Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
File: 68xoOyb8VREziVmezLGvzNQ4Ttc.mft (raw, json)
Hash identifier: S1ExUOFbacgJMhbC1uLYnRPkKB9GCJ/EZYscB28nYYI=
Subject key identifier: FB:BD:95:D3:AC:23:64:75:AF:DD:1A:B4:3F:A9:60:FE:67:46:29:B9
Authority key identifier: EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
Certificate issuer: /CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Certificate serial: 01A13C38504467820E7258A6424AE46B7C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
Manifest number: 011D
Signing time: Wed 14 Oct 2026 21:01:25 +0000
Manifest this update: Wed 14 Oct 2026 21:01:25 +0000
Manifest next update: Thu 15 Oct 2026 21:01:25 +0000
Files and hashes: 1: 68xoOyb8VREziVmezLGvzNQ4Ttc.crl (hash: kwDBBNlgwAUKtFmrg1FRdhUgi3AOuN2QF02G1ENBZ+Y=)
2: hoyQuOHMgCRKjusTo81pyeqim3s.roa (hash: hqd8/fjGmCpH8TxwYvqw9pZzXIZPGSvJxX81K1zKMOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:50:44:67:82:0e:72:58:a6:42:4a:e4:6b:7c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Validity
Not Before: Oct 14 21:01:25 2026 GMT
Not After : Oct 15 21:01:25 2026 GMT
Subject: CN=fbbd95d3ac236475afdd1ab43fa960fe674629b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:f5:09:f1:a6:9f:89:5d:35:06:8e:3a:b3:
e2:c2:ad:97:5b:f4:ef:70:e2:e7:35:94:67:ba:3b:
04:63:d9:36:6a:dc:07:07:10:62:3f:a3:88:c6:a6:
c6:20:04:61:31:37:4e:62:ad:73:68:ea:95:1e:0c:
4b:fc:20:93:a1:e3:68:c8:87:5d:0a:42:63:05:2c:
ad:ff:86:7b:92:7c:f6:f9:30:d9:16:16:85:e4:92:
99:a7:81:69:ae:b2:fd:24:c8:2f:8f:47:02:f2:ee:
40:72:ef:50:2a:51:42:5e:9e:63:26:e2:6a:78:af:
49:de:96:82:df:e2:41:d6:55:db:38:bc:90:40:1c:
2b:8d:e0:29:06:ea:7f:64:71:74:ad:98:3a:bd:94:
2f:22:37:83:ac:46:a3:2e:8e:05:56:0e:4b:5d:35:
3c:84:e1:3c:0f:96:e9:f1:fa:96:b0:85:80:43:69:
bd:cf:a6:f1:34:c1:73:d4:af:e8:23:49:e2:d9:4a:
5e:e1:08:00:3b:69:05:ca:eb:44:ba:1a:06:d3:5a:
6e:5d:76:47:a6:0d:9f:4c:18:df:0b:d4:55:31:eb:
36:1e:2c:f8:b3:2d:b0:76:51:7a:e9:98:94:7e:4e:
f6:b5:d8:28:4f:ed:3a:65:73:27:a4:a1:08:9c:43:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:95:D3:AC:23:64:75:AF:DD:1A:B4:3F:A9:60:FE:67:46:29:B9
X509v3 Authority Key Identifier:
keyid:EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:24:d7:77:ab:02:49:f0:6e:7b:f5:e4:17:c3:89:72:b5:f2:
41:9e:6d:dc:05:7b:03:16:b2:c6:71:2f:76:e1:1a:bc:c3:a1:
08:4a:d3:d1:cf:1e:e8:5f:81:15:20:e3:c6:ff:29:de:dc:c7:
65:d8:00:cf:15:39:10:05:6e:a9:82:87:16:4d:1f:60:d3:d8:
f8:63:72:c4:7e:6b:a6:e3:37:ea:85:dc:3c:ae:be:c9:e2:da:
da:2a:ce:be:6b:a7:36:2c:63:e7:7f:ce:6b:8a:ad:ff:28:91:
0b:01:16:cd:8d:8d:08:71:8b:66:50:af:1d:7e:f9:8b:4a:ba:
55:28:29:69:23:b7:41:0d:1c:1c:67:b8:47:21:d5:cf:84:0b:
d3:85:fa:24:c8:89:58:fa:fe:6d:07:c2:8c:57:bb:14:d9:32:
04:a2:25:de:92:4a:cd:6a:3b:9f:7a:39:99:2b:de:e1:f5:b9:
3a:f5:a5:b5:cf:8c:47:d5:da:0d:f3:e7:d3:89:bc:80:66:8b:
49:b4:3f:a0:b6:7c:7a:6d:60:b4:4a:de:48:33:a3:62:d5:2d:
62:56:b1:8c:e7:5e:81:0f:64:3e:fe:2b:dc:a4:5a:34:02:ae:
1b:da:e6:9e:58:8b:9f:c5:c2:b5:bd:a1:89:e4:90:39:bb:7c:
1d:e7:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:34:16 2026 by rpki-client