Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: l/g4Uw95eqtwCbfnaFTmSHNX6mvzpalwIgLQZcgNUW0=
Subject key identifier: 23:68:A6:1A:29:88:AA:D9:83:B8:D6:9D:2E:DB:D1:C6:33:FD:3E:3C
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 019D37C065C552E4599826B626C27ECDEB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: dS6qUc8r6rqFiUebl1sf3auZDbrergCe35TFnCZGVEc=)
2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:65:c5:52:e4:59:98:26:b6:26:c2:7e:cd:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=2368a61a2988aad983b8d69d2edbd1c633fd3e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:91:fa:a3:c1:99:62:39:ea:25:b6:d1:5d:
67:8c:77:e2:63:39:07:82:4b:70:5e:a7:c7:d8:b5:
b0:b3:7e:06:8e:af:c7:89:98:8a:ef:4d:10:b7:83:
15:ef:cf:1b:07:a0:d8:e2:d3:e4:88:d5:30:22:8c:
a7:03:83:d5:f6:2e:fc:99:bf:e5:3c:d7:03:39:d7:
10:b9:58:30:36:1b:0f:5a:4c:68:6f:84:ee:30:7e:
a4:55:61:f2:d5:45:37:b3:12:34:e7:26:60:17:4d:
39:4b:a6:06:cc:ae:eb:bd:9b:1b:61:50:d9:f2:59:
c8:40:a6:55:e4:32:68:44:6c:62:8e:08:c4:60:44:
09:12:dc:29:69:e8:c4:9f:e8:7a:33:a8:2a:31:7d:
45:77:23:f8:56:e7:69:0b:d2:b7:c3:8e:4d:bd:6d:
e4:14:e9:1f:28:dd:51:19:3f:55:d1:d8:56:42:e6:
99:b5:ce:a8:09:48:96:4e:4f:e9:05:93:ad:56:3d:
0b:15:75:89:5e:48:17:ce:c8:cc:c0:fa:26:6c:de:
d9:4a:22:d7:84:b4:c3:0d:33:5b:f0:03:12:91:ca:
28:47:32:d6:86:4d:69:ed:4c:df:bf:5a:cc:18:c5:
83:4d:f7:81:bc:5d:48:e9:4c:42:86:73:59:49:b2:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:A6:1A:29:88:AA:D9:83:B8:D6:9D:2E:DB:D1:C6:33:FD:3E:3C
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:17:2c:ee:c8:9d:89:6a:c4:e1:15:f8:42:74:55:48:65:cd:
f0:66:65:a0:46:f5:f7:13:43:8d:93:70:52:3c:63:ca:52:f5:
b8:9f:ce:fb:93:5b:7e:4b:cf:4b:c5:ff:9d:d8:41:7e:ab:6a:
92:4a:1b:b4:d9:5f:89:c0:23:67:dc:a3:b2:e0:f9:9a:8f:0e:
5c:a8:26:f3:3c:d3:01:33:64:00:55:26:ea:46:30:cd:6b:b6:
b4:46:38:61:80:36:8f:9d:18:f7:cb:39:ee:20:f8:1d:1e:6d:
e0:ff:06:8b:61:a0:22:25:bc:e6:2f:bd:62:2c:55:90:d3:f2:
eb:5b:6c:61:b7:a2:3b:cb:d0:0c:c9:05:d8:fb:8f:fd:db:ea:
8d:76:ee:5c:63:cd:4e:5e:07:2e:67:20:cd:83:f3:9c:fb:df:
d8:29:a2:0a:60:ba:c8:8d:85:8f:9d:12:ad:25:06:29:8e:0a:
3c:46:6f:b6:0e:a5:3f:31:32:5f:03:5c:29:9f:53:1e:69:da:
fa:19:fb:ea:9d:24:c2:b7:ea:5b:a8:d0:a6:a7:f7:15:f3:dc:
17:5f:07:b0:06:34:ac:89:2b:dd:92:12:9d:1f:b8:5f:93:4c:
cd:62:08:84:d7:6e:6a:9b:67:f3:eb:52:b0:af:0b:b1:f0:22:
f8:1f:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client