Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: QNu4omn9nOGzjn6idZ2Nr/ZFdOSj7jDGdqmZluHTjJo=
Subject key identifier: 49:08:88:74:EF:49:41:BF:BC:42:30:74:AA:E5:20:82:96:3F:3A:92
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019CAD9021EDDFBAC96F5ECF1D855667773C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 1154
Signing time: Mon 02 Mar 2026 08:00:29 +0000
Manifest this update: Mon 02 Mar 2026 08:00:29 +0000
Manifest next update: Tue 03 Mar 2026 08:00:29 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: Em7q+uA1FTyY9xQELKu4kFnPjp6UP2A9vAcnIbM+wQc=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:21:ed:df:ba:c9:6f:5e:cf:1d:85:56:67:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Mar 2 08:00:29 2026 GMT
Not After : Mar 3 08:00:29 2026 GMT
Subject: CN=49088874ef4941bfbc423074aae52082963f3a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:5c:fa:a2:0c:a6:15:28:28:e1:0e:6a:5d:
53:9d:4f:9d:22:81:f5:46:6e:db:4f:18:fd:bf:bd:
96:c1:ef:fa:c6:f3:db:bf:9e:6c:56:27:be:90:4f:
d8:27:df:e3:da:d9:6b:e7:39:da:e1:cd:63:ec:e0:
06:62:03:b4:eb:31:a3:35:bf:2d:33:45:18:6a:d7:
da:a6:21:13:bd:8e:7b:72:52:f5:34:28:c4:33:6c:
80:62:da:6f:f0:22:f9:c5:56:06:06:98:34:6e:51:
94:32:67:72:c7:03:a5:48:13:18:14:2c:43:fa:b6:
2d:84:1f:8c:86:77:43:c1:15:31:25:7a:bf:9b:2d:
27:f7:4c:82:52:f1:e5:77:4b:5d:89:51:d2:e9:35:
c2:a8:7e:3f:97:0d:79:cc:ee:06:4f:e9:74:1a:d5:
c8:90:5a:50:5e:db:3d:de:2c:15:a5:f2:f7:10:19:
7d:b4:4a:13:11:19:09:d3:ee:61:be:16:23:98:54:
a7:d5:88:62:a1:9a:41:ae:b0:e1:1c:12:71:b8:02:
95:22:06:f3:3a:27:17:5a:e2:b9:7d:77:39:ad:4f:
92:aa:80:a9:13:3f:65:d4:b9:a5:68:d4:c2:c1:ae:
9a:73:2b:72:4a:7d:3f:b3:ca:96:ec:61:9b:9d:b1:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:88:74:EF:49:41:BF:BC:42:30:74:AA:E5:20:82:96:3F:3A:92
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:11:44:e5:79:6c:7b:3b:62:35:4a:0f:62:e1:20:41:22:c4:
73:de:c3:ed:9d:98:65:10:a0:70:bb:32:b0:bb:5b:6f:0a:9d:
b9:c4:6d:69:a8:d5:8d:92:e0:04:f4:49:d9:86:f5:c3:09:d0:
fb:98:fd:32:fd:17:49:92:f7:35:61:bc:48:fd:96:00:6f:01:
2b:78:d0:25:ac:2c:a2:a8:82:9c:d6:2a:01:97:fe:b5:09:0b:
40:c2:e0:fb:a1:33:7e:a8:9e:8e:a8:df:67:81:25:b1:c8:37:
32:94:3d:98:1a:6f:17:c3:ed:38:6c:8a:a2:6d:5b:78:6e:79:
1f:3a:30:93:3f:41:72:25:d0:fa:8f:ee:5e:7e:12:98:55:60:
8b:b5:86:73:87:19:9f:e5:aa:09:b8:af:b5:19:63:dd:5f:50:
a8:0e:e4:1a:eb:88:4c:33:f0:48:52:8a:8c:56:a5:0a:2c:b7:
30:f0:bd:c5:6f:48:0e:aa:04:11:9f:a2:d2:a3:92:2e:02:65:
eb:88:d7:e0:65:d5:9d:09:1f:41:13:09:67:5c:6f:8c:34:c8:
11:1d:58:8f:e9:3d:de:89:c2:ab:58:88:eb:25:42:0a:a8:8c:
c0:22:d1:0e:bf:de:26:e4:b0:5f:e6:e2:dd:77:8c:ce:aa:91:
23:a3:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:34 2026 by rpki-client