Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: rzZGQ/reBkp6zdZzG1ov0nJpxgkCVvv934zWSEneAbY=
Subject key identifier: 3C:1B:5A:52:6D:1C:68:5C:CF:E2:C0:DA:17:E1:80:3B:08:31:11:62
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 019D3A537316A37A1D4CD03FF68D599ED90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 0419
Signing time: Sun 29 Mar 2026 16:00:40 +0000
Manifest this update: Sun 29 Mar 2026 16:00:40 +0000
Manifest next update: Mon 30 Mar 2026 16:00:40 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: K3z1L7MuuzNkGounSrM/Br7FJ61CASUk65QYqN9mm4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:73:16:a3:7a:1d:4c:d0:3f:f6:8d:59:9e:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Mar 29 16:00:40 2026 GMT
Not After : Mar 30 16:00:40 2026 GMT
Subject: CN=3c1b5a526d1c685ccfe2c0da17e1803b08311162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:ab:f8:38:89:11:71:37:05:ed:d7:04:15:
66:f3:68:e3:13:ae:cc:5a:0c:d3:2f:8c:ee:93:be:
04:74:69:63:17:cf:fc:a3:69:8e:b4:50:1c:29:3b:
14:9a:11:ac:1d:cb:85:c2:3e:72:f3:ec:a0:28:dd:
df:5b:6a:af:37:8a:3d:2b:45:a2:57:32:8b:04:09:
8a:95:d7:01:8c:90:4c:3c:77:3f:6d:b6:26:55:9f:
15:35:05:12:ee:61:1a:09:b7:83:70:75:30:a2:09:
e3:09:0f:c6:7a:b6:5c:46:0e:7f:75:26:9a:0a:bd:
b0:bc:62:67:ee:f5:5c:ca:c4:90:6d:54:d3:f6:2c:
70:a4:8f:26:8e:b4:56:89:d7:19:70:e4:56:e2:a6:
a1:0c:9e:9a:b7:b5:21:04:62:f0:d0:4e:9e:9b:b3:
0e:20:88:34:87:3d:e6:c1:d2:30:0d:5b:45:16:5b:
bd:22:4c:12:ca:2f:fa:77:fa:7e:8b:a3:2c:09:b3:
2b:73:d1:87:e5:ab:61:e9:bd:fd:37:cc:99:95:47:
51:0b:82:f1:16:e5:74:19:6b:44:58:f7:33:c2:fd:
56:27:7e:3c:68:53:ba:5d:e8:ad:6e:6f:35:ca:1d:
7c:2c:d8:21:30:77:cb:b5:b4:e7:7a:ee:aa:91:06:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1B:5A:52:6D:1C:68:5C:CF:E2:C0:DA:17:E1:80:3B:08:31:11:62
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c3:00:bd:a6:35:07:6b:d8:46:f6:55:14:1b:ff:e9:0e:02:
2a:1a:fc:b3:1b:95:f3:94:af:2b:60:2a:95:2c:41:97:31:da:
d2:7f:89:0e:67:9e:71:10:b9:dc:c1:25:4e:a5:ca:4e:d1:de:
74:40:7a:32:ec:9a:a4:50:45:89:d2:d1:54:a2:ee:39:4c:a3:
69:37:3b:3b:89:f9:47:dc:c1:ce:25:aa:4f:4d:86:4f:e9:8c:
ee:16:83:e2:57:a5:f3:93:ca:30:85:b0:fe:64:a7:73:c7:a8:
e4:b2:2a:bd:b1:36:48:b4:8b:71:db:52:59:fc:59:d4:bf:6a:
6d:cb:4b:55:b1:86:4e:ce:b0:1d:1e:f7:91:0e:74:ae:d1:66:
4a:c9:c9:c9:ed:c5:36:44:a6:ca:13:f6:3c:53:9b:c1:b2:5a:
dd:6e:f2:af:79:95:3b:94:16:a0:16:4e:53:13:28:d7:94:58:
71:8a:fc:f2:3a:b3:f6:59:86:9f:8d:cd:1d:ed:7e:97:15:c0:
95:45:2e:f5:41:c1:8a:b8:01:9c:c7:4a:30:b3:5a:86:56:d8:
13:5b:e8:10:8a:c1:67:58:fe:95:7e:32:bb:a6:50:7c:62:17:
0e:22:2e:94:e4:75:ae:96:65:7c:04:5d:7c:84:27:b7:64:e5:
71:63:62:6e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ06U3MWo3odTNA/9o1ZntkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWYyZjE5YjBlNGQ5NmM2NTViZjM3NzA2NjQ2MmUyYjE0
MWNkNjAwHhcNMjYwMzI5MTYwMDQwWhcNMjYwMzMwMTYwMDQwWjAzMTEwLwYDVQQD
EygzYzFiNWE1MjZkMWM2ODVjY2ZlMmMwZGExN2UxODAzYjA4MzExMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPar+DiJEXE3Be3XBBVm82jjE67M
WgzTL4zuk74EdGljF8/8o2mOtFAcKTsUmhGsHcuFwj5y8+ygKN3fW2qvN4o9K0Wi
VzKLBAmKldcBjJBMPHc/bbYmVZ8VNQUS7mEaCbeDcHUwognjCQ/GerZcRg5/dSaa
Cr2wvGJn7vVcysSQbVTT9ixwpI8mjrRWidcZcORW4qahDJ6at7UhBGLw0E6em7MO
IIg0hz3mwdIwDVtFFlu9IkwSyi/6d/p+i6MsCbMrc9GH5ath6b39N8yZlUdRC4Lx
FuV0GWtEWPczwv1WJ348aFO6Xeitbm81yh18LNghMHfLtbTneu6qkQZF0wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDwbWlJtHGhcz+LA2hfhgDsIMRFiMB8GA1UdIwQY
MBaAFPuvLxmw5NlsZVvzdwZkYuKxQc1gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02OHZHYkRrMld4bFdfTjNCbVJpNHJGQnpXQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZTNjMzY3LTM3YTItNGM2NS04M2My
LTU5MmI4NGZkNTMzNi8xLzEtNjh2R2JEazJXeGxXX04zQm1SaTRyRkJ6V0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBjL2UzYzM2Ny0zN2EyLTRjNjUtODNjMi01OTJiODRmZDUz
MzYvMS8xLTY4dkdiRGsyV3hsV19OM0JtUmk0ckZCeldBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsMA
vaY1B2vYRvZVFBv/6Q4CKhr8sxuV85SvK2AqlSxBlzHa0n+JDmeecRC53MElTqXK
TtHedEB6MuyapFBFidLRVKLuOUyjaTc7O4n5R9zBziWqT02GT+mM7haD4lel85PK
MIWw/mSnc8eo5LIqvbE2SLSLcdtSWfxZ1L9qbctLVbGGTs6wHR73kQ50rtFmSsnJ
ye3FNkSmyhP2PFObwbJa3W7yr3mVO5QWoBZOUxMo15RYcYr88jqz9lmGn43NHe1+
lxXAlUUu9UHBirgBnMdKMLNahlbYE1voEIrBZ1j+lX4yu6ZQfGIXDiIulOR1rpZl
fARdfIQnt2TlcWNibg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:12 2026 by rpki-client