Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
File: 68xoOyb8VREziVmezLGvzNQ4Ttc.mft (raw, json)
Hash identifier: 7Ea6qEzWOLFwnuVK4wAwLTlXAZ6whp7Boc5+8MHW9NI=
Subject key identifier: D5:AE:96:24:E7:7E:E5:7E:96:6A:1A:7E:77:73:15:05:8F:67:74:B8
Authority key identifier: EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
Certificate issuer: /CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Certificate serial: 019FAC770838B524EACDDEBA97D37730EE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:49 +0000
Manifest this update: Wed 29 Jul 2026 06:01:49 +0000
Manifest next update: Thu 30 Jul 2026 06:01:49 +0000
Files and hashes: 1: 68xoOyb8VREziVmezLGvzNQ4Ttc.crl (hash: E5iLLrphQe2phFvPBCJrhWMQTRBNfH+SqH+ivuErm9E=)
2: hoyQuOHMgCRKjusTo81pyeqim3s.roa (hash: hqd8/fjGmCpH8TxwYvqw9pZzXIZPGSvJxX81K1zKMOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:08:38:b5:24:ea:cd:de:ba:97:d3:77:30:ee:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Validity
Not Before: Jul 29 06:01:49 2026 GMT
Not After : Jul 30 06:01:49 2026 GMT
Subject: CN=d5ae9624e77ee57e966a1a7e777315058f6774b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:0d:9d:13:67:65:bc:da:2a:68:77:31:43:
b8:a3:5d:89:c5:a6:57:d4:a6:3b:11:85:aa:8e:dd:
d6:72:4f:49:36:fc:db:6f:a4:98:16:a3:18:0f:0f:
27:36:9d:17:75:e5:1b:82:46:0e:29:6c:9b:d1:f2:
5a:f7:a8:55:0d:39:27:20:13:e3:2a:4e:c5:41:bf:
6f:9c:cb:da:3d:e7:8d:3a:11:d3:e0:e9:9a:3b:d3:
5d:dc:80:fe:f2:74:2b:4d:bf:32:4f:29:f2:84:e5:
92:ce:ac:f8:12:75:4a:67:4f:df:b1:62:cb:09:a4:
63:77:fa:84:32:5d:06:81:5d:6a:b3:06:21:09:9a:
57:ed:01:ca:84:37:d7:d3:06:77:83:68:7c:e4:6a:
a4:6a:30:29:db:58:00:e2:3a:d7:c4:e7:1b:a2:d4:
2e:31:10:5c:c1:ba:69:0e:3d:24:06:62:70:df:af:
d3:c9:2f:f7:e8:18:57:a2:0d:49:e9:30:a9:0b:d2:
6d:ae:8b:8c:d5:4f:b7:3d:ce:57:02:51:8b:c6:3a:
67:b0:aa:49:81:55:37:39:b4:be:f6:c5:54:a0:07:
ae:6a:d4:52:ea:63:7c:58:7f:e2:a2:5c:00:2b:52:
0f:00:bc:b9:b0:32:62:5f:fb:41:ac:55:32:e5:bb:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:96:24:E7:7E:E5:7E:96:6A:1A:7E:77:73:15:05:8F:67:74:B8
X509v3 Authority Key Identifier:
keyid:EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b1:f4:99:a4:5a:72:02:ed:2f:39:98:01:d6:26:1a:e7:f3:
b6:04:02:6b:e3:51:ac:dd:57:7d:df:bb:5d:06:67:be:53:e8:
c0:62:47:7c:7d:b3:57:12:95:d6:dd:b7:89:f4:60:5c:52:b1:
7b:dc:06:dc:b7:0d:68:a2:80:36:fd:84:46:24:b4:2e:d0:c0:
1c:27:0a:cc:a2:a4:cc:a8:a8:d7:ed:5f:17:cc:7f:5d:59:8c:
fd:68:9a:ae:07:9f:d3:c9:0e:2c:71:70:00:bf:04:2b:f3:2e:
96:c0:c2:ff:c3:d8:d6:2c:7f:da:85:1d:c7:22:b1:44:de:8f:
75:b7:a8:4b:cc:46:55:22:ac:15:c5:86:1c:cd:26:7b:4b:11:
f1:7c:63:61:5a:56:58:54:f2:9d:ae:12:bb:41:bd:0b:e4:f9:
b4:6c:56:df:0b:92:ba:e0:bb:de:4d:da:b7:6e:6e:0a:7b:46:
35:e8:e1:be:d7:bc:f2:1c:8e:cd:3b:79:b0:30:63:ef:67:e7:
40:a6:79:f8:60:ff:ec:74:6b:a0:30:92:ca:20:f9:ea:05:ac:
9a:7e:1c:ef:9e:07:7f:8c:86:f2:1d:37:6b:1c:8b:c8:a8:d9:
6c:82:65:4a:5f:67:8a:5d:f0:57:e2:ac:a2:d7:7e:24:ff:bf:
c5:9d:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:37:57 2026 by rpki-client