Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: uHfuSajkOIqsBJlf7Wyg5vVYABmaBBEz/YQ/aleSA/g=
Subject key identifier: 16:E8:68:C3:75:DD:31:CD:F2:02:4B:39:92:B9:D9:E6:C5:64:AF:10
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019D98F402E19B8829DE59EA76027F361743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0C05
Signing time: Fri 17 Apr 2026 01:00:21 +0000
Manifest this update: Fri 17 Apr 2026 01:00:21 +0000
Manifest next update: Sat 18 Apr 2026 01:00:21 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: Ks5nCBJf16ARoWTMdsfVeBXVBtHdmB+LltyTKUd+Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:02:e1:9b:88:29:de:59:ea:76:02:7f:36:17:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Apr 17 01:00:21 2026 GMT
Not After : Apr 18 01:00:21 2026 GMT
Subject: CN=16e868c375dd31cdf2024b3992b9d9e6c564af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:c2:f2:58:cd:8d:f5:3e:e9:6a:3b:7b:08:
14:d0:bc:c0:8e:eb:11:78:9a:fd:d8:f2:c5:82:1a:
96:df:4a:72:ad:38:38:05:75:b3:35:69:0d:cc:72:
02:e6:7e:1f:b3:33:3b:bf:c0:f0:fa:33:95:f8:82:
60:e9:98:eb:2b:f6:1f:04:8e:d0:79:30:59:58:d1:
18:5e:c6:26:20:f2:f9:ab:51:67:93:b5:e3:62:d0:
c0:4d:2c:e1:f9:01:9c:9c:59:bb:c2:58:fd:38:e5:
c7:3f:04:53:6a:b7:1e:cd:29:0e:27:ce:ba:29:fa:
f4:ce:fb:f0:7b:66:37:da:85:3e:1d:2b:12:ef:8f:
08:2c:da:48:ff:84:b2:46:6b:6f:f5:4a:c9:7f:8b:
dc:df:20:ef:1b:e7:d8:ce:2d:87:e9:3d:48:90:3d:
41:2b:2c:dd:0f:f7:88:5e:24:2f:e9:ed:dd:ee:68:
02:42:6d:95:4c:78:fb:2d:ed:77:c9:45:dd:64:fe:
d4:e9:0c:ad:72:f8:f6:cc:c0:df:57:dc:96:73:81:
cf:cd:24:eb:d3:d9:73:75:76:2c:22:e6:36:df:f1:
9d:18:9f:ed:f5:d3:63:b2:73:f0:51:79:f2:d0:13:
56:84:f1:9a:21:c6:03:05:78:fd:69:7b:ea:ce:3b:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:68:C3:75:DD:31:CD:F2:02:4B:39:92:B9:D9:E6:C5:64:AF:10
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ea:3a:b8:cb:ae:9b:73:8b:b7:80:f1:12:0c:85:92:f1:1e:
0f:01:b7:d2:47:a4:a3:8d:df:06:bb:42:fa:95:49:f6:1a:d8:
c2:0e:6e:c4:80:5c:f3:85:98:c7:3f:9b:ed:cf:ac:88:70:ff:
39:73:a1:10:10:ed:a1:03:36:99:ed:a0:23:19:f8:d7:b3:4e:
90:84:33:a9:a7:83:21:d0:de:81:ea:81:ec:b0:84:24:14:55:
e8:52:30:90:f4:e0:52:14:23:03:41:7e:35:46:4f:7b:a5:d6:
60:76:02:e1:1b:0e:a7:8e:5e:e5:4a:31:6b:42:84:32:d4:00:
e8:27:57:59:eb:6e:4b:ba:94:3a:a0:6f:ea:83:2c:c2:01:dc:
d5:9e:3a:e6:5c:28:70:a3:8e:c6:8f:7d:e7:81:df:21:3b:fc:
99:4c:59:02:b3:90:89:d5:da:75:02:75:55:59:e4:62:19:06:
5e:dc:90:f8:16:ef:ee:fe:64:dc:48:41:15:53:05:c4:10:94:
45:20:6c:18:ce:33:45:5a:65:94:63:4c:c3:2f:56:3e:48:1b:
cb:97:d1:98:f3:22:71:31:b6:1a:88:b9:33:cf:40:c7:91:07:
2b:0e:b9:c5:63:90:fd:94:a1:ca:4d:22:a5:3c:04:b8:ed:46:
e0:4c:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:59 2026 by rpki-client