Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: e10O9lfAfRLWk4a9i6fWPgXBdG8JGW6lkEkGdFVKwdw=
Subject key identifier: 91:A0:C6:68:EF:74:42:4E:F1:BF:65:28:18:25:CF:2F:D1:25:BA:44
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019E1C7DC9224C55C88CE2E01832B44D3489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 1212
Signing time: Tue 12 May 2026 14:01:05 +0000
Manifest this update: Tue 12 May 2026 14:01:05 +0000
Manifest next update: Wed 13 May 2026 14:01:05 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: REbNLEbXNKlJTopaC3quCjyLDErGX3+oyw1cE96NVNA=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:c9:22:4c:55:c8:8c:e2:e0:18:32:b4:4d:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: May 12 14:01:05 2026 GMT
Not After : May 13 14:01:05 2026 GMT
Subject: CN=91a0c668ef74424ef1bf65281825cf2fd125ba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:70:a8:b2:20:c3:4e:97:7a:4e:6e:b3:dc:
9b:36:ec:98:9b:da:5c:c4:ea:ff:eb:70:e9:2b:7c:
c8:1c:cb:e3:5c:02:11:f3:44:cb:3f:c9:76:3f:43:
40:80:42:9d:bd:69:8e:ad:a2:30:35:f4:cf:29:aa:
96:de:c3:5d:6b:5d:b9:e1:b6:c4:02:0c:b1:14:6d:
ca:c6:1f:9e:f1:60:a4:33:da:4e:a7:4a:45:86:3c:
d3:9f:b5:c5:71:b8:c8:35:cb:98:90:44:93:ab:18:
a4:cc:8e:9e:47:2d:e1:f4:1d:3c:68:83:cb:45:d0:
86:f2:c8:91:39:7a:ba:3d:7d:ed:9c:dd:53:bc:3d:
51:b8:b3:4c:b6:4a:6c:37:ae:48:71:26:a3:e2:2a:
f8:ff:59:b6:c4:a3:03:fe:99:98:80:ef:22:9a:15:
77:89:79:17:32:f5:d7:cf:4a:47:e2:76:ee:b4:4b:
20:df:18:9b:79:e5:ab:88:aa:fa:1a:a8:e2:97:ed:
35:1e:f5:98:57:88:31:da:d4:34:8e:58:4c:49:74:
8c:3f:2b:b1:ac:cc:0c:d2:2b:19:12:78:65:3f:0d:
84:ba:96:8a:d4:f0:46:20:06:4d:0f:ba:cd:df:c9:
38:a5:a8:09:02:1e:77:8f:b9:61:4c:81:0b:96:a6:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:C6:68:EF:74:42:4E:F1:BF:65:28:18:25:CF:2F:D1:25:BA:44
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:b2:d3:9d:75:69:f9:b0:74:05:d1:8c:86:f8:1b:63:ef:
70:93:b3:2e:fd:33:81:d6:b4:1c:f5:6e:88:6c:cf:38:3b:6e:
cc:79:72:56:b8:63:ae:3d:58:7f:27:fd:4c:93:7c:84:5c:4c:
7f:87:e9:50:97:81:f9:a0:7d:8b:c6:ec:e0:b1:7f:30:6a:bf:
b8:5d:25:17:91:28:6f:f2:5c:0a:73:40:60:7b:47:4d:e8:38:
5c:c5:0f:67:f3:bc:40:c2:c0:22:73:e0:b0:b3:b3:ba:e3:f0:
c3:a8:02:47:ba:47:9f:b6:e8:c9:5c:8a:c7:75:d1:b8:68:d3:
c2:9a:6a:24:98:50:9e:db:f2:15:3f:24:31:51:21:ee:f2:2a:
27:8e:ae:aa:52:3e:af:77:77:c1:81:7e:56:64:52:38:7a:14:
e5:b2:d2:f4:9e:11:e9:b0:2b:81:08:70:c3:23:02:4f:85:12:
d3:3a:a3:8c:11:02:4b:ab:e6:0a:63:04:21:29:bb:ff:24:75:
0d:fa:b8:08:32:db:ab:b7:52:82:f4:53:97:a2:23:97:f1:a2:
55:18:cd:23:6f:5f:ed:ac:24:e0:51:fa:45:7c:05:e7:13:88:
fc:7a:d4:8f:30:ce:5d:58:98:d2:44:b0:76:38:db:ad:cf:54:
85:54:91:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfckiTFXIjOLgGDK0TTSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw
ZGUwNTQwHhcNMjYwNTEyMTQwMTA1WhcNMjYwNTEzMTQwMTA1WjAzMTEwLwYDVQQD
Eyg5MWEwYzY2OGVmNzQ0MjRlZjFiZjY1MjgxODI1Y2YyZmQxMjViYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/5wqLIgw06Xek5us9ybNuyYm9pc
xOr/63DpK3zIHMvjXAIR80TLP8l2P0NAgEKdvWmOraIwNfTPKaqW3sNda1254bbE
AgyxFG3Kxh+e8WCkM9pOp0pFhjzTn7XFcbjINcuYkESTqxikzI6eRy3h9B08aIPL
RdCG8siROXq6PX3tnN1TvD1RuLNMtkpsN65IcSaj4ir4/1m2xKMD/pmYgO8imhV3
iXkXMvXXz0pH4nbutEsg3xibeeWriKr6Gqjil+01HvWYV4gx2tQ0jlhMSXSMPyux
rMwM0isZEnhlPw2EupaK1PBGIAZND7rN38k4pagJAh53j7lhTIELlqabawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGgxmjvdEJO8b9lKBglzy/RJbpEMB8GA1UdIwQY
MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt
NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi
LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyiy0511
afmwdAXRjIb4G2PvcJOzLv0zgda0HPVuiGzPODtuzHlyVrhjrj1Yfyf9TJN8hFxM
f4fpUJeB+aB9i8bs4LF/MGq/uF0lF5Eob/JcCnNAYHtHTeg4XMUPZ/O8QMLAInPg
sLOzuuPww6gCR7pHn7boyVyKx3XRuGjTwppqJJhQntvyFT8kMVEh7vIqJ46uqlI+
r3d3wYF+VmRSOHoU5bLS9J4R6bArgQhwwyMCT4US0zqjjBECS6vmCmMEISm7/yR1
Dfq4CDLbq7dSgvRTl6Ijl/GiVRjNI29f7awk4FH6RXwF5xOI/HrUjzDOXViY0kSw
djjbrc9UhVSRyg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:22:40 2026 by rpki-client