Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: slAIupW0/kkylfDwzC0wSn8QI8pAY6Ngma3U8PkVv8U=
Subject key identifier: 6C:E2:87:5D:69:DC:68:D2:EF:39:D4:C0:86:DB:E7:1B:A4:98:2A:43
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 01A0D3838848BF87B8BDFB7BF6604654991B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 05F6
Signing time: Thu 24 Sep 2026 13:03:27 +0000
Manifest this update: Thu 24 Sep 2026 13:03:27 +0000
Manifest next update: Fri 25 Sep 2026 13:03:27 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: Xz3dXtLPAcyLtdKPlpEXwAxPeFPqVVDdItA+kV8Xtdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:88:48:bf:87:b8:bd:fb:7b:f6:60:46:54:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Sep 24 13:03:27 2026 GMT
Not After : Sep 25 13:03:27 2026 GMT
Subject: CN=6ce2875d69dc68d2ef39d4c086dbe71ba4982a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:92:b7:ad:ac:69:93:c9:a0:0a:d1:08:19:
af:0b:a6:ae:6b:34:28:f0:3c:8e:a4:19:9d:ea:96:
fb:c5:ef:18:e3:cf:62:b8:ec:5f:18:c7:b7:9a:ae:
9d:d7:ba:aa:54:a6:43:a3:80:7a:73:fc:0b:81:ce:
4b:30:c6:83:28:66:e5:59:be:24:88:03:5a:7f:e5:
8b:59:6c:7f:59:2f:04:ec:08:93:f3:f5:9a:ea:49:
90:a9:a9:ba:57:0e:51:13:91:7b:c2:b5:32:3d:c4:
a3:46:69:bc:84:c7:cb:34:09:4e:37:a7:01:13:57:
86:1b:ef:f7:b9:07:42:31:e6:31:ba:37:33:ae:de:
63:e0:13:dc:c0:12:cd:32:f6:2d:ab:93:79:65:d8:
9b:c3:eb:8d:a5:8f:a4:c9:92:0f:2b:af:57:b3:64:
76:a0:6e:08:62:9b:40:4b:e1:ca:9f:7a:2b:ec:6d:
5c:87:9c:8f:cf:b7:4b:c0:9a:cd:94:08:7d:fe:21:
6c:97:29:70:56:a8:9a:5d:4c:16:f5:52:d1:27:90:
24:76:ad:71:b4:0e:09:02:6c:60:13:af:4e:8a:30:
18:d7:bd:18:33:d4:a0:49:f3:3a:0e:c8:7f:0e:d5:
18:16:57:e6:72:88:1c:1d:56:89:82:e1:0f:de:e1:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:87:5D:69:DC:68:D2:EF:39:D4:C0:86:DB:E7:1B:A4:98:2A:43
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:71:7a:33:01:cb:04:e5:41:15:cd:33:ce:9d:a1:f1:00:
93:b0:8c:ec:6a:d8:21:41:77:8c:62:ea:f1:22:2d:90:88:90:
37:03:bf:4a:fb:2d:21:3c:b8:ee:b1:44:ea:04:db:e8:77:8a:
22:34:e2:a5:b8:bf:51:82:71:1f:b2:c9:f0:40:d7:46:a9:ce:
09:9b:41:7d:d3:cf:d1:18:bb:08:9a:85:27:f9:05:77:82:2d:
33:c9:d6:e8:b8:f2:c3:d0:98:43:93:6d:07:08:0f:34:fc:40:
59:16:ad:5c:2c:ba:ca:76:b5:e7:43:dc:ad:9f:24:ae:c2:a7:
bc:b0:79:50:1a:ba:ad:79:dc:a9:3c:5e:67:21:ec:16:1c:e3:
4a:cb:0c:97:9e:07:9b:41:a4:d9:fc:88:9b:d9:e3:be:30:94:
fd:6b:8f:a3:f4:49:e8:89:0c:4e:26:75:ec:73:11:c7:d8:df:
2d:3c:ea:9b:a5:f2:43:52:00:a0:d8:e2:f8:17:60:e2:24:39:
2c:9f:be:39:29:38:cd:9c:8b:5f:df:00:1c:ea:2c:bd:f3:0b:
8e:d6:08:37:92:f9:af:04:24:bf:61:0c:32:7b:92:33:52:4e:
5e:0b:66:59:39:11:18:f9:a8:19:49:b8:c3:29:1c:a6:ea:bc:
c7:ee:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:14:33 2026 by rpki-client