Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: xzFpqwvQU5GfA9x+RqZZ5seyu2HlRPHamb7+jk64eqs=
Subject key identifier: DD:9F:BF:92:6B:7D:6C:55:DC:77:F5:3B:D9:88:4B:E1:E1:F3:56:ED
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019D9A06F7FACBBBCD029F481CD203274689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 06:00:41 +0000
Manifest this update: Fri 17 Apr 2026 06:00:41 +0000
Manifest next update: Sat 18 Apr 2026 06:00:41 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: /cn4zh1Hm463XFacyAfdaL+fm6KMLemuA8IN1PYlmII=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f7:fa:cb:bb:cd:02:9f:48:1c:d2:03:27:46:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Apr 17 06:00:41 2026 GMT
Not After : Apr 18 06:00:41 2026 GMT
Subject: CN=dd9fbf926b7d6c55dc77f53bd9884be1e1f356ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:8c:26:0d:1b:fe:d2:26:27:ea:f1:c3:ec:
ec:33:cc:f2:29:19:aa:a9:c2:d1:7b:c1:12:8b:54:
0b:c4:80:79:25:56:cf:0b:36:02:3e:7c:65:94:82:
4e:80:76:75:47:f1:00:1d:6b:c7:55:da:dd:e7:ac:
9a:7e:22:6d:56:81:6c:59:32:11:e9:f9:13:fe:4f:
95:e2:bd:22:d0:50:57:76:9e:b9:91:2d:d4:3e:92:
c8:99:e2:7d:03:ca:dc:8f:e6:6f:73:c5:3a:43:fe:
9d:d1:24:27:dd:4c:d4:0a:8c:ec:47:64:eb:24:2c:
bd:89:02:6b:04:54:c5:95:13:25:08:1b:7f:95:58:
c2:c5:aa:d3:fd:e7:95:75:65:8a:b5:b1:6f:db:a1:
d4:40:e2:1a:7c:dd:6d:a7:b0:f8:e2:de:68:12:4b:
37:a9:dc:62:6e:0d:e2:4b:66:86:22:16:fe:22:31:
0a:f0:7e:57:cc:63:23:fb:e1:6b:23:14:40:ff:6a:
7c:60:96:c1:67:d5:15:7c:eb:13:8b:33:80:be:e5:
86:e3:83:d4:54:ea:0e:e7:d1:db:bb:c3:72:a5:b8:
76:df:ee:28:c0:e3:31:9c:65:4f:1e:48:88:8f:1d:
d8:5b:af:02:39:27:67:e8:1b:ad:5c:54:ca:4e:ec:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9F:BF:92:6B:7D:6C:55:DC:77:F5:3B:D9:88:4B:E1:E1:F3:56:ED
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1a:76:9f:56:33:bb:02:93:4b:bf:28:40:45:f7:eb:b5:00:
3a:4a:49:1e:1b:23:d4:01:2b:69:fc:1c:7b:09:ca:09:2e:28:
1f:92:f7:1d:8b:8c:30:17:66:fb:cf:3f:f5:61:5e:24:95:7a:
bb:c6:01:09:61:9c:b3:ee:cf:73:09:3a:31:44:83:69:34:b0:
97:bf:9e:96:6c:04:d6:df:1a:82:af:44:58:e3:8e:5d:51:60:
20:66:1c:5e:f8:9e:5d:04:47:21:69:bc:4e:63:80:31:47:1e:
31:84:26:2b:50:a3:2a:c1:6f:48:19:83:9a:f7:ae:74:ea:e4:
a3:8f:8b:76:32:1e:7c:3f:d3:a1:b5:34:81:ba:af:09:bb:bc:
10:a1:24:b3:9a:d5:32:82:42:3c:fb:62:af:4b:06:c9:04:18:
cc:fe:fd:7f:51:38:16:e9:0e:d5:15:4a:ca:05:bc:a6:36:50:
d0:8a:fe:1d:cf:6a:cf:2d:e7:c9:9d:7c:46:90:47:8c:89:f2:
fe:3c:aa:bb:a8:8b:d5:ff:52:8d:16:ed:58:92:2e:e3:9f:34:
33:a8:2c:30:49:98:98:a1:dd:97:76:b0:a7:ae:40:cb:ff:b8:
03:3d:f4:30:43:de:24:3d:25:01:00:3d:51:65:3d:a7:2d:c2:
41:ee:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:20 2026 by rpki-client