Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: rvvqUh5j62gOSYk6LOS1IXWJoIOs3M+YurHhnDMxMzg=
Subject key identifier: 0E:95:07:70:2E:0E:23:2A:04:F0:27:00:10:12:DB:EC:B0:17:8C:01
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01A16B35B19A8A63B53D3F730682E23FFCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1AD1
Signing time: Sat 24 Oct 2026 00:00:43 +0000
Manifest this update: Sat 24 Oct 2026 00:00:43 +0000
Manifest next update: Sun 25 Oct 2026 00:00:43 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: eVAMxRRWjcvI9J5b1suI9oVe1dTuO9YQyzyHZIwM428=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:35:b1:9a:8a:63:b5:3d:3f:73:06:82:e2:3f:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Oct 24 00:00:43 2026 GMT
Not After : Oct 25 00:00:43 2026 GMT
Subject: CN=0e9507702e0e232a04f027001012dbecb0178c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:d5:9f:e2:e3:e2:93:d4:ea:f3:49:cc:82:
a3:b0:53:de:14:9b:20:cd:a4:eb:57:e8:b6:e4:6b:
f8:9a:f6:34:4c:4d:e8:36:06:ab:36:76:d1:99:26:
54:20:be:f0:b9:47:6c:ba:2c:d2:82:ab:92:f2:8e:
1f:55:fd:59:43:c2:0b:b1:8c:d6:95:90:e8:68:27:
d0:29:1c:d9:dc:ce:14:b1:d3:ec:d3:3a:8d:3a:36:
1a:a4:93:46:e8:2d:ab:4a:a1:d7:0e:b6:02:08:0b:
5f:4a:90:21:87:f2:56:2e:80:38:40:39:8e:69:de:
3d:7f:2f:00:bb:9a:64:6d:b9:36:c8:66:26:b8:be:
cb:d3:d5:a2:6a:3d:1f:7f:a8:1c:c0:d5:8a:f8:d0:
4b:0d:85:aa:34:ae:4e:71:96:83:54:88:99:cd:da:
fd:80:41:29:cf:31:e4:8c:11:6a:f4:a9:ea:f6:c9:
3e:9b:92:19:b0:c9:57:44:78:69:77:f0:b4:26:e8:
b4:6d:38:40:99:0c:2f:87:31:63:77:7f:e9:c1:7f:
7c:d9:b2:b4:05:a8:36:60:86:7f:49:62:27:ac:e7:
35:e4:81:c4:50:8c:d6:d6:ec:72:db:ce:1c:79:fd:
ac:55:e2:db:b8:60:bf:68:bd:e0:55:d0:11:8b:6c:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:95:07:70:2E:0E:23:2A:04:F0:27:00:10:12:DB:EC:B0:17:8C:01
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9e:23:3f:b7:b1:c5:aa:b0:8b:01:29:91:c8:6b:ac:9b:1c:
80:fc:4f:6a:b8:6f:76:39:4a:25:ca:ca:51:1f:b3:3e:e0:e5:
85:f0:32:57:53:01:7b:cd:26:75:62:d0:15:54:d4:9e:c5:a0:
5f:41:4e:5e:37:81:3a:f7:d7:ff:6b:25:c8:a4:bc:b1:4b:7f:
6f:2f:ef:ea:3a:a7:c7:ca:da:83:56:7c:3a:a7:06:45:7e:ef:
2d:24:09:ff:fe:a6:cf:e7:aa:96:8c:13:b7:73:10:f0:53:df:
b9:73:ad:38:eb:72:45:99:84:a0:f8:a2:c3:af:b1:2e:8e:ee:
0d:ff:4f:dd:ac:f6:c6:9a:29:16:f1:4e:0b:0d:08:99:d4:84:
d4:36:ef:7e:cb:fc:8b:9c:0c:c3:ee:b9:b3:c3:18:37:18:15:
3a:0f:49:f2:36:b9:7e:4f:fd:4c:c0:7d:6c:c6:bc:bd:3f:1c:
4a:91:b2:b0:59:8f:2d:69:78:69:0e:c9:6b:66:16:7f:cb:0a:
38:e4:d2:7d:fb:b1:92:d5:7b:0e:cd:ec:54:c1:6b:5c:1a:eb:
07:28:48:85:ba:c9:f0:72:89:09:8d:be:59:69:1a:3a:76:43:
88:0b:a4:15:df:8b:2c:73:05:d4:66:6b:42:1b:3c:cd:8d:99:
26:1a:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:41:31 2026 by rpki-client