Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: GB0kcvIXaTrmyS4ooQsNEsIT4t6QKvFnNECgJeiYT3A=
Subject key identifier: 94:B2:0A:FC:33:90:69:8E:AA:7B:85:4F:AE:43:34:7B:1D:24:66:AD
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 01A0C368D5D5B51CD1C09137D464A9D0302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 10:00:22 +0000
Manifest this update: Mon 21 Sep 2026 10:00:22 +0000
Manifest next update: Tue 22 Sep 2026 10:00:22 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: qml/jbgZHSwR9kUn9nfa/rAsFq4A2IJDz26W4pEFzB4=)
2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:d5:d5:b5:1c:d1:c0:91:37:d4:64:a9:d0:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Sep 21 10:00:22 2026 GMT
Not After : Sep 22 10:00:22 2026 GMT
Subject: CN=94b20afc3390698eaa7b854fae43347b1d2466ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:6c:ec:bd:a0:59:b8:e4:1d:7c:dc:32:ac:
be:29:d4:34:7f:db:e8:f5:31:85:7e:6d:54:4b:08:
38:17:49:5a:d2:c9:0e:23:a3:7d:41:ea:4e:f4:38:
23:8f:07:61:1c:ca:84:09:e1:88:52:5f:ff:bf:1c:
4d:fe:d9:ec:02:d7:b8:41:b1:16:19:ab:5b:82:7d:
66:13:2e:6a:fb:89:12:14:77:51:53:b2:85:8f:82:
ae:a4:d0:05:a3:9d:68:dc:14:a0:86:9a:27:60:7a:
b7:e6:c1:5c:0d:4a:9b:e4:37:19:c3:b8:08:43:e7:
f1:3a:14:af:c9:ba:99:ec:4a:e5:dc:66:ba:7a:fc:
3d:b7:34:ce:c4:44:5e:5d:58:f6:e0:ca:af:d1:91:
fa:c6:9d:6f:d2:85:cd:1f:57:cc:67:bd:80:9a:8f:
d7:c6:e9:b6:4a:39:8c:68:5a:8f:ca:56:af:ab:db:
0b:c8:82:02:ef:51:74:c2:5f:f2:5a:88:5a:07:80:
2b:89:fd:e0:42:93:f7:20:ad:f6:51:07:af:58:5c:
65:7c:f9:6e:ac:97:ba:f4:2f:99:d4:d1:1c:02:23:
e7:dc:93:7e:22:12:d3:7d:32:7e:c5:f2:73:9b:25:
72:c9:e6:bc:09:32:f2:ea:06:34:27:7a:3c:a9:db:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:0A:FC:33:90:69:8E:AA:7B:85:4F:AE:43:34:7B:1D:24:66:AD
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3d:d0:64:bb:c1:db:08:91:f8:19:af:2f:e4:d1:48:b3:64:
f2:5c:30:e9:bd:79:1a:e4:2f:a5:0c:7c:df:c0:81:2b:bb:8c:
eb:aa:d0:09:35:99:74:dc:fd:fc:5e:eb:d9:c9:61:74:11:e1:
e2:e5:0d:7f:58:87:28:e8:fb:61:03:80:45:df:f3:db:ec:5b:
f5:69:86:f7:ef:9a:69:4e:2f:0e:7e:a8:30:20:02:6f:b4:a9:
38:5b:77:92:0c:20:e0:5a:ee:96:8a:79:b4:09:09:6d:52:a4:
4f:99:81:b8:47:1f:5f:a4:9d:80:6a:31:76:0c:75:3d:4b:d8:
54:28:cd:d8:ba:5a:e3:d4:34:ad:b7:5a:d7:16:81:11:68:92:
11:e5:4c:0e:12:ff:24:7e:5f:0b:9a:33:13:15:41:6a:53:25:
e6:dd:82:e2:cc:ea:cf:86:5e:45:a2:85:af:f1:08:d8:3b:d5:
6f:10:29:df:32:35:7d:d1:a5:ab:57:73:c5:55:fd:22:4e:b6:
25:87:0a:25:f8:66:cd:48:81:c2:e2:c7:96:b5:18:1c:65:fd:
3a:db:f6:b3:d5:14:90:75:00:61:97:dd:df:a6:4b:22:af:85:
d0:bc:38:76:f7:c9:3e:b8:c3:22:ee:d1:53:9a:37:95:f2:ca:
7d:f3:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:05 2026 by rpki-client