Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: CEAzIWUzTl2VDqot+P1d3xFj2Z2TNfeQsUPSTypbasY=
Subject key identifier: E5:68:5C:71:15:E3:F5:CB:D6:C2:AC:C3:9C:99:43:91:28:FE:63:A3
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01A172EF8CEDEA9208964BAB087AFD38D4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1AD5
Signing time: Sun 25 Oct 2026 12:01:04 +0000
Manifest this update: Sun 25 Oct 2026 12:01:04 +0000
Manifest next update: Mon 26 Oct 2026 12:01:04 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 5zVNLE3PFh1u23zs7YDMBOOgkvbyo7Y9wD39I1lufUo=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:8c:ed:ea:92:08:96:4b:ab:08:7a:fd:38:d4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Oct 25 12:01:04 2026 GMT
Not After : Oct 26 12:01:04 2026 GMT
Subject: CN=e5685c7115e3f5cbd6c2acc39c99439128fe63a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:a5:28:8a:71:0f:ab:78:69:15:7a:8f:28:
5f:e6:90:3a:9a:87:27:18:58:3e:82:7c:be:f2:df:
8b:8f:3c:fc:35:98:87:79:1d:16:54:08:a0:a7:60:
5a:9b:bb:61:10:86:91:46:61:3e:96:88:18:5a:b1:
0f:cc:e0:cb:b0:bb:85:7c:95:61:56:2f:f7:64:f2:
7d:9b:3f:63:9e:ff:7f:5f:41:6e:d5:10:4e:07:a7:
b2:71:f1:29:ac:d2:53:f0:e2:76:49:48:ae:1d:21:
aa:4c:72:72:89:7b:2d:8f:29:b1:72:d7:d1:b4:30:
28:b1:90:fe:02:35:89:2c:a0:38:00:a4:66:7f:c9:
8a:fe:7e:fd:2a:33:5a:ce:94:31:30:39:b0:47:a8:
9c:6d:00:58:94:86:9b:fe:fb:7c:c0:08:af:48:f5:
a8:21:2f:25:84:69:64:29:0e:ce:3d:95:7e:77:0c:
32:1c:45:d2:29:dd:c0:e5:48:92:b4:96:1a:58:5d:
05:30:0b:e7:20:6b:27:13:ef:d5:89:78:71:e3:c8:
0b:7a:55:1d:b1:c1:3d:01:b9:cb:21:48:07:e3:82:
48:6f:79:f2:0d:73:cf:37:bb:67:65:d6:bf:eb:82:
3f:94:fc:0a:75:c9:81:eb:81:72:81:c1:c8:e4:f3:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:5C:71:15:E3:F5:CB:D6:C2:AC:C3:9C:99:43:91:28:FE:63:A3
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:0e:77:e3:21:06:bd:05:3b:aa:c1:57:a1:11:10:c5:4e:
a4:01:c2:87:de:ef:61:53:a5:df:a4:96:24:48:50:e1:53:d1:
9e:11:fc:ae:65:b3:fe:97:80:3e:42:73:62:23:f6:60:42:eb:
d5:04:e6:9d:57:f9:ab:c3:04:fd:e4:d2:2d:3e:49:a1:e6:4a:
9d:1d:7e:02:0f:46:b0:46:0a:48:48:91:5b:b3:1a:2d:07:cb:
68:8b:b5:75:50:e9:5e:1a:24:68:47:de:4a:28:70:32:de:cf:
0b:9b:47:1a:7d:1d:b1:d7:78:43:ca:29:c6:1e:4b:f9:3b:bd:
67:fb:52:79:0e:1f:6c:c2:9a:e1:dc:b8:23:b7:a7:9e:19:db:
6e:20:33:a2:9a:31:da:57:49:c5:c4:31:1a:9b:f5:a9:3a:90:
b2:d6:35:81:07:1f:b0:77:cf:be:ad:3c:2a:3e:e5:c2:14:4b:
c3:f3:65:3e:d5:a4:63:88:18:1a:85:fd:18:d5:e1:a2:3d:f5:
3c:ce:af:f5:00:10:ea:9f:b8:f7:42:80:3b:fd:cf:59:05:51:
cd:57:af:07:6a:a3:3e:19:fb:d3:d2:0f:c0:c4:d5:a4:7c:cd:
9b:d4:c0:95:23:f4:07:dd:8f:1d:eb:ea:f5:5c:86:52:7b:64:
f9:9c:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:01 2026 by rpki-client