Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: y3HvynmTyXfzVjwH5e9taP4T7NIhELhzT6K8R3uas9g=
Subject key identifier: 5B:4D:4E:C8:B9:2E:CD:7C:12:AC:3F:36:F7:79:47:EB:C3:4B:6E:72
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019F829E128CE6A738F29D93FD02CC7EA4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 19D4
Signing time: Tue 21 Jul 2026 03:00:25 +0000
Manifest this update: Tue 21 Jul 2026 03:00:25 +0000
Manifest next update: Wed 22 Jul 2026 03:00:25 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: m+v5JUmc6W4jVaU0kNXMkKhF3IYS2qXVG9gi5ibRYII=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:12:8c:e6:a7:38:f2:9d:93:fd:02:cc:7e:a4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jul 21 03:00:25 2026 GMT
Not After : Jul 22 03:00:25 2026 GMT
Subject: CN=5b4d4ec8b92ecd7c12ac3f36f77947ebc34b6e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:24:9d:f6:3e:08:b9:73:4b:6b:80:e2:c9:
71:99:1b:a5:68:e1:13:a0:f2:e1:80:ec:67:fb:3f:
14:df:69:18:be:34:27:45:08:c3:7f:f2:ee:47:4d:
82:be:0d:5b:02:f3:40:a4:ea:ce:07:5f:0c:b7:24:
c4:88:15:91:82:9c:e3:5e:d4:77:31:13:ab:db:c4:
71:ec:21:1f:1a:a0:d2:4f:a9:46:22:13:67:95:49:
b2:25:67:78:a9:ac:f7:93:5b:87:0f:f9:be:d6:b5:
38:7e:fd:f4:69:9b:f6:b4:51:2d:59:0e:40:ea:97:
50:7c:d3:85:98:c9:9f:0c:1f:a7:10:a6:b9:3e:35:
38:5e:3b:1d:2c:b4:be:66:86:15:06:f4:f6:37:e6:
59:6e:93:dd:ef:10:4f:a4:7c:a6:c1:cb:16:a2:a3:
dc:eb:16:4c:87:de:58:5e:f3:88:cf:53:ad:3f:8c:
8d:1d:5f:98:44:df:c5:bd:85:47:1f:0e:b1:a1:fd:
3a:e7:6f:90:ec:31:62:c7:01:0b:f9:48:b4:b3:10:
ab:ef:bb:f3:0a:d5:c5:3d:6e:a7:3a:6e:09:f3:74:
a0:7b:41:a3:16:d3:80:fc:b7:e6:3e:b5:61:d8:10:
58:82:04:31:bd:6d:74:db:af:0b:ec:74:da:2f:73:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:4E:C8:B9:2E:CD:7C:12:AC:3F:36:F7:79:47:EB:C3:4B:6E:72
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:16:df:be:1c:ef:d5:86:06:6c:82:b9:29:f1:29:81:a3:
73:ee:74:ca:04:50:1a:65:a3:ef:04:d5:50:dd:1f:60:a2:ec:
8a:35:9c:44:7d:26:cb:2a:7f:91:ca:2d:f7:e5:df:27:a6:0f:
b2:8c:d8:ec:72:a6:45:30:c2:68:9a:4d:c6:5b:0f:37:bf:a4:
54:32:10:87:6b:91:52:31:ae:c5:b7:7c:92:4b:a3:55:a3:17:
bb:72:9e:ee:93:b4:fd:c7:9f:a3:16:80:a1:a9:11:36:05:45:
6b:46:65:b9:ef:c1:5d:87:87:58:73:2d:cc:20:73:ac:a4:7c:
e1:b5:44:12:dc:b6:d0:39:1c:28:e8:e2:b4:a5:6f:fe:9a:7f:
c3:30:ed:54:00:ac:cd:07:d0:4d:9b:7b:24:ae:f6:24:41:c2:
bd:14:09:3e:91:79:3a:cf:f2:70:11:4b:d1:57:02:4b:8b:fe:
be:a6:bc:f5:20:b5:28:f8:ec:2d:92:25:cc:ed:5c:2c:20:1e:
e0:b7:de:22:72:2c:8f:57:f3:77:f9:38:4a:24:3e:2f:5f:b8:
83:09:fa:fe:ca:bc:6f:ff:37:21:ef:34:6d:9d:40:bf:dc:f1:
9c:45:0d:cc:87:87:5d:38:cc:2b:93:18:3a:6d:80:ee:ba:77:
9a:f8:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:29:47 2026 by rpki-client