Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: X8vW+KlCqUMpQBzjGDDJtY1+0oT0C3qCFpE+CyawhA8=
Subject key identifier: 5E:F3:D2:1D:A5:3B:AD:01:79:D9:6A:F2:0D:28:BA:99:D3:B5:4F:64
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 019FA974C26A810B2EA2A7F78FB9E19BCBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:00:29 +0000
Manifest this update: Tue 28 Jul 2026 16:00:29 +0000
Manifest next update: Wed 29 Jul 2026 16:00:29 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: rS6XDFc1zrweCKqzlYWvMBkG+4YtU/HCcB5Tpg0x3HA=)
2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c2:6a:81:0b:2e:a2:a7:f7:8f:b9:e1:9b:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Jul 28 16:00:29 2026 GMT
Not After : Jul 29 16:00:29 2026 GMT
Subject: CN=5ef3d21da53bad0179d96af20d28ba99d3b54f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:74:dd:af:39:e5:c9:3b:5e:18:58:83:2e:
9f:10:63:f3:f6:e3:14:e6:f1:e1:26:3e:3f:6b:98:
0a:76:82:b2:cc:8d:35:2d:9a:ae:b1:36:c7:48:95:
76:de:77:54:d3:51:aa:cc:dc:1c:1a:00:3c:d5:08:
02:49:93:b0:f0:15:b8:a9:18:d5:a9:0f:78:1e:f9:
33:01:c3:2d:d1:2b:76:ec:6c:0e:98:a3:40:3f:6b:
e7:80:61:e2:59:8d:c0:b6:d1:b1:57:33:59:f6:27:
d5:0b:4e:5e:72:3e:fc:83:d5:0f:ff:85:38:60:07:
55:a8:51:4e:0c:7f:89:fa:a6:2d:63:fa:3a:3c:f4:
ca:88:86:3c:4e:b8:e2:d9:96:e7:e2:17:ba:da:e4:
21:28:70:da:8d:0b:c7:01:58:19:b8:18:bc:0e:a0:
a6:e3:97:7d:35:60:12:51:96:99:72:8d:a3:b1:1d:
f8:54:6a:62:2a:14:d4:bc:b6:55:f6:ff:ff:ed:55:
b0:a8:ec:8f:b7:45:83:7e:45:6f:f7:3b:42:51:40:
29:94:be:c4:87:de:0f:b6:e4:db:71:58:c0:ae:66:
9e:47:c8:98:49:a5:2f:fa:60:76:af:98:8f:3b:de:
a4:e6:47:35:49:14:3e:0f:4d:3f:3d:84:4b:34:57:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:D2:1D:A5:3B:AD:01:79:D9:6A:F2:0D:28:BA:99:D3:B5:4F:64
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:87:44:3a:44:1e:a2:79:b7:9c:9a:54:0e:05:f3:93:21:
b1:f0:f3:87:ba:75:25:07:b6:28:55:9e:6b:90:8f:c5:fe:13:
b8:c5:52:4e:b9:50:aa:29:15:b5:1d:b7:e6:4e:86:ca:8d:97:
16:fb:96:77:d3:c2:ab:04:ee:c1:ce:61:5a:c4:4d:8c:82:53:
25:83:0e:05:e2:57:e5:1d:e1:0d:96:b4:21:6e:e6:b3:95:61:
d3:12:0f:4d:53:24:e9:f2:a1:15:4c:8d:28:ef:80:af:c8:c4:
6b:53:cc:a7:ca:79:32:c0:74:32:aa:9a:e6:04:a3:e1:c3:19:
b1:93:75:ad:0d:9c:13:ae:0d:b9:07:b6:c7:7f:3b:15:de:6d:
f1:30:db:41:92:3d:a0:69:61:77:2b:17:2f:be:ab:d6:9d:f2:
72:88:36:45:14:e8:0d:05:77:8c:9f:f0:87:a4:0e:c4:80:8c:
50:64:23:3e:ed:b0:03:d2:c5:ca:27:87:74:77:e4:4f:e1:5b:
a0:6b:bc:a8:ca:c5:0b:b6:8f:04:b6:d9:45:78:d7:41:fb:a8:
3f:d2:99:45:b3:a7:04:12:84:e5:36:f9:dd:4b:09:66:62:fb:
a0:e5:bf:98:5d:57:a1:c0:d2:4d:41:7f:ce:37:2d:e4:7e:ec:
90:26:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:14 2026 by rpki-client