Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
File: 68CqrU4lEtTEPhasbaXc2eu-MDk.mft (raw, json)
Hash identifier: os4NQjypHXDmmvxYaKUw6g2EmGQn76V9dCS9MuILmhc=
Subject key identifier: 7A:0E:6F:2E:A3:7E:50:F1:BD:CE:63:CF:DA:5B:03:E7:F5:52:DA:4B
Authority key identifier: EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
Certificate issuer: /CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Certificate serial: 01A0889F0ED56784EBDAF8F309E59C928C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
Manifest number: 21
Signing time: Thu 10 Sep 2026 00:02:00 +0000
Manifest this update: Thu 10 Sep 2026 00:02:00 +0000
Manifest next update: Fri 11 Sep 2026 00:02:00 +0000
Files and hashes: 1: 68CqrU4lEtTEPhasbaXc2eu-MDk.crl (hash: 4HcBV9PUzpK24CNu5z8h5uuopcSkFJW9EwlndPM6oXk=)
2: qS7L8NnGpNyu32W316uLLLPpPH0.roa (hash: tdSyc1eqpE9AG20qm1HBcOdt/PWMuB8pFBOQwDAuLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:0e:d5:67:84:eb:da:f8:f3:09:e5:9c:92:8c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Validity
Not Before: Sep 10 00:02:00 2026 GMT
Not After : Sep 11 00:02:00 2026 GMT
Subject: CN=7a0e6f2ea37e50f1bdce63cfda5b03e7f552da4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:fb:65:dc:be:9a:70:8d:79:88:8c:d4:1d:
b0:4f:65:b4:70:e3:bd:15:34:7d:4a:d0:52:73:1c:
3f:cc:3b:11:bf:fb:b0:e1:19:4c:12:3d:63:9b:47:
aa:70:e8:1e:a1:cf:89:07:21:42:96:71:af:80:6c:
f6:31:e5:63:e2:1f:e2:de:bc:94:a9:a7:ca:a1:2a:
71:7e:a7:54:23:83:44:26:67:ab:a8:1b:70:44:c0:
36:97:40:42:d8:75:1c:2a:87:dc:69:a2:da:af:d2:
13:f5:03:0d:8e:04:e0:a7:6e:80:0b:7d:51:4f:cb:
c3:31:a4:6f:2c:c5:f8:31:ef:c2:ba:ef:6d:e2:12:
f5:e5:de:f6:1f:55:9b:a0:a0:38:be:c6:de:8e:36:
a1:2e:b5:12:3e:75:18:14:ce:b9:ae:df:fa:cd:84:
b3:d2:ea:2b:46:ac:e6:86:9a:8b:dc:ee:dc:cd:a9:
24:fe:30:fe:83:46:c5:c8:17:42:bf:b2:a0:e8:8f:
f0:dc:41:dd:1f:42:62:c0:e8:bf:58:40:93:99:c4:
b6:4f:ef:1a:cc:6d:9e:3e:3c:90:05:87:b7:17:c0:
c1:5b:8e:1f:d2:99:14:7b:12:01:56:11:2f:c8:13:
59:82:c9:6e:2e:28:bc:35:3f:e9:38:d6:34:ed:d8:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:6F:2E:A3:7E:50:F1:BD:CE:63:CF:DA:5B:03:E7:F5:52:DA:4B
X509v3 Authority Key Identifier:
keyid:EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:b2:c5:72:85:9d:2c:16:ee:f4:2d:e6:0a:88:db:b5:74:
c0:6b:d5:3f:38:46:2a:87:0c:8b:4e:e8:fd:75:2e:f8:e4:3d:
c9:7c:23:4c:3b:66:ef:1c:c6:90:e0:d7:24:ce:9e:bc:ea:2d:
94:d0:62:21:1e:d1:82:b9:34:a6:65:90:75:64:3d:e7:03:09:
04:bd:88:08:29:18:dc:ca:77:0b:d6:1c:52:08:25:aa:db:5b:
7a:d1:c6:db:89:cf:c1:7c:e2:c7:e0:56:ae:6f:a7:c9:e9:89:
96:e4:2a:83:8f:99:76:b4:8c:c0:b1:38:eb:30:8c:1e:db:a5:
42:2c:89:a5:b6:97:72:66:44:9f:0d:f8:55:53:82:2e:9f:bd:
9b:22:b9:82:1f:a6:f0:83:9f:49:ee:a2:20:f8:f6:3d:a0:a5:
b1:b4:3d:99:40:65:31:2f:36:a5:68:0b:bc:91:72:88:ff:0b:
37:bc:cf:b0:e4:d3:41:24:60:ac:7b:55:22:9e:ff:6d:f4:5f:
66:b0:60:d7:b8:cb:ef:c8:5d:e1:00:ec:ec:dd:63:db:8b:c0:
9a:5d:a4:c9:e3:36:bc:f3:6d:41:53:04:1c:fc:0d:c0:bd:72:
98:a8:ec:ec:5a:e6:3f:f9:0b:50:b4:67:ad:9a:be:f6:41:49:
da:45:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:14 2026 by rpki-client