Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
File: 68xoOyb8VREziVmezLGvzNQ4Ttc.mft (raw, json)
Hash identifier: XpVoxpKBQpPhOuPaFH52um5A3iIUP3pTHh97UwYXNOw=
Subject key identifier: D4:B9:08:41:07:FA:1A:DD:FB:2F:10:DF:FC:E9:3A:96:C1:A5:ED:18
Authority key identifier: EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
Certificate issuer: /CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Certificate serial: 019F85D751622C033FE802834BE8C61EE40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:48 +0000
Manifest this update: Tue 21 Jul 2026 18:01:48 +0000
Manifest next update: Wed 22 Jul 2026 18:01:48 +0000
Files and hashes: 1: 68xoOyb8VREziVmezLGvzNQ4Ttc.crl (hash: m8x4mn2Krl/2CZBV+j7+xESQX4fJgiPoAnlvn71ryQ0=)
2: hoyQuOHMgCRKjusTo81pyeqim3s.roa (hash: hqd8/fjGmCpH8TxwYvqw9pZzXIZPGSvJxX81K1zKMOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:51:62:2c:03:3f:e8:02:83:4b:e8:c6:1e:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Validity
Not Before: Jul 21 18:01:48 2026 GMT
Not After : Jul 22 18:01:48 2026 GMT
Subject: CN=d4b9084107fa1addfb2f10dffce93a96c1a5ed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:46:1d:00:66:23:2d:d1:50:a0:99:ff:02:
d3:6f:30:46:0b:2e:1a:78:18:ec:21:9b:b9:da:2b:
4a:3f:d4:a7:99:f6:0b:d2:66:8a:bc:34:05:4e:05:
c7:4a:fb:de:da:43:00:7a:8e:80:36:37:6a:5f:cf:
ea:05:8b:a1:9f:af:54:5a:9e:15:8b:12:b9:0c:27:
1c:ea:48:50:0a:25:58:86:14:0e:6d:5c:14:86:9b:
0d:16:ad:6d:22:09:34:8d:1b:f6:e4:65:65:de:86:
7b:d0:20:dc:14:18:10:b5:74:0f:71:30:6a:1a:2c:
85:21:41:eb:85:6d:65:8d:fb:11:5a:86:48:bd:35:
1b:56:b6:b0:fa:f9:15:c5:fa:4b:32:54:e0:0d:6a:
2c:7e:bb:52:48:3f:3b:18:e1:48:bd:ca:01:dc:0f:
93:de:5d:08:28:50:3e:62:01:9b:8d:41:7e:30:cf:
78:e7:c7:2d:c6:3d:4b:0f:f7:3e:ae:d8:7e:c6:96:
1b:7c:67:d6:e5:a6:e6:c5:22:da:89:9e:d7:59:ef:
e4:a0:7e:0c:87:70:42:de:b0:88:7b:35:96:ac:b2:
46:6d:a8:2c:28:df:a5:b8:14:2d:1b:32:67:f4:5a:
82:a1:1e:2c:4e:ce:5a:20:28:45:6a:ed:99:34:63:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:08:41:07:FA:1A:DD:FB:2F:10:DF:FC:E9:3A:96:C1:A5:ED:18
X509v3 Authority Key Identifier:
keyid:EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:10:c7:fc:f1:f1:6b:6f:09:39:5d:97:c3:d0:78:c7:81:
84:91:c3:01:f1:b6:56:88:e5:b6:27:50:62:27:cc:04:5b:ac:
16:b7:56:72:98:e0:f6:ac:87:28:ac:67:86:61:6f:7e:41:90:
13:42:0c:a6:5a:87:ae:f1:64:5a:e2:f6:9f:fb:02:98:96:80:
f7:3c:c9:24:4d:ce:3a:7c:24:a2:46:aa:c3:22:95:36:bd:81:
d3:8f:56:96:ef:39:71:01:c8:f9:95:8a:55:fb:ee:f1:90:12:
89:17:fd:65:35:6d:71:bc:09:00:73:00:bb:57:a2:1a:ed:9b:
b7:cf:45:f8:cc:e2:fa:fb:73:9a:56:3e:ca:06:c0:4e:11:5f:
89:c3:d8:ca:0d:83:5a:80:b6:e6:fb:cd:fd:ed:b6:0f:ce:ed:
72:d0:8f:9f:98:cc:bf:49:9a:ae:50:e9:79:9d:c7:61:0e:7d:
38:76:13:e3:ab:58:23:b2:82:b7:2e:81:68:36:31:e9:46:24:
8a:5d:37:10:3f:c2:9e:63:88:00:46:c5:a4:34:57:5c:b7:83:
a3:0f:65:7b:0a:a2:bb:04:17:1e:19:cf:64:f6:ec:a4:79:7f:
fb:c6:6a:ee:57:ba:82:11:8e:5a:55:92:8a:22:9f:bb:6a:87:
57:1c:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:31 2026 by rpki-client