Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: mhODY0fRV2sNXd2I6BFZg9HPx11MDyqf57zmTILc6Pg=
Subject key identifier: 86:42:0F:50:85:0B:EA:F7:66:F4:3F:9C:E7:7F:F1:30:80:AC:67:1F
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 01A13DEECBA50A4F15A5C32ED142A1DF6E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 13B1
Signing time: Thu 15 Oct 2026 05:00:22 +0000
Manifest this update: Thu 15 Oct 2026 05:00:22 +0000
Manifest next update: Fri 16 Oct 2026 05:00:22 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: pEWhWSkbqtW3W9WDkGF5XzM6a4n8CObaMJHHWeMGXH8=)
2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:cb:a5:0a:4f:15:a5:c3:2e:d1:42:a1:df:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Oct 15 05:00:22 2026 GMT
Not After : Oct 16 05:00:22 2026 GMT
Subject: CN=86420f50850beaf766f43f9ce77ff13080ac671f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:29:d1:30:54:4d:cd:ec:aa:fe:38:66:e3:
08:13:a0:86:37:a7:70:14:9f:a9:de:fc:33:12:c6:
57:7e:1d:82:45:ff:10:ae:13:cb:fc:5f:5b:4a:eb:
a7:5e:73:c5:c0:00:f8:fb:fe:12:35:fd:f8:05:f0:
51:86:41:29:c4:d8:3b:b9:9d:cc:5d:6a:eb:cc:b2:
20:37:f4:1e:b1:36:80:f2:c9:c5:86:b0:27:bc:17:
ad:c0:1a:af:24:85:7b:5a:fe:da:3b:26:e8:a5:f4:
69:64:2d:d6:6c:23:ce:0f:75:3d:f6:05:81:94:3b:
44:ce:07:52:59:57:d4:bb:b6:e4:bc:50:1d:bb:c8:
72:67:c2:90:27:55:c0:ce:39:6c:11:a1:31:b6:36:
7a:c2:d3:11:e0:cf:7d:77:bd:58:0d:00:66:28:f9:
a0:a6:db:b5:28:f1:66:be:1f:91:80:e7:28:71:a1:
69:4c:4d:4c:33:2d:18:08:84:79:39:18:8b:fa:1d:
21:ec:8f:45:b4:2a:b9:36:74:66:14:6c:4f:ca:79:
a5:4c:bd:d7:42:01:97:e0:e8:57:7f:05:32:2a:3c:
09:11:34:18:66:e1:d2:08:c7:c5:ba:05:66:9f:d6:
44:88:c9:1c:e5:57:a4:37:10:55:2f:b7:72:6c:7f:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:0F:50:85:0B:EA:F7:66:F4:3F:9C:E7:7F:F1:30:80:AC:67:1F
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:20:a9:f9:6e:0c:f9:55:34:30:f9:52:08:33:5b:09:6c:62:
3d:6a:1f:1f:80:16:72:55:b4:cc:70:33:41:b4:4b:ce:d1:95:
99:a3:74:fd:03:11:bd:ae:0b:a0:92:42:a3:43:09:28:69:71:
31:dc:df:b9:98:80:1b:c6:ff:e9:38:e9:d3:67:ce:33:84:2e:
77:5e:32:b3:25:76:e0:3a:0d:29:12:a7:58:a4:6d:78:79:53:
98:4b:d3:fe:c8:e4:2e:70:f6:36:c1:ee:2c:ea:05:6b:88:d3:
8a:68:1e:73:91:2f:d5:a4:7b:79:4a:0b:1e:67:eb:09:19:74:
ad:2d:17:90:23:ee:77:d4:29:a4:a6:d4:32:e9:18:2c:97:45:
b7:84:8f:a0:74:e7:9f:78:e5:f3:0b:2c:c8:43:f9:dc:e0:65:
d2:03:10:2f:82:af:25:3d:2c:07:2d:35:86:10:37:b0:84:a2:
6f:50:c3:ff:cc:f4:c6:0c:ab:21:03:34:b8:13:46:e3:45:d4:
eb:3d:8f:0d:81:3f:cf:f7:1e:20:10:3d:e9:90:da:9b:1b:ad:
61:7e:2d:e7:c0:4e:14:d2:05:44:a0:14:81:52:a8:28:7e:84:
6c:76:02:66:c0:a5:01:5d:bd:e4:76:d4:a9:78:89:b1:e7:a0:
9c:b5:8a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97sulCk8VpcMu0UKh325sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw
ZGUwNTQwHhcNMjYxMDE1MDUwMDIyWhcNMjYxMDE2MDUwMDIyWjAzMTEwLwYDVQQD
Eyg4NjQyMGY1MDg1MGJlYWY3NjZmNDNmOWNlNzdmZjEzMDgwYWM2NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hwp0TBUTc3sqv44ZuMIE6CGN6dw
FJ+p3vwzEsZXfh2CRf8QrhPL/F9bSuunXnPFwAD4+/4SNf34BfBRhkEpxNg7uZ3M
XWrrzLIgN/QesTaA8snFhrAnvBetwBqvJIV7Wv7aOybopfRpZC3WbCPOD3U99gWB
lDtEzgdSWVfUu7bkvFAdu8hyZ8KQJ1XAzjlsEaExtjZ6wtMR4M99d71YDQBmKPmg
ptu1KPFmvh+RgOcocaFpTE1MMy0YCIR5ORiL+h0h7I9FtCq5NnRmFGxPynmlTL3X
QgGX4OhXfwUyKjwJETQYZuHSCMfFugVmn9ZEiMkc5VekNxBVL7dybH+pFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZCD1CFC+r3ZvQ/nOd/8TCArGcfMB8GA1UdIwQY
MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt
NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi
LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiCp+W4M
+VU0MPlSCDNbCWxiPWofH4AWclW0zHAzQbRLztGVmaN0/QMRva4LoJJCo0MJKGlx
MdzfuZiAG8b/6Tjp02fOM4Qud14ysyV24DoNKRKnWKRteHlTmEvT/sjkLnD2NsHu
LOoFa4jTimgec5Ev1aR7eUoLHmfrCRl0rS0XkCPud9QppKbUMukYLJdFt4SPoHTn
n3jl8wssyEP53OBl0gMQL4KvJT0sBy01hhA3sISib1DD/8z0xgyrIQM0uBNG40XU
6z2PDYE/z/ceIBA96ZDamxutYX4t58BOFNIFRKAUgVKoKH6EbHYCZsClAV295HbU
qXiJseegnLWKsg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:43 2026 by rpki-client