Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: 2UL2RqZNNfW3agGIPFx4uNhlsBNuLPPFhboLSLJSgAI=
Subject key identifier: 6A:0B:7B:FB:2D:54:0C:0E:C8:1C:51:83:B3:DE:E5:0C:BB:FB:0A:97
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019FAA19F3866A09D861FC1ADC72F7145E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0D17
Signing time: Tue 28 Jul 2026 19:00:55 +0000
Manifest this update: Tue 28 Jul 2026 19:00:55 +0000
Manifest next update: Wed 29 Jul 2026 19:00:55 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: jpg0P5+9JT9h7n3Uo0LsVN15ZqG48xw4WxeFbkV13+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:f3:86:6a:09:d8:61:fc:1a:dc:72:f7:14:5e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Jul 28 19:00:55 2026 GMT
Not After : Jul 29 19:00:55 2026 GMT
Subject: CN=6a0b7bfb2d540c0ec81c5183b3dee50cbbfb0a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:57:b8:10:af:63:38:87:ea:7a:6a:7f:db:1b:
ae:c6:3a:9b:68:e6:43:e5:4f:e0:ad:42:6f:73:fd:
e0:66:82:0a:48:ab:c8:f3:34:33:c4:d5:3a:12:cc:
b7:b5:f7:0a:e6:43:57:f1:f5:36:10:73:24:b9:73:
31:ca:34:b6:c6:8e:39:e6:cb:df:93:70:6f:c9:49:
9d:bb:5b:c0:6f:c3:d4:c2:9f:57:87:4c:56:42:1d:
49:6e:0c:c2:88:46:3b:c7:f5:00:2e:1d:e8:b8:4b:
0c:65:f5:24:fc:34:19:35:52:a7:7b:58:47:13:96:
b3:ad:dd:ba:8b:10:89:f4:ae:5e:ad:0e:c9:15:0a:
70:f7:56:1a:f7:1b:9f:8b:ee:11:60:5e:09:b0:9a:
65:cd:72:ee:f2:2e:a3:23:1e:c7:ff:d2:8a:cd:11:
69:2a:70:9e:98:1f:8c:9e:81:9b:0a:2e:80:3e:64:
b0:b5:4b:0d:26:e4:66:3e:0a:54:3e:5a:bd:d6:93:
b6:31:71:e6:bb:f9:38:d2:80:ea:fa:16:fc:e9:da:
bf:20:6a:a6:18:fa:d8:71:df:e3:25:ac:e1:80:d1:
41:75:37:ca:3f:e9:53:5d:1a:00:3f:b6:ce:d0:32:
79:5a:91:71:4b:40:6f:07:3b:67:d8:02:3f:01:ed:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:7B:FB:2D:54:0C:0E:C8:1C:51:83:B3:DE:E5:0C:BB:FB:0A:97
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:e3:b0:bf:0e:d7:c2:78:13:07:d8:2c:4a:13:80:9b:3d:
b6:58:f8:72:37:f4:51:ce:82:81:ca:ab:54:41:e2:45:75:ab:
64:e0:02:ca:e8:a6:86:19:a2:36:90:c8:92:30:9a:71:14:ba:
a1:89:49:24:75:05:d8:8e:ba:19:e1:16:5b:0f:f4:65:62:d8:
9f:68:5a:c7:5f:cf:d0:a2:e3:c2:23:b2:6b:e9:23:a9:ab:c4:
6e:fc:de:bf:aa:c2:44:ca:42:ab:2b:72:ac:9b:2e:c3:23:5e:
17:c5:1f:ca:68:8c:de:2f:75:a9:a6:57:a2:37:48:e6:78:d3:
c8:82:7c:b5:03:5e:08:35:bc:f7:00:f5:66:1c:8e:5d:ae:c7:
fe:e2:6a:78:5c:80:ac:a3:9b:80:80:03:89:75:44:05:ae:1e:
5a:d4:91:0f:21:40:a0:f6:3a:0e:3f:88:50:7c:a1:a3:8e:22:
a2:2d:66:e0:df:29:ed:78:41:19:41:00:a0:39:6d:71:2a:f2:
50:99:45:43:e2:8b:3e:c9:6b:4b:68:b6:8a:2d:84:6b:f5:51:
e1:7b:fe:7d:90:4e:44:95:95:02:96:83:61:85:a5:4e:01:c1:
86:8f:43:84:06:39:24:20:b7:92:4c:6f:3a:09:a0:f9:0f:20:
33:ef:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:18 2026 by rpki-client