Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: u8T5AjXj52ONOmV2FntDwACzI0Hkn9seSzKnUZBR4y8=
Subject key identifier: 79:97:0F:4E:C5:44:8B:04:62:C3:F6:40:72:D2:FD:22:47:CA:FC:D3
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019FA93DDF2AE589226DE26C9F06FA458D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 19E8
Signing time: Tue 28 Jul 2026 15:00:31 +0000
Manifest this update: Tue 28 Jul 2026 15:00:31 +0000
Manifest next update: Wed 29 Jul 2026 15:00:31 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: NEzMX3hGO3/L9eMdSjxDUcyuIPjyhFLJz30QHUmkmE0=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:df:2a:e5:89:22:6d:e2:6c:9f:06:fa:45:8d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jul 28 15:00:31 2026 GMT
Not After : Jul 29 15:00:31 2026 GMT
Subject: CN=79970f4ec5448b0462c3f64072d2fd2247cafcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:81:19:7e:7c:36:1c:8a:b5:d4:ee:7c:8c:
be:18:9f:5b:87:32:aa:84:fa:88:bf:27:03:30:7b:
2d:ec:28:ff:42:dc:31:45:72:fe:77:16:10:33:96:
f7:ef:30:a0:33:01:cd:bc:4d:d7:a1:ce:3e:e8:86:
a9:1a:eb:90:ae:7a:5e:11:1b:4f:77:15:52:80:3c:
95:94:a5:16:c6:84:2a:05:bf:44:91:05:d1:80:df:
a4:a9:54:a1:08:fe:64:e2:ac:4b:69:41:55:12:9c:
56:df:b6:55:75:1d:1c:4a:19:22:83:1e:ca:c8:8f:
ad:5b:e5:5d:a1:60:52:76:2a:3f:7c:8d:79:26:fc:
b3:f1:91:b6:c0:82:90:e8:d4:53:19:8e:28:41:1d:
d0:67:c1:9a:f6:50:5f:d6:58:66:f5:34:da:e4:74:
0f:7b:62:70:1a:2a:f3:42:98:9e:95:f5:10:a2:26:
20:d6:53:4a:f3:5a:9b:86:a9:a0:37:c8:b7:61:5d:
61:17:71:ca:dc:f9:84:45:1e:36:15:23:6c:34:e9:
6a:dc:8e:db:7c:f2:8c:f2:d3:d9:d4:f3:69:bb:1e:
38:24:95:95:c0:3d:fd:9b:97:cc:fb:92:8c:44:55:
4c:4d:8c:8b:88:a4:2d:60:9a:ac:d2:f6:a5:25:28:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:0F:4E:C5:44:8B:04:62:C3:F6:40:72:D2:FD:22:47:CA:FC:D3
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:16:0a:c1:cc:42:59:43:db:1c:4f:6b:d0:97:a7:9f:56:68:
a3:02:77:32:00:2e:34:67:e6:63:31:d8:eb:3a:cd:90:47:ad:
a1:7e:a5:6b:da:62:ca:15:44:78:20:09:53:58:a8:66:03:2c:
98:79:86:78:5f:e1:2a:ba:69:10:27:ec:7d:b8:63:a9:b0:d2:
5d:20:4d:3c:05:24:7e:e0:3a:4d:a8:a7:7c:8b:21:db:1d:7a:
06:77:e5:76:a9:5c:5e:58:5e:e4:2e:dc:ce:72:00:27:8a:39:
79:0d:91:8b:30:d3:a0:c9:24:7c:46:1f:5b:3e:da:df:3c:68:
18:12:e2:0c:84:9b:a9:aa:9f:65:e4:ea:7d:09:d2:5a:f0:d7:
c4:d3:1a:b5:dd:72:fa:dd:ec:7e:0f:ad:ca:d0:62:68:56:78:
59:44:69:32:38:2a:5c:46:8a:af:80:5e:a8:58:35:8b:f2:83:
5c:e9:02:5a:b7:f4:f5:68:ce:fe:a1:25:a3:ac:58:bd:2e:71:
bc:b2:8a:a0:3a:9f:46:50:01:8a:20:d4:f1:4c:92:bc:26:2c:
b7:5a:b5:5f:86:34:8e:f7:c4:82:62:a8:6d:7a:b3:7c:08:6d:
a7:39:6c:93:d4:7a:be:88:c9:82:87:20:29:d5:91:d1:ad:3b:
74:82:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:19 2026 by rpki-client