Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: 3U6XgvVMX5IbCsS48UCUul1FkGeysyxzUIREDr3LctA=
Subject key identifier: E6:44:93:E5:0B:DA:75:27:C9:5A:B7:64:C2:21:16:CD:9E:1E:CB:C3
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019D389C08D20CD8B6FF0012B560A60832E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 119C
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: WNd6yT4Iia/fV+fWoflqCe8teyTkHKeYm9FkHr/XcMQ=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:d2:0c:d8:b6:ff:00:12:b5:60:a6:08:32:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=e64493e50bda7527c95ab764c22116cd9e1ecbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:cf:88:03:bd:fe:cc:e7:8e:e2:62:39:5d:
57:25:8c:93:15:48:c9:a4:22:b8:20:87:ae:17:dd:
b2:a3:c4:d8:37:f2:b2:45:e2:20:33:d2:1e:50:d2:
0d:33:af:c4:83:6f:1f:2c:b3:2a:03:a1:73:e4:15:
5d:0c:9c:c3:1f:db:9e:06:23:14:bf:38:47:69:3f:
7f:37:41:7b:45:12:a8:d5:f8:d1:14:6d:65:1e:11:
2f:e9:61:01:22:b0:dc:e7:a3:1a:47:29:5e:85:0f:
47:b0:06:b2:86:7c:84:27:53:05:54:ce:07:79:96:
d6:0f:70:97:a1:a1:28:0d:6c:1f:3c:23:f6:89:62:
e0:ef:7c:36:c0:dd:3b:4b:b7:bc:16:5d:93:8c:ff:
e6:a9:7f:1e:7e:76:e6:7b:06:c2:ce:96:d0:c1:43:
41:e0:97:e5:7f:72:02:95:4c:03:0d:e1:29:e3:23:
50:52:e9:07:57:4f:8d:04:fd:00:d2:38:62:14:4c:
c7:88:15:e3:2a:9e:24:e1:be:ea:d1:77:7c:06:3f:
f0:59:e0:42:ba:86:33:2e:26:c2:ad:4a:40:d4:b9:
67:47:36:fb:75:9c:47:ea:23:51:8f:0b:aa:c3:71:
bb:6d:d2:4f:97:e8:f0:dc:e0:ad:ec:ac:6f:91:d5:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:93:E5:0B:DA:75:27:C9:5A:B7:64:C2:21:16:CD:9E:1E:CB:C3
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:a9:d9:22:f3:4c:3d:68:ef:dd:6d:6d:cd:d6:87:ba:96:
51:be:b3:51:02:c0:87:3a:8f:e6:7f:07:b6:bc:7f:f7:c1:ac:
6b:0e:33:45:b8:d3:45:55:4c:8f:5f:da:92:93:b0:89:98:2d:
ce:8d:f3:2d:60:ed:53:79:fd:18:7f:8b:cc:3c:c7:f0:00:e4:
6f:2c:f8:71:2c:d6:ee:41:f3:17:33:ea:07:1c:7a:11:47:67:
1f:28:43:3e:05:dd:3f:18:8b:49:07:9a:03:3f:9a:bc:1d:50:
c8:a3:13:ac:2d:5b:53:a4:5f:af:1d:dc:7c:3f:19:0c:40:6a:
a9:d9:43:ec:25:9e:1c:bf:c9:1c:d8:46:ff:26:d4:f1:94:a8:
26:6c:e8:55:a1:a6:83:95:63:ef:a7:be:cd:d9:54:f8:17:dc:
91:ee:92:af:ab:37:34:ca:7e:21:5f:a7:3d:66:b5:f0:9d:bb:
b6:64:b9:7d:59:73:d2:fb:34:03:50:a9:c2:45:9c:4c:16:5f:
c7:db:93:c4:ab:fb:d5:5d:d3:aa:3e:7d:df:9f:b9:2f:28:e9:
e0:a8:12:f5:a9:5c:3f:7e:15:d3:ff:27:1f:4f:f3:f5:fc:1e:
7e:36:da:a7:95:42:61:7b:68:ba:79:34:1f:b4:b0:91:fd:87:
1d:44:c1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAjSDNi2/wAStWCmCDLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw
ZGUwNTQwHhcNMjYwMzI5MDgwMDQzWhcNMjYwMzMwMDgwMDQzWjAzMTEwLwYDVQQD
EyhlNjQ0OTNlNTBiZGE3NTI3Yzk1YWI3NjRjMjIxMTZjZDllMWVjYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v3PiAO9/sznjuJiOV1XJYyTFUjJ
pCK4IIeuF92yo8TYN/KyReIgM9IeUNINM6/Eg28fLLMqA6Fz5BVdDJzDH9ueBiMU
vzhHaT9/N0F7RRKo1fjRFG1lHhEv6WEBIrDc56MaRylehQ9HsAayhnyEJ1MFVM4H
eZbWD3CXoaEoDWwfPCP2iWLg73w2wN07S7e8Fl2TjP/mqX8efnbmewbCzpbQwUNB
4Jflf3IClUwDDeEp4yNQUukHV0+NBP0A0jhiFEzHiBXjKp4k4b7q0Xd8Bj/wWeBC
uoYzLibCrUpA1LlnRzb7dZxH6iNRjwuqw3G7bdJPl+jw3OCt7KxvkdUpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZEk+UL2nUnyVq3ZMIhFs2eHsvDMB8GA1UdIwQY
MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt
NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi
LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilSp2SLz
TD1o791tbc3Wh7qWUb6zUQLAhzqP5n8Htrx/98Gsaw4zRbjTRVVMj1/akpOwiZgt
zo3zLWDtU3n9GH+LzDzH8ADkbyz4cSzW7kHzFzPqBxx6EUdnHyhDPgXdPxiLSQea
Az+avB1QyKMTrC1bU6Rfrx3cfD8ZDEBqqdlD7CWeHL/JHNhG/ybU8ZSoJmzoVaGm
g5Vj76e+zdlU+Bfcke6Sr6s3NMp+IV+nPWa18J27tmS5fVlz0vs0A1CpwkWcTBZf
x9uTxKv71V3Tqj5935+5Lyjp4KgS9alcP34V0/8nH0/z9fwefjbap5VCYXtounk0
H7Swkf2HHUTBCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:07 2026 by rpki-client