
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: WrxzphSBxKgi7Cyz8bY7AMnKPHsNZE6UYW4biQtP9DQ=
Subject key identifier: FC:22:D9:A1:9F:6B:89:82:E7:5E:A0:B2:E0:A6:9D:C1:51:78:BF:9B
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 01A1544081A5ACF160EE638C58733136C2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 13:01:15 +0000
Manifest this update: Mon 19 Oct 2026 13:01:15 +0000
Manifest next update: Tue 20 Oct 2026 13:01:15 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: wJQVlAJywuNWABbMc8tr9K17RkixtOQUc6XbKIRhYUk=)
2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:81:a5:ac:f1:60:ee:63:8c:58:73:31:36:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Oct 19 13:01:15 2026 GMT
Not After : Oct 20 13:01:15 2026 GMT
Subject: CN=fc22d9a19f6b8982e75ea0b2e0a69dc15178bf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:14:01:7c:3e:f8:f5:65:8e:08:f0:c7:45:
18:05:e2:39:07:11:9f:10:99:06:c7:2d:3d:07:f8:
5b:50:c2:97:4c:bf:47:48:83:0f:92:d7:7b:5e:a6:
01:73:20:db:f3:05:e0:3c:96:16:7d:29:78:b3:07:
c9:71:7e:16:6c:00:89:1f:1b:2a:14:d1:a7:6f:f1:
ff:45:05:99:d4:00:dc:33:97:30:13:b9:e1:61:81:
eb:1a:18:9d:60:62:34:9a:46:b0:1e:90:7d:81:9b:
db:46:18:58:a4:d1:c1:c6:64:4a:a2:12:ca:c0:4a:
69:2a:9c:24:69:ea:f7:ef:da:b2:9b:c9:09:a4:98:
85:fb:85:82:50:f1:ef:30:b5:cc:bf:e0:a2:aa:6a:
43:53:09:a9:87:70:0e:3a:bc:4b:d5:74:73:b2:01:
e3:eb:db:73:a7:66:61:44:45:7f:d2:b8:6f:5f:d3:
58:aa:9b:9c:d7:33:04:50:76:f5:93:8e:d5:6b:87:
90:cd:4f:5c:01:b8:ee:8b:31:31:cc:94:eb:e2:57:
a1:38:c6:e9:8c:4a:b7:63:c3:e9:7e:9d:e2:33:97:
dd:c9:fc:45:5b:65:54:c7:25:d5:e7:46:22:78:4e:
43:08:e3:9e:af:00:5f:27:7c:36:18:00:a6:3a:8e:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:D9:A1:9F:6B:89:82:E7:5E:A0:B2:E0:A6:9D:C1:51:78:BF:9B
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:02:87:70:3e:5c:dc:cb:86:db:cf:96:e7:31:9d:8e:02:e6:
d3:0d:71:aa:7a:d7:d7:37:28:e1:e1:fd:f0:99:6b:b0:a3:26:
da:89:28:85:6e:68:0c:df:da:88:a1:c9:c0:47:45:8a:61:af:
9d:e0:dc:fe:f7:08:73:78:23:f0:4f:09:b8:ba:10:92:27:58:
43:20:1a:a3:fd:2b:be:60:79:23:f3:2e:c2:e4:2f:37:c7:7a:
b4:45:10:0b:b8:cb:10:ec:c8:0a:46:f9:f6:b7:47:f3:d4:e7:
24:de:d4:ce:87:0e:72:1d:7a:8b:7c:97:e9:a6:a4:06:63:a5:
da:8e:e8:37:ae:01:c9:d3:81:21:22:88:67:e1:9a:4d:a8:cd:
8e:d8:1b:9a:02:ad:95:2d:67:82:92:86:1b:15:a3:62:a5:29:
26:0c:a2:bd:06:e0:c2:09:34:9b:96:8b:56:89:f8:f2:61:ed:
d3:4b:c2:c3:da:85:06:1a:32:5c:9e:3d:b6:9a:5a:cc:f2:1a:
e3:f2:07:2f:aa:4a:c1:0f:49:d5:ce:0d:0c:74:54:a9:9f:b7:
ce:bb:7d:28:e0:29:0e:0c:a1:ad:63:3b:2e:3e:2d:04:20:39:
3d:07:03:5f:2e:ce:81:4f:ec:e0:2c:3c:f9:8a:81:d6:f0:0b:
ec:c1:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:19 2026 by rpki-client