Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
File: 68CqrU4lEtTEPhasbaXc2eu-MDk.mft (raw, json)
Hash identifier: yyR13VFsTT28J1BE3xXX9Zd7bY0tGLil8/khdO42anU=
Subject key identifier: 21:1A:CE:91:BE:EA:8F:D9:AE:61:C5:5C:94:CA:61:49:52:6E:30:B8
Authority key identifier: EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
Certificate issuer: /CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Certificate serial: 01A0D011C5EBA2D86316B3481601611F4996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
Manifest number: 46
Signing time: Wed 23 Sep 2026 21:00:20 +0000
Manifest this update: Wed 23 Sep 2026 21:00:20 +0000
Manifest next update: Thu 24 Sep 2026 21:00:20 +0000
Files and hashes: 1: 68CqrU4lEtTEPhasbaXc2eu-MDk.crl (hash: 9sVN2ukmEv9t//irZzXtGk8SmEYRTakY/ObvqSahO4s=)
2: qS7L8NnGpNyu32W316uLLLPpPH0.roa (hash: tdSyc1eqpE9AG20qm1HBcOdt/PWMuB8pFBOQwDAuLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c5:eb:a2:d8:63:16:b3:48:16:01:61:1f:49:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Validity
Not Before: Sep 23 21:00:20 2026 GMT
Not After : Sep 24 21:00:20 2026 GMT
Subject: CN=211ace91beea8fd9ae61c55c94ca6149526e30b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:f8:5c:cb:d5:6c:0b:52:c1:be:47:4a:a4:
7b:24:a2:01:7d:ce:63:c5:52:98:71:35:94:91:d4:
2d:d8:8e:ff:2e:2a:a4:f1:c7:5d:06:49:bf:89:ad:
c6:2e:fe:d7:5f:17:94:3c:97:cb:27:71:0f:2f:bd:
5a:b3:b0:f3:7c:1f:9b:1b:a3:42:f3:53:39:5a:a9:
0e:c3:56:4e:ea:4f:d4:86:5d:01:8f:9e:e6:ca:a7:
f8:ab:7b:46:a2:d8:21:39:41:ea:ce:91:0a:e4:00:
b9:80:a6:8a:a7:00:c2:2b:9a:10:5b:08:57:8b:21:
fd:be:0c:b3:aa:5f:71:ba:c1:27:bf:90:45:3b:17:
86:a1:a2:a0:9f:4e:29:21:b0:4d:72:60:fa:3a:78:
ef:db:6f:71:ca:31:1b:fa:8b:78:92:9d:e4:0b:3a:
43:fb:41:92:83:59:15:53:ce:40:e6:f1:68:8a:c9:
ac:b8:2e:89:45:dd:37:5d:a6:4b:b7:7e:d3:91:2a:
c0:b7:82:40:07:ed:20:62:80:72:9a:0b:9a:c9:37:
cd:cc:3c:ca:42:de:5a:3b:f5:25:eb:2d:43:8b:9a:
2e:85:49:17:e3:44:00:5f:d4:72:8d:1a:ec:e8:ed:
62:75:54:86:f9:5d:54:ed:25:5d:e1:b7:f8:69:2b:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:CE:91:BE:EA:8F:D9:AE:61:C5:5C:94:CA:61:49:52:6E:30:B8
X509v3 Authority Key Identifier:
keyid:EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e8:6c:79:98:47:ea:ba:e6:ec:15:69:bb:99:24:e9:91:f6:
1c:81:23:1c:27:88:93:db:77:84:05:a0:7f:b2:69:53:6d:0c:
6a:e5:ed:01:09:ad:87:f3:97:a5:4a:14:a0:d1:db:c0:be:3e:
94:23:54:e6:cd:da:73:ac:f2:7a:bc:23:25:67:a0:aa:9e:e1:
7d:17:23:2d:20:d8:7b:f3:24:8f:6a:79:ae:31:dc:9e:cc:eb:
c7:e3:7f:aa:e4:bb:ee:d1:89:ee:2c:27:c5:1b:21:80:2d:3f:
57:bb:ce:63:fa:06:9f:ee:f8:dd:cd:d6:bb:4c:41:ff:3f:e7:
f0:d1:e4:47:e4:85:79:5e:a7:41:b4:f0:ad:0a:1c:3a:d1:66:
f9:e0:12:ed:c5:13:66:12:13:20:b6:e9:6c:09:60:3a:c4:46:
0d:f3:cf:aa:b1:c3:20:9d:59:24:5f:b8:e4:6d:49:4d:d7:ab:
bd:4d:dd:a1:fe:1c:b2:fe:14:07:95:c4:28:c5:c9:e0:b1:9f:
e6:6c:f9:9e:10:c3:24:be:46:cf:60:67:2f:4e:13:7b:3a:26:
65:02:4a:c5:3a:23:0c:fd:49:af:8c:f7:4b:51:9e:be:48:0a:
cb:8b:15:7a:49:2e:4e:e1:de:d5:b8:52:5c:5f:64:49:f2:29:
cb:12:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:51 2026 by rpki-client