Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: ccfrDfCJ5TZPKauCb01ZrEPBX3epyViV2clY7pMoKa0=
Subject key identifier: 62:3F:21:24:85:74:72:F1:1D:00:2B:38:87:86:A2:F3:45:DA:D6:1C
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019D9B19A51ED48C64071502400EC62B58EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 11CF
Signing time: Fri 17 Apr 2026 11:00:42 +0000
Manifest this update: Fri 17 Apr 2026 11:00:42 +0000
Manifest next update: Sat 18 Apr 2026 11:00:42 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: j+uy/lWRSFMpkAbrERk50DQ4jm4A2DRewns/Yeeeavw=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a5:1e:d4:8c:64:07:15:02:40:0e:c6:2b:58:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Apr 17 11:00:42 2026 GMT
Not After : Apr 18 11:00:42 2026 GMT
Subject: CN=623f2124857472f11d002b388786a2f345dad61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:a9:e3:97:d7:77:bd:50:89:6c:c7:92:6d:
49:39:17:35:2c:1c:da:a0:ad:f3:9e:9b:48:9e:af:
fc:6d:b5:d2:6e:55:eb:d4:fd:1c:ab:81:2f:ee:19:
5a:35:2f:1c:b2:a3:1f:9a:55:72:fd:4f:f2:ff:76:
31:23:ec:28:d9:2b:a8:42:c8:1d:21:88:bf:3c:c6:
8e:57:ed:33:00:23:e6:9c:e5:8b:70:a7:20:af:02:
e8:37:40:15:81:98:b9:cf:38:c1:1d:7a:9e:d3:d2:
d9:f6:94:fa:78:d7:0d:ea:76:12:dc:31:60:31:68:
13:7b:8b:68:87:93:c9:ca:1e:c1:25:9c:3d:6b:3d:
5f:ef:2b:2b:0b:b2:98:ca:44:c7:77:54:10:37:23:
15:c2:ce:5c:d2:03:f3:82:87:25:5e:bf:85:e8:77:
62:31:fa:dd:7c:1d:91:c9:3a:dd:ac:fd:7e:47:42:
ae:1b:82:23:4f:44:25:5b:bb:23:e8:f7:81:10:4b:
f7:66:88:8f:83:d5:0a:f6:22:ac:01:15:be:fe:fa:
c4:04:6b:8b:82:1b:26:5f:8d:88:9c:e6:d7:9a:b1:
01:fb:4e:6d:6a:97:c4:65:0b:1f:1f:2f:6a:06:df:
af:86:7f:e1:7c:ee:92:2a:63:24:de:fe:3e:c1:04:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:21:24:85:74:72:F1:1D:00:2B:38:87:86:A2:F3:45:DA:D6:1C
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:b2:72:dd:f6:9d:bc:dd:fe:b5:db:4e:52:fc:13:ce:57:
52:ad:2b:e5:34:ff:19:8d:6b:64:15:28:25:99:3f:dd:7c:1d:
03:19:11:ea:48:27:c8:14:75:6f:78:96:7e:e4:f7:78:08:71:
12:7f:4d:ac:7c:6d:23:79:6a:ac:b3:20:9a:04:05:03:bf:0e:
53:51:e9:4a:63:a4:f8:29:3b:cb:c3:3a:9e:c7:0a:c1:db:8f:
18:7a:6a:91:13:81:c2:44:7a:fe:c0:54:77:7e:74:83:e4:37:
ce:3b:d7:b1:c3:b6:32:a7:03:25:6f:f3:f5:49:ef:dc:60:1e:
2a:33:3f:83:98:f4:11:f9:38:b2:5d:8a:68:bd:05:40:74:49:
86:8e:0c:db:16:e6:a4:5f:10:05:af:5e:94:41:db:5b:36:1e:
ed:22:7d:02:91:a1:ef:51:1c:b3:bb:d4:1e:3e:67:5d:d5:c5:
fd:07:3a:6c:05:f6:37:5e:6f:cc:88:32:0a:d9:66:54:3b:9b:
ee:9f:b3:99:f3:de:6d:18:70:a7:84:7f:0e:11:32:70:53:9a:
73:ed:5f:19:d4:10:2c:21:83:0f:b9:0c:18:ef:71:6e:61:96:
9f:6b:1a:d0:20:ca:d1:ae:d0:18:a2:ad:54:69:d5:47:61:a4:
ef:ae:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:04 2026 by rpki-client