Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: dD3FVAm7t4+hubPNKfj3Fvg+I6vePPXDKLSqKfc2tSI=
Subject key identifier: 2D:D2:29:4C:72:EC:B9:A5:5A:9E:FB:B4:46:39:10:47:12:A6:19:79
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019E2F977D89BD40790A7C8B3F3863785E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0C53
Signing time: Sat 16 May 2026 07:01:57 +0000
Manifest this update: Sat 16 May 2026 07:01:57 +0000
Manifest next update: Sun 17 May 2026 07:01:57 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: 6p5WuTZYOIQIHyjDtq1Kq/rMHuLY7IcJ67KCIRAhitc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:7d:89:bd:40:79:0a:7c:8b:3f:38:63:78:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: May 16 07:01:57 2026 GMT
Not After : May 17 07:01:57 2026 GMT
Subject: CN=2dd2294c72ecb9a55a9efbb44639104712a61979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:b5:00:3c:08:cf:10:d3:e9:40:23:bf:e9:
b1:ec:99:33:04:54:b9:a1:49:f3:36:ed:37:b6:53:
ae:5c:09:b2:57:7a:8a:c1:5e:25:cb:c7:57:fd:22:
c8:9c:5b:44:50:17:e0:b5:3d:25:70:2e:da:7c:87:
1d:d3:02:84:ca:55:82:7f:5b:18:03:d7:2b:17:2e:
ab:b7:9c:29:15:5f:c6:c3:4d:12:48:48:87:03:74:
3a:bd:8c:a1:5a:09:8b:2a:ab:ae:b2:27:70:30:dc:
9a:1e:d0:06:8f:88:57:c7:f5:5d:1b:fd:fc:81:67:
0c:8d:ef:a6:24:19:ee:0e:b6:06:e9:f3:f0:6c:85:
65:86:fd:a1:7b:df:cf:59:bb:0e:74:73:0b:96:91:
10:07:e1:8b:30:7f:4e:c6:f5:c6:12:e0:b6:4c:4e:
99:8f:2a:ff:23:84:e6:69:03:ee:6b:58:20:16:24:
b0:74:98:c9:d7:6e:78:bb:15:88:f6:36:66:f9:60:
f1:ea:36:52:d8:d4:4d:8a:ce:f4:f7:2a:81:e0:70:
80:84:19:9a:9c:da:99:9e:00:e8:a9:67:bb:d1:cd:
c2:9b:75:24:d8:fb:b3:68:a3:19:e3:58:06:8e:ad:
d2:9e:09:f0:7f:5d:e2:d3:34:9c:6e:2f:c6:dd:df:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:29:4C:72:EC:B9:A5:5A:9E:FB:B4:46:39:10:47:12:A6:19:79
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:9c:a2:26:e0:37:b6:32:1b:cc:e8:61:c6:cd:aa:4d:d7:
1b:58:12:9a:86:09:6c:5f:da:c4:2f:c3:cb:23:f2:3a:03:27:
37:fa:c1:99:5e:ff:9e:10:86:43:92:1a:83:37:7a:6e:26:66:
40:92:3d:16:74:44:31:25:17:6a:3e:69:14:d6:35:5b:16:37:
55:d1:18:0c:60:02:82:bd:89:09:09:13:1d:b5:49:f0:46:23:
31:23:68:62:c6:18:3d:5f:6d:b3:fc:c7:1d:55:f6:6b:84:16:
ea:0f:b0:6e:bc:17:76:ab:9c:4b:8d:07:dc:15:75:ab:c1:6d:
c8:ee:c7:7a:a8:09:37:6a:b4:2c:59:1b:63:cb:d0:4f:15:fd:
1f:00:e8:a2:c0:5b:67:8c:c9:ce:96:2f:a2:01:c8:dc:76:26:
4b:31:9d:d9:01:a0:8d:dc:a0:16:60:10:ad:7f:18:c8:1e:66:
cb:ae:c6:8c:82:0c:37:c6:e2:f5:a8:82:68:7c:36:a6:16:b3:
18:f8:0f:fb:3d:19:fb:92:53:84:5e:16:1a:cc:18:2c:4b:fc:
4f:43:73:00:74:ee:3e:13:72:26:f0:c2:b0:f5:5a:f3:f8:66:
a0:ec:43:8f:0e:cf:d5:08:98:82:30:6e:ee:fe:df:d9:ff:0e:
fe:9c:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:58 2026 by rpki-client