Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: um2OIUMUFLkGPPOLnzA+1j1SgQxM7Jh4x66HhnQCwu8=
Subject key identifier: 1F:20:AD:F0:0A:C0:1A:94:CF:2E:42:5C:A9:E7:87:84:ED:FF:A2:6B
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 01A0010140BF755DFC0D6EFF6170CC65B771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0D44
Signing time: Fri 14 Aug 2026 16:00:54 +0000
Manifest this update: Fri 14 Aug 2026 16:00:54 +0000
Manifest next update: Sat 15 Aug 2026 16:00:54 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: iGJ40dAC306QkTC9aedvXFKHRipQrW9EsMqgs5ZxHlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:40:bf:75:5d:fc:0d:6e:ff:61:70:cc:65:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Aug 14 16:00:54 2026 GMT
Not After : Aug 15 16:00:54 2026 GMT
Subject: CN=1f20adf00ac01a94cf2e425ca9e78784edffa26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:a9:6d:ea:1f:f0:81:16:f5:5f:fb:d5:5c:
6e:5c:9e:e1:82:4a:b4:36:80:fd:1e:66:21:19:4f:
07:77:b2:82:44:cc:de:26:04:2e:a0:25:a0:6f:11:
39:bf:eb:17:2d:c6:83:6d:a9:96:8b:a1:e2:9d:e8:
cd:ca:1f:3d:aa:1a:ac:65:88:fd:37:a2:be:c8:57:
1e:6a:f6:db:3b:01:19:26:7d:8f:78:32:09:61:1a:
60:fa:8a:55:69:d2:e3:e0:00:2a:9f:42:5d:f5:8f:
7e:39:b4:97:76:d9:64:a6:40:2c:7e:b8:a6:7b:99:
2a:a6:c4:32:dc:10:e5:b2:58:84:48:ff:9c:c8:65:
fa:53:d5:f0:64:98:5d:3d:4d:95:8f:75:59:46:cf:
7a:eb:2d:0f:b8:83:86:7f:d8:88:df:65:de:87:e9:
d4:7b:f4:b3:2d:5a:5e:f5:7d:48:53:e7:95:60:f0:
52:9b:24:97:4d:11:4d:95:07:d5:93:31:32:98:c3:
fc:f8:2d:49:a3:b5:59:d0:e3:17:2a:47:a0:48:13:
d7:93:d0:93:4c:c2:0e:50:5b:52:22:3b:58:3e:54:
a1:81:36:80:d5:0a:fb:46:4e:f2:39:b3:15:ac:00:
08:93:a8:f9:25:3a:a6:1d:f4:94:81:7c:55:1e:29:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:AD:F0:0A:C0:1A:94:CF:2E:42:5C:A9:E7:87:84:ED:FF:A2:6B
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:c7:5c:fe:f1:fc:4f:bf:78:d8:19:e9:8e:f4:e1:8c:47:
d5:a9:e0:b7:07:01:a5:59:dd:50:1b:68:3d:72:36:89:ac:a1:
9e:1c:88:91:e9:f0:93:28:83:6d:50:c7:f9:56:db:af:42:eb:
2d:e3:ef:ab:4a:65:a8:ae:2a:ed:84:b6:e3:a5:d8:07:bb:bc:
35:cd:48:bb:7a:01:4b:78:9d:fd:45:86:b8:17:b4:e3:f0:47:
4f:af:63:7e:f0:55:98:a6:cf:9a:0b:b8:42:a7:e3:98:1e:c1:
9f:34:cb:d0:62:fe:55:7b:02:ba:ba:09:34:87:b7:c9:2b:e4:
ca:24:b4:6d:3c:f7:a5:46:d7:6f:9d:c0:62:95:cb:fd:bd:3a:
36:43:e8:52:5b:67:2d:fa:1f:26:6e:c4:db:7b:44:6a:95:78:
93:d7:ec:f1:ed:00:57:6d:59:d0:f1:dd:53:bd:31:3e:68:2e:
44:fb:85:c9:c1:d2:29:66:3e:6e:86:da:82:33:90:a5:88:65:
4d:25:b7:f0:de:6b:fc:8e:90:e2:b4:54:a0:0a:de:ae:8a:26:
df:c2:73:88:02:e2:d1:4c:fe:32:f2:90:43:df:8d:fd:01:8b:
99:09:6e:13:6e:1e:4b:8c:de:ea:9c:9e:98:b9:2e:3a:5f:d9:
87:17:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:09 2026 by rpki-client