Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
File: 68xoOyb8VREziVmezLGvzNQ4Ttc.mft (raw, json)
Hash identifier: 7DcjPcEjZnHFrBNjuPzgea3ZVwYnTMkY9mZy1ei6o8Y=
Subject key identifier: ED:45:E9:71:03:A2:6D:DC:84:EB:A9:01:60:C6:22:4E:53:5B:58:03
Authority key identifier: EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
Certificate issuer: /CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Certificate serial: 019F935C2EAFE859373F7722B8EE0B10BDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:59 +0000
Manifest this update: Fri 24 Jul 2026 09:01:59 +0000
Manifest next update: Sat 25 Jul 2026 09:01:59 +0000
Files and hashes: 1: 68xoOyb8VREziVmezLGvzNQ4Ttc.crl (hash: c3VPYK4MrMA9zfemRZHb6CleOqgS3sa9TKof93mGNpQ=)
2: hoyQuOHMgCRKjusTo81pyeqim3s.roa (hash: hqd8/fjGmCpH8TxwYvqw9pZzXIZPGSvJxX81K1zKMOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2e:af:e8:59:37:3f:77:22:b8:ee:0b:10:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Validity
Not Before: Jul 24 09:01:59 2026 GMT
Not After : Jul 25 09:01:59 2026 GMT
Subject: CN=ed45e97103a26ddc84eba90160c6224e535b5803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:3e:df:0b:e3:b7:dd:5a:62:0d:ac:75:c7:
2c:22:a9:60:06:fd:56:1f:5a:9a:a8:5c:e2:e5:ab:
61:01:db:55:65:d6:3c:42:d7:81:d1:48:6c:7c:5d:
a6:dd:47:a7:6d:c0:48:7f:69:ba:5b:b0:88:54:01:
20:e2:ef:bb:6e:74:48:be:3b:96:0b:a5:88:f4:85:
8c:09:4b:09:c8:af:77:2e:5a:74:00:c3:50:14:97:
93:82:74:c3:e6:31:0a:35:79:ca:e3:9c:e8:10:64:
f9:69:d2:8f:fd:a1:8f:7e:9b:a0:3f:53:e1:25:4a:
e1:21:fb:30:4e:83:5a:1a:df:ce:08:c2:72:bf:17:
46:9e:ca:15:5f:0f:15:42:ff:71:3e:9e:78:e8:70:
a6:a3:9f:f9:e1:79:2b:45:79:68:4d:d1:78:28:c2:
11:51:b6:8c:91:c9:e1:9d:fd:c1:71:f5:58:b3:dc:
9d:3b:47:79:94:50:e8:09:26:b0:34:8e:44:4c:d2:
e3:e5:89:3c:97:6a:32:de:ea:56:5f:62:ce:8e:b8:
26:a7:0b:5f:aa:8b:8b:96:91:64:f7:51:f2:bb:c8:
73:36:1a:6d:a5:5b:ad:8c:6e:d6:b0:22:8c:97:ef:
c6:96:f7:73:11:fb:60:47:ec:4e:01:a1:d4:72:a4:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:E9:71:03:A2:6D:DC:84:EB:A9:01:60:C6:22:4E:53:5B:58:03
X509v3 Authority Key Identifier:
keyid:EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:34:23:75:6d:c4:f1:5a:8f:70:68:81:18:05:d7:b0:bb:06:
c7:85:73:0b:55:de:ba:c1:a0:53:eb:01:4c:27:44:76:06:fb:
bd:a5:fd:b7:cc:de:ac:75:a1:57:e9:48:25:3d:16:ea:ac:56:
d1:2a:d2:12:ed:38:83:cb:2e:74:a5:d5:7f:da:67:16:60:40:
9f:9a:f4:65:dc:49:2a:6e:20:ec:df:e9:fd:fb:36:5a:d9:d9:
70:c7:26:7a:0f:bb:6c:77:e8:9c:95:af:0a:d1:e2:ca:f2:64:
8b:89:00:2b:36:a4:ac:5e:3f:a9:38:a3:65:6d:be:92:94:f1:
fa:36:f7:7a:72:b7:7c:06:7b:79:3f:a1:43:25:3b:4c:d4:3d:
e1:c0:b9:30:4c:0b:d5:18:e6:ce:b3:31:38:b6:0a:55:90:6c:
17:49:16:13:70:ac:c2:37:58:1f:6d:84:fe:16:14:8c:30:cf:
c9:fd:3b:0f:80:a4:fe:e4:11:1a:2d:42:ba:b9:84:95:ac:a5:
80:51:06:d1:11:55:c3:db:23:c9:85:79:8a:c1:9d:80:a3:70:
48:2e:50:0a:cb:02:58:4b:f2:61:24:4a:02:57:78:16:8d:6f:
13:a6:b9:d5:94:37:89:81:0f:72:ca:d1:b2:a4:62:48:ef:03:
9f:5b:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:10 2026 by rpki-client