Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: Tn9NIgzxzNLbyZkuSOkLGbSDsMb92Ip6k6yoeXFds0g=
Subject key identifier: 30:B3:75:82:9F:17:BD:D3:C3:AD:73:D5:EE:E9:27:D5:43:CB:1E:05
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01A06C4B5F16B0CD5CDDA0A54D815DC91BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1A4D
Signing time: Fri 04 Sep 2026 12:01:13 +0000
Manifest this update: Fri 04 Sep 2026 12:01:13 +0000
Manifest next update: Sat 05 Sep 2026 12:01:13 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: VLxFlIME4DeSmvlb9Il5KxpvEiFAFL4vLI51ES3c51Y=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:4b:5f:16:b0:cd:5c:dd:a0:a5:4d:81:5d:c9:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Sep 4 12:01:13 2026 GMT
Not After : Sep 5 12:01:13 2026 GMT
Subject: CN=30b375829f17bdd3c3ad73d5eee927d543cb1e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:05:40:58:05:45:5f:19:e5:c8:9f:0e:db:
cf:52:89:ab:29:8e:02:27:b4:0c:1b:2e:02:e2:c2:
a8:f9:e9:fe:65:a4:19:80:43:46:9b:b8:2a:ad:43:
05:fe:62:94:d5:e9:d9:4c:f6:1a:87:fa:1a:55:7c:
2b:b1:e1:94:d6:51:b2:29:dd:91:cd:1f:6a:02:7a:
62:64:98:de:a0:56:f3:68:3e:2b:08:55:e5:48:f5:
2a:5f:fe:0d:f5:0b:f4:1e:c1:06:de:a0:f5:b1:f1:
ac:e9:6c:cd:63:23:69:f0:66:e1:6d:f3:48:3b:98:
52:d1:f0:43:b8:06:f0:04:e0:ee:f5:57:d2:22:94:
f6:9b:7d:4f:bc:ea:52:fd:e5:fe:f9:c8:55:a9:fd:
8c:1b:a4:e2:d9:a6:08:2a:f0:fc:d5:30:77:16:3c:
74:30:24:9d:a7:dd:9d:a2:6e:f4:44:77:7c:26:8f:
0a:ec:3f:76:93:0e:5f:27:02:4c:c7:ab:8d:f1:a1:
2a:17:42:6b:48:e2:da:16:dc:14:aa:b4:14:e6:51:
e4:b0:09:0a:5d:05:d3:35:b8:38:fc:d7:0a:9a:e3:
cb:ed:0a:77:fb:1b:b5:f3:a6:b8:05:0e:3c:dc:58:
c6:6a:47:92:7c:c7:81:36:12:76:c2:40:68:0b:f0:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:75:82:9F:17:BD:D3:C3:AD:73:D5:EE:E9:27:D5:43:CB:1E:05
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:40:7c:8f:be:66:42:9e:3c:ff:d5:46:fb:b9:06:02:b3:14:
77:00:ad:43:83:ed:da:c7:96:42:58:77:a7:06:64:b5:51:f3:
73:96:86:1c:9f:73:cf:18:45:d8:07:4c:82:3f:b1:f4:0e:1c:
29:1f:11:a9:98:0c:bd:4d:9b:59:d3:60:78:cc:f4:b6:2c:09:
26:6b:53:e2:64:c3:45:f5:d8:60:54:96:ae:82:10:87:50:5f:
5e:85:c5:51:a6:02:e8:94:84:d9:60:16:dc:97:de:ed:91:ee:
2c:db:f9:cf:91:72:9d:88:c2:bd:31:56:e3:41:13:c0:39:e4:
7d:9d:f8:15:70:0b:c7:ab:9b:22:45:9c:bb:64:a2:bc:c2:bc:
d8:53:b0:55:44:f3:54:b7:3f:35:d5:94:ff:07:39:68:82:9c:
ef:25:98:67:4d:f4:21:98:98:92:50:c6:53:64:f8:c6:6d:4f:
5b:8c:2b:fb:49:b2:c0:43:3e:7b:13:8e:42:d6:54:90:8a:4f:
ac:4d:23:52:f2:0d:28:fa:ea:0e:79:91:3d:07:bd:33:17:38:
b5:ef:f1:1b:0f:fb:f5:77:f9:08:6f:87:11:e5:e1:74:36:1c:
ce:09:0b:c3:ba:b1:de:b6:65:b9:e4:84:e6:38:2f:07:f9:75:
95:9c:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:26 2026 by rpki-client