Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: KwlOdXqHfWWD3SRNy/LEEgSnbXUbjExbUDAqKsYFm58=
Subject key identifier: 49:E9:83:1F:12:F5:7E:CA:8A:2E:F1:FF:47:B8:C0:E9:DF:80:F6:31
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01A17E85BA051F9E22F09AB784541D3743EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1ADB
Signing time: Tue 27 Oct 2026 18:00:55 +0000
Manifest this update: Tue 27 Oct 2026 18:00:55 +0000
Manifest next update: Wed 28 Oct 2026 18:00:55 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: Tl7WjDVOzqWVjOGVbxMuGckKlktBXJiuoPunElkDm2A=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:ba:05:1f:9e:22:f0:9a:b7:84:54:1d:37:43:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Oct 27 18:00:55 2026 GMT
Not After : Oct 28 18:00:55 2026 GMT
Subject: CN=49e9831f12f57eca8a2ef1ff47b8c0e9df80f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:48:65:4a:8b:c5:d5:ce:33:74:66:71:50:
cd:7d:28:30:bc:63:6f:f4:bd:9e:9d:2c:30:cf:a1:
f3:c5:e7:d5:6f:1a:ae:3c:75:86:1c:86:5b:f3:3c:
0a:08:50:a6:fa:bf:88:4f:7a:1b:6a:e0:ac:61:77:
b2:59:20:d8:84:8d:39:3e:c0:42:36:2e:ff:d2:9e:
16:d8:e2:40:7b:0c:d4:4b:c6:8f:2f:2a:fe:dc:ef:
11:16:0c:6b:3c:fe:5f:76:cd:6e:40:58:f2:1e:21:
23:c3:56:54:dd:a1:92:19:cd:a6:9e:50:67:32:c6:
9f:db:4d:69:59:8d:3f:96:10:7b:3f:eb:75:a6:bc:
b3:db:f1:e7:be:7a:ab:3d:43:74:51:21:b6:8f:4c:
02:de:87:ed:df:07:7c:6c:f5:7b:b4:0a:89:d0:09:
8c:cb:2a:2c:73:11:92:63:05:2e:0a:b4:3c:7b:82:
1c:7e:25:6b:83:92:b4:85:0c:19:ff:5f:85:8e:43:
c5:d3:b5:30:fd:d0:5a:7a:6b:25:54:e8:d7:53:f2:
54:4d:15:19:a6:7b:03:5c:6f:86:46:2d:6a:4c:0d:
3c:db:da:dd:c5:38:23:0d:18:bc:ab:26:05:f9:c4:
b2:5e:65:f3:4f:fa:2a:06:c5:b5:fa:44:51:17:6f:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:83:1F:12:F5:7E:CA:8A:2E:F1:FF:47:B8:C0:E9:DF:80:F6:31
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:3b:f1:63:d6:2f:f9:f2:36:df:ed:b2:c2:06:9a:ba:89:
c8:f6:01:70:14:21:8f:65:e6:ce:1f:8f:7f:e6:73:32:5a:4d:
22:29:9f:48:5d:48:29:c4:af:bc:52:c8:58:db:fa:17:30:76:
84:bb:a9:42:5c:6d:f9:f3:95:4f:f7:b4:3a:7e:dc:c7:da:32:
69:8a:a3:dd:d7:1b:93:d4:bf:b2:2e:68:0b:14:2f:6d:0d:f3:
c8:23:6c:54:97:7f:57:70:a7:db:f7:06:5c:af:6e:80:9c:98:
7c:ee:38:e0:36:c8:f8:11:31:99:fb:da:d0:b8:61:0a:7b:d4:
2d:a2:67:39:a0:1d:64:c0:b0:ad:6c:95:28:dd:62:d2:2d:cc:
15:1f:de:cf:cd:d4:fb:a0:86:c3:a3:97:74:33:f4:1a:f1:75:
8f:27:6c:49:20:96:15:ae:2a:1f:f2:e5:41:36:57:7c:90:12:
d2:2c:7e:02:95:db:e3:fd:de:35:83:c6:be:51:66:93:19:09:
f5:4d:75:e4:f4:68:ff:d0:15:c4:e0:62:a0:a6:35:4e:d5:83:
41:ce:5f:15:c4:d3:49:96:d6:f5:9a:32:37:6c:0a:9e:1d:54:
76:e8:a6:a1:1e:9c:e1:65:2a:46:9c:d1:f5:05:73:ef:32:b1:
31:24:c9:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hboFH54i8Jq3hFQdN0PuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjYxMDI3MTgwMDU1WhcNMjYxMDI4MTgwMDU1WjAzMTEwLwYDVQQD
Eyg0OWU5ODMxZjEyZjU3ZWNhOGEyZWYxZmY0N2I4YzBlOWRmODBmNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdFIZUqLxdXOM3RmcVDNfSgwvGNv
9L2enSwwz6HzxefVbxquPHWGHIZb8zwKCFCm+r+IT3obauCsYXeyWSDYhI05PsBC
Ni7/0p4W2OJAewzUS8aPLyr+3O8RFgxrPP5fds1uQFjyHiEjw1ZU3aGSGc2mnlBn
Msaf201pWY0/lhB7P+t1pryz2/HnvnqrPUN0USG2j0wC3oft3wd8bPV7tAqJ0AmM
yyoscxGSYwUuCrQ8e4IcfiVrg5K0hQwZ/1+FjkPF07Uw/dBaemslVOjXU/JUTRUZ
pnsDXG+GRi1qTA0829rdxTgjDRi8qyYF+cSyXmXzT/oqBsW1+kRRF281cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnpgx8S9X7Kii7x/0e4wOnfgPYxMB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7478WPW
L/nyNt/tssIGmrqJyPYBcBQhj2Xmzh+Pf+ZzMlpNIimfSF1IKcSvvFLIWNv6FzB2
hLupQlxt+fOVT/e0On7cx9oyaYqj3dcbk9S/si5oCxQvbQ3zyCNsVJd/V3Cn2/cG
XK9ugJyYfO444DbI+BExmfva0LhhCnvULaJnOaAdZMCwrWyVKN1i0i3MFR/ez83U
+6CGw6OXdDP0GvF1jydsSSCWFa4qH/LlQTZXfJAS0ix+ApXb4/3eNYPGvlFmkxkJ
9U115PRo/9AVxOBioKY1TtWDQc5fFcTTSZbW9ZoyN2wKnh1UduimoR6c4WUqRpzR
9QVz7zKxMSTJHA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:16:55 2026 by rpki-client