Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: HWMXOGgszN+uU1ouzT8vSxgeGWbrUKmGkj78SSUhqGE=
Subject key identifier: 07:34:7A:7A:F1:9F:60:C5:F6:7C:38:96:8A:DC:5D:45:64:F2:82:2A
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019D273AEF0E317281D54A3271B7D08035CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 1193
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: ifUQNJ3C0S8XxmI1o+9oZJ9S7eoGp8HQeeCCGAA9mgc=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ef:0e:31:72:81:d5:4a:32:71:b7:d0:80:35:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=07347a7af19f60c5f67c38968adc5d4564f2822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:0e:85:11:71:c6:a8:55:f6:77:4f:f9:06:
9e:4e:18:16:05:68:d8:01:ec:84:fe:b6:9c:96:34:
b0:d3:98:f2:8e:cc:e7:27:e8:10:21:21:fd:db:c8:
a3:9a:af:cb:6c:66:ea:6b:cc:83:e6:9f:40:43:28:
1b:30:50:3a:10:a5:19:9f:6a:2e:05:69:16:0e:da:
cd:23:41:26:a7:08:8b:a0:93:af:e3:31:9b:a0:1e:
50:76:c0:69:f2:c1:89:7c:10:78:ea:c3:43:59:d8:
ea:a0:e3:23:90:21:e0:a0:a1:31:f7:6b:3c:e8:77:
20:67:39:e0:83:d7:09:e4:d0:22:59:30:8f:bd:4a:
06:13:db:23:d1:0e:ec:40:d9:e9:0a:d3:59:fe:a0:
62:8e:be:67:42:92:49:1f:df:cb:53:89:f3:83:06:
68:6a:4c:d2:e3:2e:0a:98:fa:db:5a:f8:60:16:41:
1e:78:8a:d8:b1:78:ef:a0:56:c1:af:d5:cc:4e:79:
1e:50:dc:36:b3:23:d8:0b:1f:42:95:d9:f9:b3:1f:
6a:36:71:d0:8e:45:a6:b5:fe:75:c6:63:12:12:23:
a7:72:eb:03:1a:09:0e:55:f2:4f:18:47:8d:d9:cd:
87:82:f9:96:09:3f:19:03:ac:d3:4c:08:aa:26:a8:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:7A:7A:F1:9F:60:C5:F6:7C:38:96:8A:DC:5D:45:64:F2:82:2A
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fb:38:2b:0f:55:4a:a5:9a:09:4f:84:fa:86:53:6f:81:12:
b4:8a:f3:7b:bd:50:9e:67:24:3a:88:77:d3:a8:f7:0f:0e:17:
db:1c:a6:20:1e:27:49:f9:47:5a:92:b4:e8:a6:df:d3:46:52:
ea:9a:c2:17:2c:0c:f0:7a:ea:c1:5b:69:fa:c9:8b:44:0f:22:
4f:d1:76:52:2c:72:a8:77:a0:09:ea:87:1b:5b:70:f3:d0:25:
6f:7d:0e:f7:ac:86:e8:8a:52:b0:a1:bf:4f:f0:42:5a:6a:4f:
e6:29:b4:0b:fb:c0:37:51:8b:8d:9d:fd:af:97:59:ca:bf:0f:
10:11:0f:2f:42:fe:2f:59:f9:12:c0:98:63:cd:60:82:c4:b8:
59:35:6f:11:80:92:27:a0:e4:22:c4:5b:1b:83:ea:c8:6b:06:
a9:f2:26:89:43:3d:00:40:43:00:a9:00:01:4e:45:26:c1:cf:
13:99:b9:86:ba:0a:26:db:9c:86:c0:7e:6b:55:12:96:dd:8a:
ea:af:5e:9e:dd:49:5b:82:38:d3:81:ce:2e:42:d7:89:a0:a3:
9e:1f:93:be:aa:a6:7f:3e:87:f3:89:56:77:ee:e3:02:b8:95:
34:11:77:16:65:b4:ca:16:76:8b:69:2c:fa:f4:5e:47:07:ec:
34:b1:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:51 2026 by rpki-client