Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: uhzYnA5Au1ih35FP5bTMgrn7T1MoGaKuQethx7nNaac=
Subject key identifier: A5:F6:3B:05:E3:3D:BB:92:34:46:3C:28:E3:20:04:E9:91:BC:2E:94
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019D8A94521AA4AD726DBC94A7879AD56B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 18CF
Signing time: Tue 14 Apr 2026 06:01:09 +0000
Manifest this update: Tue 14 Apr 2026 06:01:09 +0000
Manifest next update: Wed 15 Apr 2026 06:01:09 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: jnH4f774IR7pAeFZy/B9wB64A7cjA5yPb/1CapFMnO0=)
2: FkEb5kOUXDoGU9cxFEEw4ugM9BA.roa (hash: /kWXhxGuhCtfEhClmF/17Gg2m/KWVGVNQheqGsF0Sqc=)
3: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:94:52:1a:a4:ad:72:6d:bc:94:a7:87:9a:d5:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Apr 14 06:01:09 2026 GMT
Not After : Apr 15 06:01:09 2026 GMT
Subject: CN=a5f63b05e33dbb9234463c28e32004e991bc2e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:60:56:a7:83:ad:d1:c6:21:a6:b8:2a:f2:
0c:22:78:f7:0d:5b:fe:e3:3e:29:68:e9:60:63:75:
1c:f8:f3:ea:bf:b9:4b:f3:1c:ba:37:8b:82:e7:ae:
78:db:80:81:ea:74:04:f8:0d:bc:e8:d1:90:53:5e:
48:1c:cc:25:a3:6d:c0:28:5f:16:80:e1:08:4a:e5:
07:b1:e4:d2:f0:03:ec:37:5f:b2:18:a7:73:bc:b6:
b7:be:51:bc:b0:85:1c:81:79:9f:40:8b:99:d4:59:
48:ab:80:45:e1:0d:34:f6:92:f5:12:e4:cf:b0:06:
7f:39:1f:a8:33:f5:e3:1d:63:c6:e5:78:fd:e5:cf:
2c:be:c8:39:46:5c:b0:9e:21:ea:af:ee:c6:74:90:
ef:ac:82:ee:74:68:75:7a:e0:1b:a8:23:57:ad:90:
11:7c:97:85:f7:d1:e8:e7:a6:61:71:2b:14:4b:a8:
ae:a6:95:d8:ad:a5:12:3c:3a:be:75:6d:ec:a2:ba:
e2:c6:98:ef:63:29:e2:52:d6:ee:a4:e6:9c:52:03:
95:7b:b9:a8:40:22:b4:8d:2a:4c:20:d5:eb:39:f8:
cc:ef:30:4c:f3:55:91:62:d6:4b:47:95:09:4c:15:
6d:7e:d1:1c:aa:a1:d3:cd:5c:f4:88:bd:d4:a4:c3:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:3B:05:E3:3D:BB:92:34:46:3C:28:E3:20:04:E9:91:BC:2E:94
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:14:8f:0c:8e:ae:fd:8e:37:25:99:a6:2f:4e:89:06:5f:af:
bb:5b:2c:ab:42:b4:79:e1:66:db:ce:26:73:e1:bd:17:fb:ae:
15:6d:9d:9b:dd:0d:a7:99:5b:01:a1:05:5c:0e:42:18:47:b3:
c9:38:b7:f9:4e:23:81:2b:90:6a:c5:7d:0c:26:48:2a:63:c7:
c0:24:d6:0d:85:17:87:33:5b:dd:02:69:a4:e2:0b:b5:f1:97:
46:d5:ee:85:ef:2c:15:c4:12:03:f2:90:32:ba:88:02:27:b9:
a4:56:0b:07:c7:f3:94:75:bf:59:17:c6:be:83:b6:e1:86:f4:
58:dc:23:4a:33:ad:03:81:d5:6a:f8:5a:c7:77:49:bb:87:ff:
83:08:8b:2c:6c:1e:53:c7:e0:ac:c6:e8:95:45:33:9c:7b:7e:
a7:30:d2:a9:58:15:8d:86:9b:7e:75:14:8e:a0:74:9c:b0:8e:
17:8f:c3:c8:08:66:66:73:eb:73:6e:69:d7:e1:64:80:f5:c0:
a7:4f:21:04:9a:03:c4:84:e3:6f:91:f0:83:97:df:03:ce:ae:
48:79:e1:fa:de:6e:d6:65:23:61:b5:cb:f0:9b:cc:70:2e:d8:
87:c6:9a:1d:a8:04:9a:64:1e:e0:f9:1a:b5:bf:fc:cf:fe:21:
35:0c:3b:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2KlFIapK1ybbyUp4ea1WucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjYwNDE0MDYwMTA5WhcNMjYwNDE1MDYwMTA5WjAzMTEwLwYDVQQD
EyhhNWY2M2IwNWUzM2RiYjkyMzQ0NjNjMjhlMzIwMDRlOTkxYmMyZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoZgVqeDrdHGIaa4KvIMInj3DVv+
4z4paOlgY3Uc+PPqv7lL8xy6N4uC565424CB6nQE+A286NGQU15IHMwlo23AKF8W
gOEISuUHseTS8APsN1+yGKdzvLa3vlG8sIUcgXmfQIuZ1FlIq4BF4Q009pL1EuTP
sAZ/OR+oM/XjHWPG5Xj95c8svsg5RlywniHqr+7GdJDvrILudGh1euAbqCNXrZAR
fJeF99Ho56ZhcSsUS6iuppXYraUSPDq+dW3sorrixpjvYyniUtbupOacUgOVe7mo
QCK0jSpMINXrOfjM7zBM81WRYtZLR5UJTBVtftEcqqHTzVz0iL3UpMMhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX2OwXjPbuSNEY8KOMgBOmRvC6UMB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghSPDI6u
/Y43JZmmL06JBl+vu1ssq0K0eeFm284mc+G9F/uuFW2dm90Np5lbAaEFXA5CGEez
yTi3+U4jgSuQasV9DCZIKmPHwCTWDYUXhzNb3QJppOILtfGXRtXuhe8sFcQSA/KQ
MrqIAie5pFYLB8fzlHW/WRfGvoO24Yb0WNwjSjOtA4HVavhax3dJu4f/gwiLLGwe
U8fgrMbolUUznHt+pzDSqVgVjYabfnUUjqB0nLCOF4/DyAhmZnPrc25p1+FkgPXA
p08hBJoDxITjb5Hwg5ffA86uSHnh+t5u1mUjYbXL8JvMcC7Yh8aaHagEmmQe4Pka
tb/8z/4hNQw78g==
-----END CERTIFICATE-----
Generated at Tue Apr 14 08:43:35 2026 by rpki-client