Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: yJ4kvICs/3/cc7h4C5NJOQcC/9imCVIEWszzCPvKD1o=
Subject key identifier: 03:74:5F:3E:A9:3A:33:BC:5E:D5:DD:10:22:7B:2D:45:7B:54:D2:E7
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 019D265F0AFECE7EDBFEA64CA4B6F1F00A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:00:56 +0000
Manifest this update: Wed 25 Mar 2026 19:00:56 +0000
Manifest next update: Thu 26 Mar 2026 19:00:56 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: sVfAGWNLfqlxSro6bK89fYZI9TLJJJSnAB/ZaTfYVmc=)
2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0a:fe:ce:7e:db:fe:a6:4c:a4:b6:f1:f0:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Mar 25 19:00:56 2026 GMT
Not After : Mar 26 19:00:56 2026 GMT
Subject: CN=03745f3ea93a33bc5ed5dd10227b2d457b54d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:f7:94:c7:0d:47:35:a1:82:6c:32:24:7d:
17:69:3a:66:d2:9e:9a:ce:14:ad:f7:fa:9a:1d:79:
6b:43:df:27:8a:b1:d6:b1:04:cc:b0:56:00:bd:72:
a8:fc:ce:4d:18:01:15:99:97:a4:0a:e6:ae:24:6f:
74:25:8f:09:bd:1f:4e:cb:da:0f:33:17:2c:f8:83:
b8:36:36:32:a5:17:77:7f:a3:84:45:a1:5e:d1:8e:
a9:55:b0:75:e5:8f:75:ec:61:df:66:50:6d:0e:57:
19:a0:1f:df:8f:76:4e:ca:55:27:f5:94:81:7c:cf:
29:f3:5a:71:f5:c2:31:f3:8b:a9:45:6c:72:da:1c:
41:bb:bf:65:e5:ec:43:94:65:14:0a:97:e2:e8:11:
81:bc:38:26:18:1e:c5:64:3d:e3:46:d9:d6:31:7d:
87:a3:47:5b:dd:e1:5a:97:c8:16:57:03:8a:ac:8b:
cc:ed:ae:52:05:05:41:aa:6d:74:7f:33:1b:37:44:
b2:89:91:73:e2:f3:b3:d9:ec:b6:7d:b6:2c:4c:49:
07:56:74:f4:b4:a5:d2:b5:c9:e6:bf:89:12:f1:5b:
d9:c3:76:ec:a9:34:c0:ba:16:ed:4e:01:3e:c5:2c:
a5:79:97:a8:4b:19:29:ff:46:8e:92:db:09:5c:3c:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:74:5F:3E:A9:3A:33:BC:5E:D5:DD:10:22:7B:2D:45:7B:54:D2:E7
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:f3:73:62:34:bf:48:20:9e:1c:a4:f0:29:12:c7:56:85:
ce:62:8d:e6:ca:84:0c:f1:b7:df:f6:f1:52:13:fb:1f:eb:d9:
b0:06:b0:3d:d5:b6:27:36:b8:f7:64:a1:2c:67:7f:1c:1f:58:
1f:56:6f:87:1e:b0:ce:65:bc:c4:be:93:a5:b1:2f:22:18:93:
7e:13:27:b9:4e:f5:23:35:39:14:8e:d3:e5:ad:4a:c9:5b:8e:
ad:66:03:54:f8:0b:8e:ca:cb:84:ed:19:0e:ff:fe:bc:05:cb:
aa:76:a7:89:52:5d:c2:4e:1e:16:aa:48:da:d0:bd:f5:c6:a2:
bf:58:86:cd:df:52:2f:9b:7f:68:94:dc:a1:44:25:d2:44:5b:
3d:26:bd:ca:a7:f4:4f:b4:83:d2:e7:0e:18:57:00:d1:b6:42:
f2:1b:45:a0:22:0b:64:cc:49:42:d1:02:16:58:20:45:d9:24:
3d:3a:f5:2e:22:52:47:e9:85:39:17:b5:b8:6a:62:07:0f:bb:
ad:12:0c:c4:91:18:c3:48:b1:4b:59:1c:5b:ab:db:a7:3a:cf:
5b:c1:f4:50:4d:ac:42:6d:69:e1:00:15:a4:2d:51:42:7d:dd:
1a:c9:74:67:d3:a9:d4:c1:2a:60:44:3a:b2:63:69:c0:2e:5f:
3a:bd:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:03 2026 by rpki-client