Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: CGaicVtOPUBQ8yActbkdQBeXcS6OYR67TToMrMe7Q2I=
Subject key identifier: 29:7C:20:01:FA:FF:88:55:17:FE:6B:69:31:49:1A:B6:2F:99:DD:3B
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019F1943E02719C9F0FA3AC1CAEA76D92092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0CCC
Signing time: Tue 30 Jun 2026 16:01:46 +0000
Manifest this update: Tue 30 Jun 2026 16:01:46 +0000
Manifest next update: Wed 01 Jul 2026 16:01:46 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: HWPgSRpFn0jQeWaUzaS5pS2A/jlY7ep4EfAp2aDZhso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e0:27:19:c9:f0:fa:3a:c1:ca:ea:76:d9:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Jun 30 16:01:46 2026 GMT
Not After : Jul 1 16:01:46 2026 GMT
Subject: CN=297c2001faff885517fe6b6931491ab62f99dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:61:e5:a1:4a:44:83:ad:e7:d3:18:64:14:
1b:d2:7c:4f:da:2e:05:d8:7c:a0:8e:3d:0f:78:56:
91:ad:dd:79:02:d3:16:77:56:f8:81:b4:8c:9f:54:
b7:5d:05:66:45:81:68:f6:d5:ca:d8:0f:bd:7b:67:
90:6f:dc:61:e1:d8:67:e1:be:9a:39:73:c8:61:65:
29:29:45:d4:8b:0c:fc:09:5c:cd:02:f7:f1:1f:05:
4a:67:4c:59:1d:6f:23:5c:76:82:da:6f:45:b4:54:
86:49:57:8e:24:49:f9:1f:00:81:44:f0:94:19:50:
95:af:f0:6c:13:57:98:39:d9:9b:37:f4:0b:64:c1:
ef:89:ea:8b:65:65:e7:b1:ef:90:e4:55:55:35:90:
72:2f:15:c0:9a:8b:12:8c:20:44:9f:3d:1a:45:00:
21:a8:f6:87:80:a3:08:be:23:ad:a5:91:e9:f1:61:
34:32:18:f0:8b:aa:5a:0a:cb:4d:c8:80:1e:26:c1:
8c:e9:99:04:0c:35:83:d3:02:eb:ed:bd:7c:c1:33:
18:62:6d:21:61:26:e2:74:10:6a:3a:7a:90:6d:8b:
ba:6d:8c:2e:1b:14:15:be:8a:ab:5d:c6:27:ed:85:
0c:2e:5d:9e:bf:e8:00:24:11:4e:d6:58:4b:8c:4f:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:20:01:FA:FF:88:55:17:FE:6B:69:31:49:1A:B6:2F:99:DD:3B
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:1f:ea:34:90:3a:3b:fd:c3:c4:20:23:34:6d:0b:2b:3f:
bb:dc:37:39:72:a4:db:c8:08:94:15:f6:5a:39:0e:79:51:cb:
c5:fb:b2:07:e3:1b:08:c6:a8:4e:df:a2:30:04:6b:8d:58:89:
7b:8b:aa:88:ee:a1:e5:bb:bb:0f:b4:f4:a3:39:21:ce:86:0a:
77:fd:a5:8f:77:d0:c7:88:6a:96:24:b6:ce:8b:d7:85:a8:b9:
ee:8d:f5:fe:f8:41:32:14:7e:73:0c:d2:af:7b:39:50:cc:9c:
03:0a:e2:4c:1c:b0:0a:f1:e6:da:83:81:9a:31:c6:f3:7e:0b:
61:a0:d4:4d:24:03:c2:f7:3e:45:c1:60:02:5b:fb:b8:82:09:
f9:9f:64:cb:85:43:75:da:cb:7b:a6:19:fd:d6:8b:70:7b:32:
38:0b:91:d6:70:87:a8:ff:bf:07:2d:6a:bc:bc:88:ea:bb:16:
4d:4c:51:26:e0:20:18:b4:5e:90:be:b3:70:47:ee:b4:4b:c3:
2a:33:41:8d:be:23:06:cf:e5:33:a9:06:e8:24:26:3e:89:8f:
2e:09:6c:4a:0d:52:98:13:03:5a:dc:4e:4c:55:7f:21:1a:6e:
ce:ab:bc:a6:1d:8a:a2:8a:c9:de:06:bd:d7:b5:94:7c:18:f0:
bf:5b:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:03 2026 by rpki-client