Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: 4Y+cHGB9FpIXcAXl3mK+48J5Iy2o3EbdrWJFMl1HeGY=
Subject key identifier: 33:03:BF:85:CB:D4:B6:F3:3E:A9:9C:45:24:1F:21:D3:04:15:84:CA
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019FAB2C41654D47429791EBCBA397111064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 19E9
Signing time: Wed 29 Jul 2026 00:00:31 +0000
Manifest this update: Wed 29 Jul 2026 00:00:31 +0000
Manifest next update: Thu 30 Jul 2026 00:00:31 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: v7kA/db3fKwbdN1+c5Md1v5gf/yorMY9QeCUsb0cTSQ=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:41:65:4d:47:42:97:91:eb:cb:a3:97:11:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jul 29 00:00:31 2026 GMT
Not After : Jul 30 00:00:31 2026 GMT
Subject: CN=3303bf85cbd4b6f33ea99c45241f21d3041584ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:90:d1:fe:10:cf:8b:fa:20:bb:7a:9c:11:60:
16:a8:64:53:82:19:96:29:ac:76:2d:cd:d4:24:d6:
82:a7:5f:9e:2a:e4:f5:61:7b:a7:65:38:22:3b:ee:
b6:7e:79:58:1b:70:65:a9:2f:4c:c2:2e:b5:99:23:
4d:c1:53:c3:07:aa:d2:66:40:71:f6:a9:8f:7d:78:
a4:37:5d:66:4c:6c:04:fd:56:7f:38:57:c6:c6:b0:
23:e7:b1:85:6b:9b:73:b3:2e:de:b9:72:b6:e4:fd:
46:77:91:e9:0d:3a:28:1a:9c:26:42:1e:91:90:fa:
56:68:09:87:45:d6:c5:7c:80:a7:04:c7:cf:51:09:
98:1a:10:a5:d2:40:aa:7e:5c:19:26:82:53:74:36:
6f:ae:bd:d8:8c:50:e1:9b:52:f3:c3:bb:9f:eb:c7:
b9:42:e2:c7:28:68:3e:47:ee:96:d3:31:90:80:02:
68:c4:dc:6e:58:fe:3b:b9:e8:6a:19:09:9f:c4:21:
ec:d4:82:96:18:45:86:d8:d7:83:1a:20:09:1a:ec:
9a:12:4e:13:fd:66:6e:33:0f:f4:37:55:b4:54:4c:
b4:2c:24:e6:62:e3:f8:36:59:1e:90:86:ee:07:6f:
2f:7b:9b:ef:b7:c1:f5:d1:be:c4:15:c6:da:62:b2:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:BF:85:CB:D4:B6:F3:3E:A9:9C:45:24:1F:21:D3:04:15:84:CA
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3a:66:25:6f:8e:f1:3e:da:5d:aa:47:3d:68:54:c6:b2:a2:
da:94:6d:3f:81:19:ae:34:3a:18:88:f6:86:5c:22:6a:12:d2:
4e:f4:4d:ec:93:f1:b1:6e:ff:b5:04:4b:6b:15:84:89:01:f7:
56:61:ba:b3:05:b9:5f:d3:30:5f:45:6e:45:86:59:e6:9e:95:
58:29:4c:e1:46:8f:ed:30:94:95:ee:6d:3c:ff:6f:d2:dd:50:
ff:0a:b4:59:76:bb:0c:d1:a6:89:e9:b6:52:9b:f5:92:44:87:
7d:3a:e8:78:a2:43:7c:3e:f0:b7:58:8e:b3:16:32:a7:38:cd:
13:36:f9:4e:1f:0d:86:6b:ff:c3:e1:66:f7:4d:0d:cc:6f:c9:
d3:51:26:e6:25:06:3f:c8:c6:26:83:7c:56:5b:e7:b1:bb:c3:
71:d6:87:14:70:94:4c:36:a8:b6:72:e5:7f:25:82:61:40:dd:
2a:fc:df:8a:d3:7c:62:db:9e:98:c1:e8:19:70:de:58:e5:4e:
2c:28:0b:cb:1f:5f:c7:3d:98:29:d6:7d:d8:3d:c4:31:c3:1a:
72:6b:ff:c1:f6:6a:58:57:01:81:97:ba:40:24:9b:0a:98:35:
6d:15:16:52:c7:ec:c8:98:44:90:ac:ca:f0:f9:28:64:8a:08:
8b:15:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:44 2026 by rpki-client