Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: zAyFFUWTjdPhoF4OGwqlVRfzBSHyccgteL04cu8lugs=
Subject key identifier: 4F:6E:B2:8C:A6:28:C6:2F:D6:69:BC:67:B1:61:B9:4A:6E:66:44:2B
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 019E1C47A0BEFB0D983F6742714B42A2C6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 048E
Signing time: Tue 12 May 2026 13:01:56 +0000
Manifest this update: Tue 12 May 2026 13:01:56 +0000
Manifest next update: Wed 13 May 2026 13:01:56 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: epZsION6btSS/cLGCKBBIqx7ujS6KNVrWExqRt4D6ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:a0:be:fb:0d:98:3f:67:42:71:4b:42:a2:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: May 12 13:01:56 2026 GMT
Not After : May 13 13:01:56 2026 GMT
Subject: CN=4f6eb28ca628c62fd669bc67b161b94a6e66442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:f0:99:c8:43:cc:a2:25:2f:52:b5:d5:0f:
6c:48:39:c2:06:19:0e:06:26:9c:21:d5:2c:98:ed:
58:d2:4f:32:2d:29:89:cb:db:88:65:e8:c8:61:e0:
99:b2:cc:cd:35:12:6e:fa:a1:6b:28:9a:a1:8a:d3:
2d:78:d5:4d:26:1f:86:9e:10:7c:75:af:32:37:2a:
67:19:62:05:9e:94:36:1e:60:5e:e0:14:7e:09:3c:
99:5b:70:47:b0:f5:04:2f:b3:79:a4:9a:fe:56:f4:
80:f8:0e:1f:f3:67:c7:8c:48:8c:d5:d7:f9:13:e2:
95:24:91:8c:62:2d:bf:68:c3:a2:e3:1d:8c:ee:d5:
02:a8:47:d0:d3:2c:df:01:c7:e8:3c:e8:f0:c7:7b:
c0:3c:2e:bd:50:f7:06:6e:40:81:06:69:cf:d3:37:
28:38:16:f9:4c:d9:d8:05:01:4e:59:b5:cf:74:c1:
60:dd:13:09:8d:49:5c:c5:06:cd:03:52:7e:a6:e4:
f9:dc:1b:ec:19:37:f2:b6:f0:36:d8:98:20:c0:8e:
84:6b:12:3d:92:4d:c2:03:dd:43:b1:cf:29:09:98:
b0:e6:59:6a:0d:28:c1:41:3d:4c:02:e3:d5:80:04:
7e:ab:ad:1d:8c:1e:22:fb:50:69:61:cf:bf:f7:e0:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6E:B2:8C:A6:28:C6:2F:D6:69:BC:67:B1:61:B9:4A:6E:66:44:2B
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d3:05:7a:d9:03:a2:9b:64:ad:cf:84:e0:81:47:df:9b:08:
a5:80:80:9b:1d:69:5d:a9:4d:64:a0:22:9d:62:fb:2b:5e:62:
9c:57:8c:11:09:20:fc:75:9b:a5:8d:78:7c:b5:d2:51:10:ab:
fe:5e:ca:8c:d7:b0:c2:ef:57:20:41:0e:56:8c:18:ad:71:42:
66:74:27:c6:54:b5:c8:26:e4:80:3a:80:04:d5:a9:b5:80:85:
ab:96:63:30:eb:f4:df:a6:5a:76:c8:33:1e:e1:db:8f:1f:1d:
d5:9c:26:8d:c3:f4:3a:6c:40:11:98:41:e9:5c:c9:22:8d:d5:
9a:8d:4d:9d:c8:3d:af:ad:24:19:d6:11:c6:8e:51:e8:5f:98:
66:72:45:ed:2d:d3:a6:a3:49:a7:72:f0:a3:e9:d1:17:85:b9:
67:5f:d9:0d:d7:7a:f1:c5:eb:93:04:f7:3e:e1:cf:31:58:53:
d5:ca:96:ec:76:52:98:dd:74:59:54:4c:13:97:c6:85:e4:dc:
0d:c3:33:8a:79:e8:27:a4:4c:13:3d:da:d3:e3:ea:93:77:dd:
1e:ff:ba:1c:e9:ca:27:3c:97:d5:bf:90:42:cf:f5:c4:e7:ca:
47:07:80:f1:be:63:1c:87:ee:a0:f6:a5:f5:c1:e5:14:1e:d6:
e9:30:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:36 2026 by rpki-client