Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
File: 68sOe5lBX5hvTQgXf4i1uPfrp_k.mft (raw, json)
Hash identifier: oDCd8PkrIcEvD0eWBcnIprsHto3PJtVr0coVfBolc+8=
Subject key identifier: 31:57:C4:02:D8:98:BA:58:BE:1E:AC:92:EE:70:6E:2E:0A:0A:E5:C6
Authority key identifier: EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
Certificate issuer: /CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Certificate serial: 019D3977A6873CBB7BDC260A04C68D5C85D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
Manifest number: 0203
Signing time: Sun 29 Mar 2026 12:00:35 +0000
Manifest this update: Sun 29 Mar 2026 12:00:35 +0000
Manifest next update: Mon 30 Mar 2026 12:00:35 +0000
Files and hashes: 1: 68sOe5lBX5hvTQgXf4i1uPfrp_k.crl (hash: 7jTgnaGXlhHCKL02YzdYpaFGXKrwvueE2SWyR57EmQo=)
2: O9IOyxP8h4lseEmgSAoGGPv8Vsw.roa (hash: AJyOJoJMgWD7BGOJs3PUaH2nLGyMrSS+qzh/C2ebL1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a6:87:3c:bb:7b:dc:26:0a:04:c6:8d:5c:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Validity
Not Before: Mar 29 12:00:35 2026 GMT
Not After : Mar 30 12:00:35 2026 GMT
Subject: CN=3157c402d898ba58be1eac92ee706e2e0a0ae5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:10:b5:e1:12:10:a2:ac:de:21:79:d0:57:
c8:02:99:f3:fb:f4:99:db:50:14:4e:37:14:d2:ce:
21:1d:5b:0e:73:85:62:9e:08:47:3b:6c:17:b0:f4:
99:40:63:f3:99:a7:e4:36:7f:cb:3c:8a:f2:8f:8f:
b9:2f:91:94:13:b7:fb:76:bf:32:45:63:42:2e:90:
7f:d9:d7:f8:89:07:6b:64:dd:c6:a0:32:bb:86:6f:
ad:9d:e5:60:97:5e:57:68:ee:04:58:12:c6:57:8c:
08:f8:9e:11:c7:e5:d1:ae:77:92:d8:b5:ed:b4:d8:
f2:6f:36:df:90:39:08:c9:b5:43:17:9c:1b:7d:21:
50:0d:d6:f7:4a:58:f0:8e:15:25:bf:55:9e:3e:e7:
34:4d:1d:e3:2d:99:90:0a:f8:ed:8e:1f:4d:56:ab:
66:91:89:a8:5f:33:42:cd:bf:f6:d3:18:08:07:29:
e1:e8:f5:52:51:23:62:0e:fb:d6:71:51:f6:c0:ab:
d7:67:1c:ae:53:1b:49:95:5a:4e:23:a9:cc:69:a2:
63:ef:98:eb:6e:6b:16:a1:46:0c:91:e0:be:58:2a:
f2:45:0c:8a:6d:64:ae:62:0c:b1:61:32:cc:64:91:
9d:99:5e:76:f5:fc:14:8c:73:4c:44:67:76:2c:b5:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:C4:02:D8:98:BA:58:BE:1E:AC:92:EE:70:6E:2E:0A:0A:E5:C6
X509v3 Authority Key Identifier:
keyid:EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c3:74:51:a4:97:f3:7e:86:67:4a:fb:2d:e8:1b:01:9c:f1:
ee:d8:d7:44:97:08:f6:ac:1f:1e:7b:42:f0:99:48:61:5d:49:
4a:f5:b8:67:e4:4b:5f:25:29:b3:22:c2:5f:dd:1d:8a:ec:49:
f5:5a:dc:bf:94:ec:43:95:8a:7d:41:99:b1:11:9c:b4:22:78:
1d:40:aa:f9:7a:e0:70:6e:c2:1e:9a:f3:f5:8f:f3:e5:0b:dd:
9d:b1:2b:75:69:c9:1b:d1:f5:e1:62:45:bc:cd:c2:1b:3e:62:
56:8d:0a:4e:0a:c0:cc:1c:b0:b7:13:77:60:6e:f5:ac:1d:0e:
b0:d2:be:05:22:2e:af:37:84:4a:a2:99:d7:67:0d:55:94:1c:
1d:11:89:13:f1:75:7e:4d:98:57:97:b2:f0:14:c4:fb:89:8a:
c1:f4:57:e4:5b:be:37:ac:ad:b5:de:7d:77:e7:64:5f:69:20:
bb:05:06:07:41:fb:3b:06:8a:2f:d8:25:bf:c9:dc:ea:ab:4c:
b1:24:5b:56:e6:d7:df:d8:f0:0d:4f:c3:50:10:a6:ba:9d:b7:
e8:da:af:45:38:52:34:3d:61:88:a3:50:32:0e:86:cc:84:71:
85:0a:f5:18:a6:d0:64:c1:29:0f:00:42:da:03:1c:e5:a4:91:
6e:54:fe:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d6aHPLt73CYKBMaNXIXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViY2IwZTdiOTk0MTVmOTg2ZjRkMDgxNzdmODhiNWI4Zjdl
YmE3ZjkwHhcNMjYwMzI5MTIwMDM1WhcNMjYwMzMwMTIwMDM1WjAzMTEwLwYDVQQD
EygzMTU3YzQwMmQ4OThiYTU4YmUxZWFjOTJlZTcwNmUyZTBhMGFlNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SYQteESEKKs3iF50FfIApnz+/SZ
21AUTjcU0s4hHVsOc4VinghHO2wXsPSZQGPzmafkNn/LPIryj4+5L5GUE7f7dr8y
RWNCLpB/2df4iQdrZN3GoDK7hm+tneVgl15XaO4EWBLGV4wI+J4Rx+XRrneS2LXt
tNjybzbfkDkIybVDF5wbfSFQDdb3SljwjhUlv1WePuc0TR3jLZmQCvjtjh9NVqtm
kYmoXzNCzb/20xgIBynh6PVSUSNiDvvWcVH2wKvXZxyuUxtJlVpOI6nMaaJj75jr
bmsWoUYMkeC+WCryRQyKbWSuYgyxYTLMZJGdmV529fwUjHNMRGd2LLVZLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFXxALYmLpYvh6sku5wbi4KCuXGMB8GA1UdIwQY
MBaAFOvLDnuZQV+Yb00IF3+Itbj366f5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNhZGYtODA2MC00Mzk1LTkyNmQt
ZGVlOWNlMzk0OTkxLzEvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNhZGYtODA2MC00Mzk1LTkyNmQtZGVlOWNlMzk0OTkx
LzEvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMN0UaSX
836GZ0r7LegbAZzx7tjXRJcI9qwfHntC8JlIYV1JSvW4Z+RLXyUpsyLCX90diuxJ
9Vrcv5TsQ5WKfUGZsRGctCJ4HUCq+XrgcG7CHprz9Y/z5QvdnbErdWnJG9H14WJF
vM3CGz5iVo0KTgrAzBywtxN3YG71rB0OsNK+BSIurzeESqKZ12cNVZQcHRGJE/F1
fk2YV5ey8BTE+4mKwfRX5Fu+N6yttd59d+dkX2kguwUGB0H7OwaKL9glv8nc6qtM
sSRbVubX39jwDU/DUBCmup236NqvRThSND1hiKNQMg6GzIRxhQr1GKbQZMEpDwBC
2gMc5aSRblT+lA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:59 2026 by rpki-client