211C8C4136B882471B088B17FDFB679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
Manifest number: 033A
Signing time: Fri 24 Jul 2026 03:01:06 +0000
Manifest this update: Fri 24 Jul 2026 03:01:06 +0000
Manifest next update: Sat 25 Jul 2026 03:01:06 +0000
Files and hashes: 1: 68sOe5lBX5hvTQgXf4i1uPfrp_k.crl (hash: dmsbP5RxVpqsUGxXmq1NWoFUtG8lRkkWUIPq/J6zeyA=)
2: O9IOyxP8h4lseEmgSAoGGPv8Vsw.roa (hash: AJyOJoJMgWD7BGOJs3PUaH2nLGyMrSS+qzh/C2ebL1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:c8:c4:13:6b:88:24:71:b0:88:b1:7f:df:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Validity
Not Before: Jul 24 03:01:06 2026 GMT
Not After : Jul 25 03:01:06 2026 GMT
Subject: CN=ba37cca803d0d93ea4824954cc2d414d641ce587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:e2:2e:73:15:14:d0:17:63:2d:dd:6f:5f:
33:6c:cc:9a:04:a7:2d:1a:c6:5c:5e:4c:5b:5d:d2:
a7:94:b8:95:45:36:e8:6d:43:46:f4:f5:ab:48:87:
73:01:28:ae:92:a6:fe:45:34:60:af:50:66:28:68:
79:12:4c:86:8f:dd:da:d6:45:b6:90:9f:c9:9c:0d:
2b:c0:37:55:dd:5f:ef:46:31:3d:58:a5:93:9b:66:
41:83:87:e2:79:cd:cf:64:08:de:e6:d5:ca:e8:11:
84:92:16:92:1c:7c:6f:63:46:75:bc:f0:87:42:72:
a2:45:c6:bd:ba:b3:bc:8c:94:bb:be:de:23:6c:8d:
d7:b0:81:12:e4:9d:4b:85:8b:83:35:66:86:77:a2:
ad:28:c9:97:b0:b6:f6:29:27:97:2a:59:91:54:55:
a1:56:7d:40:36:53:3c:3d:2f:bc:70:c2:20:78:2e:
e2:b9:9f:8e:bf:e1:6f:41:bf:b2:03:c5:7e:72:e4:
b5:86:1b:21:7b:43:31:eb:99:d7:57:fd:42:f4:8a:
fc:ea:f9:dd:d1:6d:64:d0:72:c2:9e:0e:a3:68:01:
6f:51:31:28:80:7f:96:65:8f:e9:be:eb:15:7f:ad:
4b:c0:e0:e0:c3:ef:de:24:27:ef:ed:24:a8:2b:e1:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:CC:A8:03:D0:D9:3E:A4:82:49:54:CC:2D:41:4D:64:1C:E5:87
X509v3 Authority Key Identifier:
keyid:EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:19:33:9c:a1:d2:81:5e:fc:2d:f4:54:b0:78:87:af:dc:
62:01:18:71:50:b5:2a:0b:4e:9f:cf:1c:57:04:5b:5e:46:74:
68:66:09:0b:ed:e1:54:1d:9d:64:8f:be:b6:13:77:0a:5c:fd:
99:91:25:1c:21:c6:a0:11:56:ae:c8:c7:66:ff:22:95:1c:b0:
c0:7f:4e:3e:3f:a3:e1:74:35:78:15:07:bc:15:57:f6:c7:8f:
bf:7a:79:2b:74:7a:4a:ad:c6:a1:39:54:b5:c1:d0:70:bf:f4:
21:f3:16:dd:29:95:86:79:3e:f7:7d:09:af:c1:3f:87:98:79:
61:bd:31:46:3c:7a:5c:e8:29:dc:10:e2:87:e1:33:cc:22:d5:
ad:35:fb:e0:9b:74:16:a6:db:e8:6e:0c:62:ae:5c:d0:99:c5:
b3:24:f2:82:fc:2c:73:ce:1d:4b:b9:b1:9d:58:c3:c4:e6:da:
b2:aa:0b:21:1b:4d:af:dd:ab:38:de:4f:0f:4f:90:f3:9b:02:
26:cc:38:3c:46:bd:4f:e2:ef:da:10:02:1c:02:67:57:87:5e:
ce:1e:12:2b:bf:6c:8c:7e:b0:fd:03:58:0e:3a:95:50:d4:50:
61:8d:88:31:96:e2:42:70:86:76:a2:2f:c1:5e:b5:a8:b7:82:
83:14:4c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEcjEE2uIJHGwiLF/37Z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViY2IwZTdiOTk0MTVmOTg2ZjRkMDgxNzdmODhiNWI4Zjdl
YmE3ZjkwHhcNMjYwNzI0MDMwMTA2WhcNMjYwNzI1MDMwMTA2WjAzMTEwLwYDVQQD
EyhiYTM3Y2NhODAzZDBkOTNlYTQ4MjQ5NTRjYzJkNDE0ZDY0MWNlNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvniLnMVFNAXYy3db18zbMyaBKct
GsZcXkxbXdKnlLiVRTbobUNG9PWrSIdzASiukqb+RTRgr1BmKGh5EkyGj93a1kW2
kJ/JnA0rwDdV3V/vRjE9WKWTm2ZBg4fiec3PZAje5tXK6BGEkhaSHHxvY0Z1vPCH
QnKiRca9urO8jJS7vt4jbI3XsIES5J1LhYuDNWaGd6KtKMmXsLb2KSeXKlmRVFWh
Vn1ANlM8PS+8cMIgeC7iuZ+Ov+FvQb+yA8V+cuS1hhshe0Mx65nXV/1C9Ir86vnd
0W1k0HLCng6jaAFvUTEogH+WZY/pvusVf61LwODgw+/eJCfv7SSoK+FVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo3zKgD0Nk+pIJJVMwtQU1kHOWHMB8GA1UdIwQY
MBaAFOvLDnuZQV+Yb00IF3+Itbj366f5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNhZGYtODA2MC00Mzk1LTkyNmQt
ZGVlOWNlMzk0OTkxLzEvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNhZGYtODA2MC00Mzk1LTkyNmQtZGVlOWNlMzk0OTkx
LzEvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchsZM5yh
0oFe/C30VLB4h6/cYgEYcVC1KgtOn88cVwRbXkZ0aGYJC+3hVB2dZI++thN3Clz9
mZElHCHGoBFWrsjHZv8ilRywwH9OPj+j4XQ1eBUHvBVX9sePv3p5K3R6Sq3GoTlU
tcHQcL/0IfMW3SmVhnk+930Jr8E/h5h5Yb0xRjx6XOgp3BDih+EzzCLVrTX74Jt0
Fqbb6G4MYq5c0JnFsyTygvwsc84dS7mxnVjDxObasqoLIRtNr92rON5PD0+Q85sC
Jsw4PEa9T+Lv2hACHAJnV4dezh4SK79sjH6w/QNYDjqVUNRQYY2IMZbiQnCGdqIv
wV61qLeCgxRMiQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:58 2026 by rpki-client