
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: DCHTIDL3HYXqjcpmQYoERsrSa/nm11A6m26PzBehpos=
Subject key identifier: B9:23:E9:56:47:55:B2:FE:E1:97:89:33:AF:57:F5:9E:E6:D5:3D:32
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019FAA50711B132856ADDCB2EBB87EF98A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 12E0
Signing time: Tue 28 Jul 2026 20:00:26 +0000
Manifest this update: Tue 28 Jul 2026 20:00:26 +0000
Manifest next update: Wed 29 Jul 2026 20:00:26 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: tf0OhuQRmhcAYFl580Q3BIvxwEVUVl1X6jy0lh4HEhU=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:71:1b:13:28:56:ad:dc:b2:eb:b8:7e:f9:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Jul 28 20:00:26 2026 GMT
Not After : Jul 29 20:00:26 2026 GMT
Subject: CN=b923e9564755b2fee1978933af57f59ee6d53d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:bd:a1:d8:61:eb:cc:e9:b8:0b:eb:6c:d7:
2f:30:f7:74:01:33:8e:98:ab:b8:d4:dd:49:ef:b6:
09:92:35:c8:23:3a:fb:7f:fc:d8:33:14:75:ee:48:
ab:3a:f9:a6:63:65:7a:ff:eb:85:77:f1:6c:d4:ad:
2f:83:c1:ca:57:c1:29:4e:6a:2f:9a:93:e0:4d:1e:
65:52:ff:d1:70:b7:98:25:22:1f:44:11:03:84:74:
62:58:44:d4:c9:cf:a0:78:5d:fd:7a:35:2c:53:66:
66:18:47:63:81:7e:8b:e8:6a:cd:05:d8:ce:91:89:
9c:ae:57:14:1f:65:e9:f6:33:a6:06:f0:6e:6b:f8:
57:4f:b4:bd:f5:cf:28:c7:63:86:f2:4c:f9:ec:fe:
cd:13:de:74:37:bd:3f:1b:66:69:94:58:92:91:6c:
4e:26:97:43:3a:82:aa:fb:f5:07:13:3f:78:f5:c1:
f9:21:66:f8:e1:af:63:f5:9c:c6:97:bb:86:f9:d9:
a5:75:25:01:b5:51:3e:f0:54:f1:30:f7:4f:cf:d7:
51:02:a2:dd:f0:80:13:f2:a7:01:55:bf:a1:24:05:
b5:97:34:87:a5:a3:dc:c6:5a:01:a4:08:45:c3:77:
ac:c3:72:23:f2:bc:97:3b:63:d0:23:1d:3b:34:2c:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:E9:56:47:55:B2:FE:E1:97:89:33:AF:57:F5:9E:E6:D5:3D:32
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:31:04:99:13:41:5e:ed:71:4f:f7:50:77:89:c0:11:d6:
6a:e7:4d:e5:d5:13:ee:78:80:8a:fa:d1:a2:a1:0b:03:4d:b0:
f0:1a:8a:6e:e3:1f:7d:ab:81:52:f8:2c:6b:eb:4a:40:8e:45:
78:49:ee:44:2f:5a:01:37:d3:0e:9d:b0:88:d6:d7:93:b0:0b:
60:0a:01:d2:e0:9c:12:63:fa:45:3d:fe:e6:b3:ad:90:d1:ab:
35:71:da:92:a7:ea:6d:7d:38:83:01:7c:6f:9e:a7:48:3e:5d:
57:a4:a5:7b:97:56:6f:5e:83:5a:c3:b4:e0:0c:cb:7b:bd:71:
bc:20:94:f8:33:b0:fa:07:e9:4d:92:37:2e:71:70:dc:26:15:
f2:cc:0c:4f:9e:10:32:f6:d3:02:89:37:95:0e:b8:a2:1b:4d:
6e:24:f6:5a:36:5f:c9:16:b9:7d:04:a3:55:32:17:35:ac:61:
56:95:b6:54:82:80:70:36:81:c7:14:e7:98:7c:2b:ae:b7:6c:
22:08:0c:2c:5f:ee:5a:2c:3b:a2:72:65:44:6c:47:83:3a:3b:
43:b4:ef:14:da:ca:61:71:ce:71:80:09:fb:b5:37:a3:1e:89:
e8:78:6f:63:83:59:27:e1:28:1e:fb:08:b1:8c:a0:50:dd:1c:
5c:b5:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:27 2026 by rpki-client