Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: mj421LwAcIcSOLn6kppEz/C+dlVigxzzdXS7XRXnRxA=
Subject key identifier: 7E:1B:84:86:A3:CC:66:FE:44:1A:78:55:6C:F4:9E:48:29:25:84:C0
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019F8F104DD62F72B5DA1D773611C69696C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0D09
Signing time: Thu 23 Jul 2026 13:00:37 +0000
Manifest this update: Thu 23 Jul 2026 13:00:37 +0000
Manifest next update: Fri 24 Jul 2026 13:00:37 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: SYSkiGkGHnIM9X37MLG2RfIRlGATvTAe6wEI0gAQ2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:4d:d6:2f:72:b5:da:1d:77:36:11:c6:96:96:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Jul 23 13:00:37 2026 GMT
Not After : Jul 24 13:00:37 2026 GMT
Subject: CN=7e1b8486a3cc66fe441a78556cf49e48292584c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:29:fe:0e:e7:6b:e6:77:90:82:a8:ff:09:
d5:69:65:a5:50:0f:db:24:12:9e:f4:92:00:ba:b1:
12:77:64:46:e9:f9:c8:a6:cc:f4:fc:c5:5e:8d:f9:
73:c4:15:bc:03:0a:67:e9:53:28:65:ed:7a:22:50:
ad:4b:48:80:84:2f:36:ca:a5:50:7a:25:6c:a3:55:
40:57:e5:95:57:bb:19:d6:f6:66:ee:12:06:22:b1:
15:91:24:1d:2c:15:a2:4e:89:2d:64:b6:bb:e5:80:
d8:d7:6d:ca:91:84:8e:34:b6:43:82:02:65:54:86:
cb:3f:06:66:6c:4e:cb:8e:34:46:fc:b9:d2:0e:70:
95:3e:65:4d:d5:20:ca:87:04:04:e1:04:26:e5:8d:
69:36:63:7e:c1:07:5a:c2:d9:0e:9e:69:6e:bb:40:
cf:73:ed:e1:63:35:85:2a:5c:59:3c:73:9f:ea:23:
f9:86:4b:fa:a7:f5:fa:e8:86:c9:fe:66:d2:59:79:
56:39:b9:dc:fc:0d:15:40:bc:d3:37:bc:4a:45:81:
a8:e4:03:8c:2b:cc:af:f9:2a:22:b9:bb:68:e8:a0:
7c:19:c6:f1:8f:b8:8f:20:23:54:cc:3c:a4:85:25:
d2:bd:c1:78:dd:0c:6a:9c:57:91:c6:e2:f6:38:75:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:84:86:A3:CC:66:FE:44:1A:78:55:6C:F4:9E:48:29:25:84:C0
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:77:01:8c:5b:0e:98:3d:30:84:23:a7:bb:42:10:7e:f3:
b6:06:6a:81:0a:04:f7:a5:b2:cc:7a:97:cc:be:76:7c:94:8a:
db:42:75:9d:cf:6e:34:18:da:bf:05:08:11:de:c1:a8:43:ec:
bb:21:94:3b:84:97:5e:19:b0:c0:0e:80:fa:1c:86:24:92:56:
55:2d:45:4f:49:ab:f1:63:a7:93:42:2c:9f:39:77:a5:8a:92:
f0:cf:61:ef:c9:48:d2:0a:58:08:25:01:ee:4f:7a:61:c3:21:
0e:43:db:d7:be:42:ca:60:f1:19:37:c6:04:46:a9:21:1a:a5:
bf:04:53:9b:ff:1c:af:6b:89:79:66:c3:4a:bf:40:74:38:50:
05:b7:68:1f:61:25:0b:b8:d7:cc:f4:02:63:b0:4e:14:e9:0c:
db:d3:f0:21:26:b7:d2:a9:bf:22:02:bf:1c:4d:a6:03:e6:b8:
7c:35:78:d1:df:3c:01:dd:24:65:26:43:8f:5a:c1:fa:5f:a9:
33:2c:54:71:ab:58:a5:cd:53:57:71:1b:4e:15:f1:3d:d9:0e:
6d:0e:2b:2a:9c:8e:07:07:35:55:a5:87:0a:38:6c:2a:77:55:
7e:6d:2b:ad:51:dd:8a:f4:36:72:38:2a:c9:34:01:5e:21:0f:
e6:44:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:08 2026 by rpki-client