Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
File: 68CqrU4lEtTEPhasbaXc2eu-MDk.mft (raw, json)
Hash identifier: Qi/g3OQ77hWAjhWcZySuP52MhU85T33qyw5Cd+JMX4A=
Subject key identifier: 29:29:99:2A:09:C0:72:C7:B9:76:A4:DF:AA:42:9E:67:87:5D:CD:DD
Authority key identifier: EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
Certificate issuer: /CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Certificate serial: 01A0C858F4296ED9459EE79B762EAD65AC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
Manifest number: 42
Signing time: Tue 22 Sep 2026 09:01:07 +0000
Manifest this update: Tue 22 Sep 2026 09:01:07 +0000
Manifest next update: Wed 23 Sep 2026 09:01:07 +0000
Files and hashes: 1: 68CqrU4lEtTEPhasbaXc2eu-MDk.crl (hash: /crxsh1ak8tuCTzTY6owL0Gn0jezC2NYU4QGwZboxyY=)
2: qS7L8NnGpNyu32W316uLLLPpPH0.roa (hash: tdSyc1eqpE9AG20qm1HBcOdt/PWMuB8pFBOQwDAuLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:f4:29:6e:d9:45:9e:e7:9b:76:2e:ad:65:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Validity
Not Before: Sep 22 09:01:07 2026 GMT
Not After : Sep 23 09:01:07 2026 GMT
Subject: CN=2929992a09c072c7b976a4dfaa429e67875dcddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:e7:6c:e7:58:6e:9a:36:0e:a8:3a:f7:34:
9a:bd:3e:d4:9d:29:ee:f4:8e:95:33:b0:58:16:e8:
a1:fe:b1:b4:92:5c:33:6a:7c:75:01:ff:1e:17:bf:
ac:70:34:db:dc:0b:1f:8f:d8:33:7f:10:e6:2c:08:
b3:76:30:38:14:e6:20:7a:ce:bd:14:1a:e9:40:75:
50:9a:9d:97:9d:4f:94:ce:73:cb:85:d7:f6:27:16:
60:b6:a9:d6:4b:a3:a7:42:fd:47:4e:33:e9:6b:62:
47:cd:ab:60:b4:db:84:03:c8:28:14:00:dd:7c:39:
3b:86:32:50:53:25:bd:77:66:50:91:2e:43:fb:f8:
b1:0b:0e:91:c9:ea:eb:96:51:3c:dc:1f:41:1e:d0:
42:91:56:1d:5f:ca:b7:42:81:b4:d5:43:b0:df:78:
92:66:2d:e0:0a:fd:ad:0d:95:02:59:21:27:ed:40:
85:b4:c2:2c:03:35:9c:9b:a6:c4:21:fe:c6:33:d2:
f5:6d:4d:8e:48:6b:11:f4:14:2f:ad:76:ea:fd:0c:
e3:1a:bd:50:a8:2b:16:e9:55:99:2f:7a:48:4e:9a:
73:f3:30:0e:9b:5d:1c:b6:fb:cb:7b:16:28:48:e8:
a1:b2:9b:5b:47:86:78:72:87:3b:be:81:df:f8:87:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:99:2A:09:C0:72:C7:B9:76:A4:DF:AA:42:9E:67:87:5D:CD:DD
X509v3 Authority Key Identifier:
keyid:EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:23:19:0a:fc:be:91:2a:26:f8:ae:a3:d6:f1:dd:65:f0:
f0:ff:e2:cc:32:bc:46:54:3c:95:f7:68:9f:6f:dd:2d:b9:85:
ce:d5:fe:05:49:c1:c7:38:86:60:66:da:98:72:1f:cc:aa:bf:
26:d5:46:08:f4:40:15:d6:74:c6:55:e9:e5:e5:6f:e7:1b:df:
cc:6b:81:3c:d3:41:49:26:7e:21:bf:a9:23:0c:c1:26:e8:f2:
8d:35:54:d2:3a:7e:ca:7c:ae:95:71:15:f0:b9:8e:ef:4e:ed:
84:aa:e8:fe:da:8e:4e:64:4c:9c:1a:d4:f7:13:3a:d7:b0:3b:
b5:83:9e:32:44:80:1d:83:4f:65:2e:ba:3e:9c:bc:2a:6f:3d:
41:e3:87:04:71:21:70:39:5c:6a:46:38:ab:1d:c3:de:e3:d8:
dd:06:20:5c:8c:92:ed:ef:d2:cf:bc:1f:e8:24:84:ba:05:50:
ec:96:58:bc:1d:ba:b9:9c:a1:f2:96:bd:8c:22:81:c3:b9:85:
c8:06:d7:b8:04:98:d0:38:8a:de:bd:7d:81:65:d0:30:d8:5a:
19:57:7d:9b:c3:08:44:16:4a:7b:91:9e:73:0b:0a:0f:1f:a8:
9b:22:17:46:91:88:cc:b5:30:21:cb:6d:73:ae:04:43:f6:1b:
72:72:0c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWPQpbtlFnuebdi6tZawRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzBhYWFkNGUyNTEyZDRjNDNlMTZhYzZkYTVkY2Q5ZWJi
ZTMwMzkwHhcNMjYwOTIyMDkwMTA3WhcNMjYwOTIzMDkwMTA3WjAzMTEwLwYDVQQD
EygyOTI5OTkyYTA5YzA3MmM3Yjk3NmE0ZGZhYTQyOWU2Nzg3NWRjZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0XnbOdYbpo2Dqg69zSavT7UnSnu
9I6VM7BYFuih/rG0klwzanx1Af8eF7+scDTb3Asfj9gzfxDmLAizdjA4FOYges69
FBrpQHVQmp2XnU+UznPLhdf2JxZgtqnWS6OnQv1HTjPpa2JHzatgtNuEA8goFADd
fDk7hjJQUyW9d2ZQkS5D+/ixCw6RyerrllE83B9BHtBCkVYdX8q3QoG01UOw33iS
Zi3gCv2tDZUCWSEn7UCFtMIsAzWcm6bEIf7GM9L1bU2OSGsR9BQvrXbq/QzjGr1Q
qCsW6VWZL3pITppz8zAOm10ctvvLexYoSOihsptbR4Z4coc7voHf+IcaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkpmSoJwHLHuXak36pCnmeHXc3dMB8GA1UdIwQY
MBaAFOvAqq1OJRLUxD4WrG2l3NnrvjA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhDcXJVNGxFdFRFUGhhc2JhWGMyZXUtTURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYjk2OTItOGEyNy00ZDk3LTlkZGUt
NjZhYWZhN2M0NTEyLzEvNjhDcXJVNGxFdFRFUGhhc2JhWGMyZXUtTURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYjk2OTItOGEyNy00ZDk3LTlkZGUtNjZhYWZhN2M0NTEy
LzEvNjhDcXJVNGxFdFRFUGhhc2JhWGMyZXUtTURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxIjGQr8
vpEqJviuo9bx3WXw8P/izDK8RlQ8lfdon2/dLbmFztX+BUnBxziGYGbamHIfzKq/
JtVGCPRAFdZ0xlXp5eVv5xvfzGuBPNNBSSZ+Ib+pIwzBJujyjTVU0jp+ynyulXEV
8LmO707thKro/tqOTmRMnBrU9xM617A7tYOeMkSAHYNPZS66Ppy8Km89QeOHBHEh
cDlcakY4qx3D3uPY3QYgXIyS7e/Sz7wf6CSEugVQ7JZYvB26uZyh8pa9jCKBw7mF
yAbXuASY0DiK3r19gWXQMNhaGVd9m8MIRBZKe5GecwsKDx+omyIXRpGIzLUwIctt
c64EQ/YbcnIMmQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:19 2026 by rpki-client