Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: sPL/wrJz2twRSGXzI19aLH+0y2mW7p5YKA3JdCEu7dc=
Subject key identifier: 51:55:70:D5:AF:7F:81:12:67:15:2D:1B:6E:C0:B8:99:BC:F9:64:F5
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 01A0CFA4191BCE7A9116AAC25C7654B5280B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0DAF
Signing time: Wed 23 Sep 2026 19:00:33 +0000
Manifest this update: Wed 23 Sep 2026 19:00:33 +0000
Manifest next update: Thu 24 Sep 2026 19:00:33 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: qhYAcdMnaVeXjeOE/TadpvdnzPPtYZsGY/gz+xAnZiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:19:1b:ce:7a:91:16:aa:c2:5c:76:54:b5:28:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Sep 23 19:00:33 2026 GMT
Not After : Sep 24 19:00:33 2026 GMT
Subject: CN=515570d5af7f811267152d1b6ec0b899bcf964f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:8d:2f:52:bc:e5:c9:ef:aa:28:34:a8:5a:
98:a0:f4:0c:ec:64:ff:5f:d0:54:f2:7e:39:24:89:
ab:e7:06:c1:b3:c2:31:17:b5:a9:e3:53:2d:8f:8a:
66:23:2c:c1:aa:6d:e3:11:ef:2c:81:4d:9c:b7:8b:
82:39:6a:d0:78:62:15:65:b6:89:e2:37:5e:3a:eb:
a4:e3:1f:e4:85:37:15:47:13:99:ca:7b:b9:60:34:
fe:28:86:36:9b:7e:18:9c:65:be:5c:d0:70:26:d6:
d0:c0:b6:1c:59:c2:fa:b2:58:d1:69:63:e4:a0:fa:
b1:45:c1:05:0f:db:7d:54:35:40:38:64:da:09:25:
06:ad:8c:42:20:ee:69:b9:bf:f1:b9:04:19:d5:f0:
7b:46:c4:87:14:b5:ac:a2:99:04:7f:80:cc:ef:17:
16:e0:42:82:b5:6e:a4:c2:73:91:c9:a5:83:26:af:
a1:41:ae:63:51:c1:a4:7e:ab:fe:37:6f:52:43:79:
79:b4:e7:1e:98:4d:bf:f0:69:27:c1:c2:88:d3:c3:
91:15:b8:9a:6b:dc:de:fe:dd:fa:31:b2:cb:e0:4c:
18:bd:17:a1:1e:52:8f:96:d8:60:85:0b:5e:91:1c:
31:75:90:d9:c7:6d:71:a1:b1:f2:7a:c5:b8:0c:87:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:70:D5:AF:7F:81:12:67:15:2D:1B:6E:C0:B8:99:BC:F9:64:F5
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:55:fc:2f:ff:4c:63:23:55:4f:14:48:92:33:d8:f2:6e:
3a:01:4d:fc:de:0c:84:df:06:f7:7a:f9:5e:00:8a:ee:21:fb:
de:c0:04:d8:31:be:95:bb:f4:be:37:8a:5a:a7:28:9d:3a:a9:
a4:b1:b6:13:68:eb:68:bd:2a:6a:e8:b8:29:3b:62:1b:c6:67:
71:11:6c:32:37:a7:3e:df:ba:b8:7c:d4:68:f1:ab:35:5c:ff:
81:fe:9d:42:e6:14:31:18:0c:e9:00:d4:8c:64:2f:a6:05:23:
ea:db:2c:44:4e:4e:de:55:b7:de:03:35:bb:a8:46:fc:8c:e2:
42:60:13:c9:47:ed:78:db:7d:4b:52:4b:a1:48:6d:7a:74:20:
30:a4:af:8f:8b:09:5f:65:7d:ab:22:9a:21:86:16:81:3f:92:
95:35:39:0a:cf:90:56:ae:55:e5:0f:ed:89:8f:6f:ca:54:17:
c1:6f:9d:f8:c9:2e:e0:e5:ab:81:6e:10:0b:ff:eb:27:4d:21:
af:a4:59:87:71:8e:e5:fb:16:7c:33:b5:13:5a:2e:29:51:18:
07:47:5f:3a:14:e2:1e:5b:b1:a6:71:63:23:a1:b8:63:0a:79:
8e:5c:7d:96:03:f7:66:fd:71:f8:d5:2d:39:ab:b4:7d:da:2d:
4c:50:0c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpBkbznqRFqrCXHZUtSgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzVlMGU0NDVkOTQ3MzE1NGFlZWQ3NDQ2OWIyY2ZiYTM2
NjRlMzUwHhcNMjYwOTIzMTkwMDMzWhcNMjYwOTI0MTkwMDMzWjAzMTEwLwYDVQQD
Eyg1MTU1NzBkNWFmN2Y4MTEyNjcxNTJkMWI2ZWMwYjg5OWJjZjk2NGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qNL1K85cnvqig0qFqYoPQM7GT/
X9BU8n45JImr5wbBs8IxF7Wp41Mtj4pmIyzBqm3jEe8sgU2ct4uCOWrQeGIVZbaJ
4jdeOuuk4x/khTcVRxOZynu5YDT+KIY2m34YnGW+XNBwJtbQwLYcWcL6sljRaWPk
oPqxRcEFD9t9VDVAOGTaCSUGrYxCIO5pub/xuQQZ1fB7RsSHFLWsopkEf4DM7xcW
4EKCtW6kwnORyaWDJq+hQa5jUcGkfqv+N29SQ3l5tOcemE2/8GknwcKI08ORFbia
a9ze/t36MbLL4EwYvRehHlKPlthghQtekRwxdZDZx21xobHyesW4DIdlCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFVcNWvf4ESZxUtG27AuJm8+WT1MB8GA1UdIwQY
MBaAFOvF4ORF2UcxVK7tdEabLPujZk41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMmFiZWUtY2Y3YS00NGY5LTg3NjUt
OGRlYzJlMTYzYTg2LzEvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zMmFiZWUtY2Y3YS00NGY5LTg3NjUtOGRlYzJlMTYzYTg2
LzEvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDlV/C//
TGMjVU8USJIz2PJuOgFN/N4MhN8G93r5XgCK7iH73sAE2DG+lbv0vjeKWqconTqp
pLG2E2jraL0qaui4KTtiG8ZncRFsMjenPt+6uHzUaPGrNVz/gf6dQuYUMRgM6QDU
jGQvpgUj6tssRE5O3lW33gM1u6hG/IziQmATyUfteNt9S1JLoUhtenQgMKSvj4sJ
X2V9qyKaIYYWgT+SlTU5Cs+QVq5V5Q/tiY9vylQXwW+d+Mku4OWrgW4QC//rJ00h
r6RZh3GO5fsWfDO1E1ouKVEYB0dfOhTiHluxpnFjI6G4Ywp5jlx9lgP3Zv1x+NUt
Oau0fdotTFAMxw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:54 2026 by rpki-client