
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: 2ofxGBAcwZN/ZHNrJrJ8z9NP+lB/jffkfuSJN67s8sw=
Subject key identifier: 2E:AB:00:9E:38:DA:F7:9D:19:29:BA:7C:B0:76:87:37:AC:67:F6:D9
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 019F92EDB4DB3F20DDA147AC57BB7050B57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 0550
Signing time: Fri 24 Jul 2026 07:01:19 +0000
Manifest this update: Fri 24 Jul 2026 07:01:19 +0000
Manifest next update: Sat 25 Jul 2026 07:01:19 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: h7tacQ3mgy0qevgBohvHgEyL92K1G0kjR8hDJ9aPMhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b4:db:3f:20:dd:a1:47:ac:57:bb:70:50:b5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Jul 24 07:01:19 2026 GMT
Not After : Jul 25 07:01:19 2026 GMT
Subject: CN=2eab009e38daf79d1929ba7cb0768737ac67f6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:53:78:dc:cc:9a:6d:75:ce:48:68:e1:9a:
ea:66:e5:a6:54:72:d6:d8:1e:b4:87:84:3e:46:22:
bc:59:b0:ec:f7:62:76:d8:9e:22:f3:2f:70:b0:ba:
98:09:ef:f9:b5:d8:64:3c:7f:29:ed:df:96:24:49:
f4:31:00:ea:cc:08:3b:a6:3d:9b:fc:9e:09:7a:56:
96:e4:7b:33:7e:9d:7f:e0:bb:26:cb:20:36:1d:47:
5c:7b:71:98:df:2d:95:cd:01:3b:c3:5d:a3:4f:7d:
8d:b7:39:1e:06:fe:24:f4:47:31:8a:de:da:56:95:
31:01:b1:a8:9e:a5:af:09:fd:5b:14:88:6a:e2:ed:
98:31:b3:44:79:6a:28:f4:de:9b:1a:a3:67:d5:1c:
01:d0:c5:04:8b:95:ce:9c:95:b7:58:ce:2b:bc:2d:
11:d9:5e:76:1b:66:b6:31:df:d2:81:77:fc:df:d6:
a5:f3:8d:9d:bb:57:6d:2d:08:3c:ea:25:04:dd:db:
f1:e8:80:0f:5b:db:2a:26:1b:5b:16:d3:49:ad:c3:
6e:74:e0:45:43:08:de:61:7a:87:75:a4:2e:d7:6f:
ac:c0:7a:a4:9e:2b:90:99:09:7b:71:39:93:52:a4:
24:56:59:62:8d:8d:f1:81:5b:bf:c4:50:cd:49:45:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:00:9E:38:DA:F7:9D:19:29:BA:7C:B0:76:87:37:AC:67:F6:D9
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b0:f4:8f:3e:68:16:2c:5f:f0:15:a6:df:f5:a8:f5:22:0e:
ca:63:6c:d2:3f:06:07:a6:f6:39:61:b3:a2:19:cd:49:a2:75:
a8:9b:31:d1:cb:a2:f2:4e:ee:73:6f:66:87:52:f5:82:9b:ee:
0a:1c:7e:f4:60:d8:6b:a6:f4:d1:9b:b4:95:56:b9:71:5e:a8:
8a:79:d1:98:b3:b1:94:02:be:ff:17:2c:ce:bc:bb:f5:53:5b:
95:ab:ef:da:6f:73:e7:aa:91:40:bc:7a:91:41:10:72:c4:9b:
22:4e:c7:a8:24:98:3f:3e:2b:74:9b:54:4d:41:3d:93:32:f3:
a5:df:5a:4d:fa:a5:69:5c:d6:8d:af:7e:18:cb:fd:6b:ec:c1:
f9:d3:14:01:eb:cd:e8:cd:51:87:8e:a7:68:4c:50:1c:12:18:
d1:7e:f4:c7:21:da:ed:cd:dd:cf:15:ba:a8:39:6a:4f:f8:b8:
85:2a:52:06:12:8b:50:34:e8:6a:df:2b:4d:52:1d:6d:f6:8c:
46:16:b2:8a:4c:62:29:f2:54:17:6a:87:8d:21:97:17:c5:df:
f5:98:7f:b4:10:b3:0e:7f:24:bd:cd:f3:72:93:fa:97:18:c2:
49:9c:2d:f1:66:6c:16:e9:5e:28:ec:52:18:61:82:94:90:22:
64:fb:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:21 2026 by rpki-client