Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: cD005sUihkVXTZ93nYTxvNaoT3mEgYSwBlORsX0+LCM=
Subject key identifier: 82:3F:43:C5:9B:E9:2C:6E:12:A6:D9:A7:CC:1B:5E:EA:45:29:89:13
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 01A040BC853C7B404D3B7AA6D3061209F163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 05AA
Signing time: Thu 27 Aug 2026 01:01:31 +0000
Manifest this update: Thu 27 Aug 2026 01:01:31 +0000
Manifest next update: Fri 28 Aug 2026 01:01:31 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: oDJTt6JASZteLU0Sxf4yuk4337UKOZ1Itxl89i+EBSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:85:3c:7b:40:4d:3b:7a:a6:d3:06:12:09:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Aug 27 01:01:31 2026 GMT
Not After : Aug 28 01:01:31 2026 GMT
Subject: CN=823f43c59be92c6e12a6d9a7cc1b5eea45298913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:a6:60:95:9b:da:e2:2f:38:30:2e:4e:b9:
41:f5:b7:8f:bb:e0:c7:aa:81:b5:3f:af:dc:a0:3c:
0f:7f:24:3d:95:96:9b:2f:a4:46:ae:21:c1:27:2a:
f8:da:e6:71:84:5f:59:b5:bd:d9:27:40:1d:e5:3a:
b6:66:57:27:53:cc:99:0b:43:4d:ea:d0:0e:cc:ae:
68:27:93:14:ac:81:44:48:78:f2:45:33:30:55:bd:
67:0b:19:71:8c:1e:93:1a:63:42:f4:06:1f:d8:d2:
5c:90:50:c9:73:34:34:90:6a:00:22:38:e3:a3:c3:
5a:8c:72:36:6c:b8:7a:67:06:72:37:df:30:01:84:
68:2f:53:d2:e1:8d:72:79:88:ad:e5:25:02:77:09:
45:d4:92:f9:2a:f6:3f:0b:40:41:2c:ac:33:2e:27:
5e:32:f4:e4:28:1f:02:e9:1f:f6:c6:3a:b9:e2:a2:
a7:06:02:c8:f7:cb:ef:e8:c9:7f:8f:15:24:10:22:
9e:98:2e:88:5c:d4:5a:3a:57:9c:d3:7a:7c:7e:f9:
8d:6f:91:04:c8:69:9b:aa:7f:5a:aa:f5:1b:3a:46:
2a:51:8b:9f:d7:a4:bb:65:db:ce:d0:02:eb:0c:d7:
65:18:f8:27:13:73:0f:5e:1d:f4:49:92:e8:f2:ad:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:43:C5:9B:E9:2C:6E:12:A6:D9:A7:CC:1B:5E:EA:45:29:89:13
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:d1:de:1f:f0:48:12:1f:be:5f:d4:3c:b8:80:6f:07:e0:
e9:3f:9f:47:41:5b:48:e2:c1:15:cb:8a:ce:ac:f9:fd:18:4e:
62:03:23:c6:5f:39:f8:f2:a5:d2:28:9a:58:aa:6d:c5:5e:cb:
e4:eb:a0:7a:90:79:10:e9:e1:12:2a:ed:26:36:4f:db:d4:c7:
24:9e:18:fa:ac:2d:bf:d9:23:ac:2b:9a:3e:14:bd:b6:68:dc:
a2:6d:5e:1d:03:dd:a2:c7:83:80:51:1d:10:a8:c6:7f:ff:9e:
f8:95:69:5f:a4:1e:53:4d:10:f1:fb:08:ac:43:81:c9:6e:09:
76:8f:a2:37:e4:74:5a:77:c3:c1:6f:c7:6d:e3:12:01:8c:be:
55:a7:40:94:03:b2:2a:bc:93:d1:c6:56:23:4d:15:7d:62:bf:
9d:05:38:76:bd:92:5f:15:89:4e:f4:f6:09:10:97:df:61:ee:
da:4e:bc:a9:e0:7d:6a:9e:74:e7:18:7a:d6:b5:5a:dc:ea:c8:
e5:da:61:54:ef:a2:23:6b:4c:dc:cd:91:2f:d7:e6:72:89:2a:
c9:0c:4e:c5:d3:4f:50:96:64:99:e2:7c:84:91:69:e6:89:b5:
5a:8a:59:8e:2a:30:05:45:68:51:b0:fc:c3:b0:27:9b:13:30:
07:33:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:12 2026 by rpki-client