Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: XUQvtMuKNK0JEAXj0Cakf86WhkYYEVNJL+xzX3Cn4V8=
Subject key identifier: 8C:CC:48:59:EF:8C:8F:17:5E:D9:69:2D:47:A1:B7:0A:37:EF:FC:91
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019EBE7FA37BFCD39D5EDC9D9A9A193EE8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0C9D
Signing time: Sat 13 Jun 2026 01:01:36 +0000
Manifest this update: Sat 13 Jun 2026 01:01:36 +0000
Manifest next update: Sun 14 Jun 2026 01:01:36 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: keiGSdKcT+VDGJLq3qO+yV0UvJ/KS6o1rAiVQWPI50w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a3:7b:fc:d3:9d:5e:dc:9d:9a:9a:19:3e:e8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Jun 13 01:01:36 2026 GMT
Not After : Jun 14 01:01:36 2026 GMT
Subject: CN=8ccc4859ef8c8f175ed9692d47a1b70a37effc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:0c:95:c7:40:c3:75:c0:e5:1b:6d:a2:18:
06:ca:bc:b6:61:0c:59:95:e8:d7:16:2a:bc:21:41:
ec:b4:35:65:1f:b6:6b:49:a9:be:f3:2a:5e:8c:a9:
02:f2:fb:98:99:73:28:78:84:f5:90:16:5e:5b:88:
83:b8:d6:36:81:38:d0:91:ad:ed:8e:af:9d:59:22:
a1:c6:96:84:0c:6f:a3:91:00:2d:87:2c:4f:75:eb:
20:bd:59:c4:4b:54:5e:c4:ac:e5:33:02:7f:2d:c6:
88:e7:07:8b:79:16:7d:43:6c:29:7a:f6:e1:54:64:
a0:36:9b:54:33:48:89:3e:08:c0:75:63:19:0f:bf:
e1:7d:84:b3:7a:31:b1:81:d9:b4:28:21:24:98:36:
ec:82:c1:73:66:13:e4:ac:5a:80:a1:35:d4:5b:36:
1a:3b:ff:84:35:5b:d4:3a:c9:94:c7:d5:18:3a:1a:
b0:9f:7a:e2:df:a5:44:b9:c0:28:4a:ff:91:50:89:
d0:fc:99:0b:a4:a3:03:0e:9d:09:ee:cd:22:9c:3d:
45:e5:f3:6a:8c:d9:35:3c:0d:62:9f:27:3a:77:57:
eb:50:c9:c1:bc:df:b4:b6:db:6f:93:d1:3f:b4:3a:
04:9f:69:96:4f:54:27:55:e3:97:2d:b1:04:f1:32:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:48:59:EF:8C:8F:17:5E:D9:69:2D:47:A1:B7:0A:37:EF:FC:91
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:20:f9:02:d1:6d:74:12:bd:07:c9:c0:32:f0:94:81:77:
e9:ae:cd:ae:48:9e:16:2c:ce:3a:11:5c:ed:f3:65:ec:8b:c5:
72:ac:f4:5f:f6:28:ec:11:65:ee:bc:bf:97:58:c8:53:9e:53:
f1:2c:23:da:d4:c5:d3:1c:5f:0f:51:e7:cb:09:7f:68:9d:ba:
73:f3:a0:b2:27:c0:ae:2a:44:1e:36:75:36:04:6d:63:bb:9e:
62:87:7d:2a:1f:53:7b:e4:44:04:7d:75:14:e5:51:ce:40:5e:
bd:d7:79:08:3f:8f:96:19:86:77:7c:07:17:4b:f8:ae:eb:ac:
9a:04:a4:f2:fd:70:41:9a:50:33:39:09:8e:68:76:0c:b4:6f:
00:f7:b7:87:a7:4a:b0:ae:b2:36:19:5a:71:2f:46:50:9e:ed:
90:5a:6c:60:1d:de:5f:e9:d9:20:82:d1:f6:e6:58:a6:84:eb:
82:11:8c:3a:9f:06:43:5d:c1:62:99:00:d1:0d:d9:42:e7:57:
5b:1c:14:29:9d:ec:b9:dc:79:dd:87:d0:a9:21:dc:4c:e2:ea:
fa:86:ea:6c:80:5e:12:6c:d9:3c:bc:8c:61:68:51:52:50:a0:
6e:fd:8b:34:92:a1:71:ba:8f:45:cd:28:64:ca:26:9d:4e:07:
80:c5:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:21 2026 by rpki-client