Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: aLkXlg+8JgADmRoTj/L/w/x7bq38/dA2pJiEMTcbWHI=
Subject key identifier: 5E:18:D4:13:96:8E:EF:57:FD:AB:66:A9:12:55:75:AF:43:76:32:AA
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 01A0C40DCEA841C7855DD1740A0CA600F9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0DA9
Signing time: Mon 21 Sep 2026 13:00:34 +0000
Manifest this update: Mon 21 Sep 2026 13:00:34 +0000
Manifest next update: Tue 22 Sep 2026 13:00:34 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: 13q5PA36m+77asbSt3RpZUYBuo0GkJWDmI2zJBEVrVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ce:a8:41:c7:85:5d:d1:74:0a:0c:a6:00:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Sep 21 13:00:34 2026 GMT
Not After : Sep 22 13:00:34 2026 GMT
Subject: CN=5e18d413968eef57fdab66a9125575af437632aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:05:1a:59:80:bb:12:44:04:d2:0b:17:cb:
bc:2e:bd:f2:fb:ca:37:e7:c7:64:2a:e5:18:89:d2:
ce:51:05:b2:c3:12:e5:f1:1b:c7:f3:1b:c0:d5:ef:
31:c0:a5:f2:4c:1b:ef:03:b7:3e:5c:30:d3:32:44:
1c:8b:43:84:9f:42:18:f4:b6:e3:19:d7:31:14:65:
60:8e:fe:8f:25:ef:39:00:6a:6b:14:10:9f:12:1a:
cc:81:aa:dc:5b:f8:e6:b1:4d:5d:6b:a2:40:b4:82:
b2:5b:85:e3:aa:e9:7e:7a:6f:81:38:af:33:70:b0:
75:f2:05:f3:09:7d:45:5e:37:e5:cc:b2:0b:80:af:
28:85:ce:ee:d8:5e:e0:c4:a5:f5:9f:64:32:a1:a7:
90:38:47:f7:c6:5b:94:b6:f6:c0:53:ea:87:b7:45:
f9:5e:b0:86:84:4e:5c:2f:6a:16:71:8e:b9:a6:19:
85:25:0e:19:2a:8c:0e:0a:42:f5:b8:28:83:a6:8d:
48:59:15:68:2c:38:bf:fa:55:c6:1f:33:56:57:57:
0a:7d:8a:0c:2a:0d:ca:7d:89:2b:75:54:5c:f3:d5:
c2:32:36:dd:d8:78:fd:05:5d:3d:89:8c:6f:9e:8a:
42:de:e5:a1:87:a1:5d:8b:ee:84:11:13:c8:ac:d5:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:D4:13:96:8E:EF:57:FD:AB:66:A9:12:55:75:AF:43:76:32:AA
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:37:78:2d:2c:eb:31:8f:e2:f5:71:99:7b:23:40:9b:cc:69:
9a:75:34:be:6f:9b:71:e2:ea:22:c1:76:ff:a4:de:3f:f8:12:
a6:1f:03:e7:63:3f:12:b6:40:91:c1:8b:14:b2:83:da:ba:cd:
2b:d1:6d:6f:b5:eb:7c:dc:1d:6a:8a:16:d1:a9:ac:8d:17:32:
c0:dd:5f:c3:bb:62:95:ec:69:2f:95:53:34:cc:c0:df:d7:ab:
60:68:63:42:b5:22:8b:22:1d:74:7b:96:4a:2a:51:45:8d:e2:
f8:89:3f:e2:f4:bc:8f:17:f4:3e:b3:0e:1d:d5:bd:fe:4b:78:
8a:7e:13:c9:05:17:59:4f:7b:cb:72:81:e4:20:f6:b2:b6:3d:
57:96:46:d7:ae:b1:4b:5f:6f:15:56:c4:08:18:77:d0:fe:0d:
28:61:42:8b:ee:93:5a:fc:30:d3:5a:74:42:7a:ad:ce:0f:88:
e8:77:96:de:f9:30:84:6e:f1:0a:76:23:34:38:ed:d7:27:ed:
22:87:92:d5:aa:5c:b8:a0:53:2b:79:bb:a9:82:bd:7c:12:5f:
79:72:22:bb:8b:1a:d3:dd:c0:2c:55:92:7a:46:3b:9f:02:c8:
1a:0b:a6:eb:74:f7:2a:85:ae:43:97:13:cd:e7:c7:d6:0f:09:
86:7f:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:19:31 2026 by rpki-client