Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: BugRT7ujT9VOrAU1YuqUo0RvYocAaqOJxVC5Uuh5CkU=
Subject key identifier: 6E:93:04:08:39:E7:E2:25:5E:BD:9C:CF:5E:20:95:27:E4:35:76:99
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 01A1DD5E0624343E99B08C2D60F753B3F329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 04:01:29 +0000
Manifest this update: Sun 15 Nov 2026 04:01:29 +0000
Manifest next update: Mon 16 Nov 2026 04:01:29 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: en8gM5Pus3Xk5hKliwqPG0nZIfhFphIXfE8VS+pQNmk=)
2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:06:24:34:3e:99:b0:8c:2d:60:f7:53:b3:f3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Nov 15 04:01:29 2026 GMT
Not After : Nov 16 04:01:29 2026 GMT
Subject: CN=6e93040839e7e2255ebd9ccf5e209527e4357699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:64:b7:1f:8f:9f:17:0d:a8:51:dd:ed:e1:
35:aa:df:49:07:d9:67:e2:0e:78:c5:7b:0f:d3:3c:
c7:e4:76:07:64:a7:c4:48:b7:52:d7:84:df:d6:84:
63:fc:04:41:c7:5f:00:26:3e:b0:5d:9c:1a:1e:58:
67:5e:4d:97:a5:92:e7:ac:da:f6:ea:6f:81:33:0b:
25:21:15:58:c5:7b:ab:d6:e0:a5:54:cb:1c:54:0d:
56:24:97:75:c2:58:bb:30:2a:bc:25:5c:d5:54:f6:
a8:40:a4:61:13:68:bb:27:27:eb:95:6d:ce:90:dc:
44:df:61:d6:0c:62:ec:0d:0c:ec:5f:dd:a0:a5:09:
74:d7:14:15:a4:86:54:06:4c:67:ba:2c:22:f7:2f:
a3:18:c8:f7:aa:ec:91:3d:3b:73:fe:84:18:07:82:
21:da:d4:25:45:7b:42:76:47:58:9c:1d:ce:98:b1:
90:db:f7:f3:e6:04:1d:3e:45:ac:f1:3e:e7:1e:73:
81:a3:78:1e:b8:17:e6:9e:70:50:7c:c9:ea:23:f2:
27:e1:a4:68:bf:ab:d6:02:ef:6b:08:3c:f8:19:a8:
40:1c:71:83:87:9c:42:44:40:33:1d:02:4d:fc:3e:
c2:04:45:b4:ac:26:e9:a4:b4:0d:6f:36:32:f5:dd:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:04:08:39:E7:E2:25:5E:BD:9C:CF:5E:20:95:27:E4:35:76:99
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f7:b4:02:d5:60:be:55:06:44:94:12:c3:68:bc:b3:af:62:
ae:3c:34:d8:2a:c5:fb:83:1d:97:2f:32:75:7d:fe:f7:0c:6c:
55:e2:e4:56:09:0f:66:75:c8:63:c4:b5:8c:71:03:d3:21:56:
85:e4:f0:6c:b8:1d:70:91:cb:03:ac:da:d9:d9:fb:2d:45:92:
7e:68:6b:79:5e:a3:b3:4c:bf:d8:11:a3:4d:ae:0f:e4:3d:0f:
54:d8:eb:2e:b2:92:cf:98:1d:60:d0:13:46:04:6f:50:4d:58:
29:50:f0:91:cf:bb:e7:f2:7d:bf:a0:1c:eb:30:4b:ab:ab:d9:
38:e8:2f:f7:d4:16:bf:73:0e:68:77:56:11:23:04:45:0d:b8:
00:b2:40:e5:e8:62:ed:55:91:2e:50:8f:d2:70:49:c5:f9:70:
f5:c9:c6:28:67:cf:c7:16:7b:16:00:10:83:ab:74:44:da:0f:
16:58:88:fb:b4:9d:5c:e8:15:89:0f:45:c1:e5:17:d1:0a:2d:
b7:3a:a6:e1:0d:06:d2:f2:0c:fb:ac:7c:de:90:5a:43:b0:6f:
13:70:02:f9:53:f5:06:4a:0a:e4:5b:67:36:4f:2a:33:02:79:
55:34:90:03:ea:52:e2:98:f8:06:ec:50:1a:2a:b4:0e:05:c9:
2f:9f:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:07 2026 by rpki-client