Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
File: 68sOe5lBX5hvTQgXf4i1uPfrp_k.mft (raw, json)
Hash identifier: 2IbppGy4Bo5pZo0hmq532716TJWJQ0RCNFcJ66ZkJdg=
Subject key identifier: 20:EB:D3:D2:6A:07:9E:2E:15:A7:18:7F:41:80:F0:FF:97:71:92:7A
Authority key identifier: EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
Certificate issuer: /CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Certificate serial: 019D2A0516BAFA580255CEC0A7C8E079D871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
Manifest number: 01FB
Signing time: Thu 26 Mar 2026 12:01:09 +0000
Manifest this update: Thu 26 Mar 2026 12:01:09 +0000
Manifest next update: Fri 27 Mar 2026 12:01:09 +0000
Files and hashes: 1: 68sOe5lBX5hvTQgXf4i1uPfrp_k.crl (hash: z5G4ddJvl1R+DW44b+aiKaxIaS7kZ5bCyRGt52xQ/ks=)
2: O9IOyxP8h4lseEmgSAoGGPv8Vsw.roa (hash: AJyOJoJMgWD7BGOJs3PUaH2nLGyMrSS+qzh/C2ebL1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:16:ba:fa:58:02:55:ce:c0:a7:c8:e0:79:d8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Validity
Not Before: Mar 26 12:01:09 2026 GMT
Not After : Mar 27 12:01:09 2026 GMT
Subject: CN=20ebd3d26a079e2e15a7187f4180f0ff9771927a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:53:6c:11:6b:39:69:c3:7b:d5:de:74:29:
36:7f:87:48:f5:56:2d:c7:c5:0c:fe:6f:72:f1:aa:
52:b3:3a:57:77:1b:be:b8:17:ce:4a:eb:b1:71:58:
61:56:f8:ae:2c:53:01:49:37:db:ed:11:90:e0:34:
3d:ef:b9:8a:e0:56:4d:80:bc:93:ef:b9:d0:9e:78:
49:83:30:73:8e:ae:c9:1b:d6:33:1f:4c:04:6e:69:
b1:7a:9d:93:43:97:19:67:10:51:c2:b9:d3:51:cd:
e0:ca:ae:2d:35:98:06:2e:50:1b:88:f2:36:38:d9:
38:60:a0:dd:6a:7b:8e:db:90:91:7c:da:92:1d:eb:
86:2d:61:a7:3e:0e:6c:ee:f4:af:08:1d:05:da:9b:
6f:9d:54:66:3f:68:19:00:09:30:8e:ec:3c:ee:2b:
01:2c:8a:dd:be:ee:b4:49:22:7b:49:25:2c:eb:d6:
92:67:44:c7:15:b0:fa:56:28:eb:bb:1e:8a:93:e9:
0a:5b:9c:b2:59:d3:69:0a:c3:de:a7:cc:85:51:8a:
40:95:ac:80:b5:0d:18:b9:63:34:71:0f:82:cf:50:
24:88:05:77:a2:68:fe:8e:e6:4d:0c:2e:bf:67:f6:
b2:43:8e:bd:e6:1c:7a:fa:01:6d:d9:bc:94:62:3d:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:D3:D2:6A:07:9E:2E:15:A7:18:7F:41:80:F0:FF:97:71:92:7A
X509v3 Authority Key Identifier:
keyid:EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2e:33:7e:16:02:22:0a:be:cc:af:e0:8b:fc:49:32:0f:cd:
60:e0:70:e2:b1:1e:52:dc:ec:65:54:39:da:bf:01:9f:82:9b:
5f:34:ce:d3:0d:2c:b8:34:c4:bb:74:7e:8d:a9:dd:15:f6:ce:
0b:69:c4:ee:02:73:5f:f2:64:82:a0:1b:67:59:13:07:62:4c:
87:22:28:59:bd:bc:52:3f:99:f0:bf:66:50:51:08:34:58:51:
9f:71:3d:2a:f7:14:34:0a:52:ef:cd:7d:37:c7:72:23:7c:75:
74:e5:35:bb:8c:ca:28:0e:46:bf:f2:81:fc:c0:55:e7:b2:66:
56:a4:9f:bf:85:e6:d2:86:b6:fd:49:ee:3e:2e:46:bf:ce:36:
ce:ca:21:1e:03:03:90:8d:d8:6b:25:88:8a:45:86:86:70:f8:
df:14:ea:4c:6a:f4:cb:5c:e6:14:ad:65:77:42:d3:d3:97:6d:
46:38:20:9f:3c:26:32:5e:41:58:a3:a2:30:49:3b:07:6e:55:
3f:df:74:68:c5:01:85:71:7d:30:9a:67:dc:1b:de:bb:91:a5:
57:7a:13:c5:48:fa:ee:31:e9:34:18:ad:a6:97:ad:3c:d7:f6:
da:9b:5b:42:a4:12:e3:a4:ae:bc:bc:05:e9:1d:29:7d:eb:d8:
8a:9c:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:34 2026 by rpki-client