Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: 8LKnd9vAz+A+IgjONra2RHHx9J2LFbazV0LkHx8v5dw=
Subject key identifier: 63:C7:93:CE:B1:E5:1F:B0:9E:61:09:65:49:10:00:C5:75:1C:28:47
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019D3865E73CB52A7616CC5AD3F19C77156A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0BD3
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: E4GoqbHQVsY30dmE1ZXR+7jcnIrCH6ppZux6lRbIliI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e7:3c:b5:2a:76:16:cc:5a:d3:f1:9c:77:15:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=63c793ceb1e51fb09e610965491000c5751c2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:34:ee:d7:b1:93:0f:3d:16:1a:26:af:d8:
67:da:23:80:2d:67:d4:b5:32:c7:ac:a2:ea:76:0e:
b8:1a:de:bd:cf:ab:97:da:fb:24:4b:00:fa:42:4e:
60:77:f0:9e:a9:1f:41:1d:a8:c7:3b:1b:f0:a3:6b:
f4:f8:50:6d:31:be:f0:da:3a:cc:7e:a7:50:82:2d:
4c:46:7b:25:f9:70:d4:4a:a0:93:7c:bf:df:84:38:
eb:93:dd:8c:4f:8c:58:d7:9e:37:19:3d:6a:6b:ee:
97:f3:1c:06:42:b5:46:0a:5d:64:d3:ee:f2:b9:45:
97:a4:fc:72:46:88:d2:e1:9a:fc:f4:28:ea:01:cc:
84:b7:a0:10:78:d3:34:f0:47:05:29:9b:c4:9b:91:
ff:7b:64:59:f1:45:a7:9a:7c:19:e5:af:71:e7:4d:
7b:7e:b1:d4:fc:b3:3e:81:db:61:ef:fb:78:d5:0f:
cc:fd:7b:a7:60:b7:33:2c:58:56:06:8b:46:ae:01:
cf:53:92:23:21:0f:cd:b9:9b:c2:2c:79:03:8b:f6:
b5:7d:99:fb:22:3b:f7:65:10:1f:f8:6f:15:ce:ac:
e9:56:9f:1f:92:7a:10:47:e5:4f:59:79:5b:ad:72:
dd:df:05:66:28:e0:47:4d:f4:42:00:be:54:f5:96:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:93:CE:B1:E5:1F:B0:9E:61:09:65:49:10:00:C5:75:1C:28:47
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:b5:9b:39:6d:2c:fc:34:ed:76:25:b4:0d:61:fe:9b:ea:
bc:72:76:b2:f5:ff:79:94:16:46:f3:5f:98:74:ef:fd:8a:d4:
4b:96:47:fd:36:dc:70:d5:48:44:80:d7:73:ad:e5:4f:b5:66:
76:fe:42:42:56:31:c9:d4:37:cc:48:37:be:77:a9:af:d2:da:
76:6b:39:22:e1:48:a9:88:cf:eb:0b:09:cf:b3:6b:f2:05:0d:
9f:a7:80:a5:c7:eb:7c:00:19:8d:f5:58:aa:16:ad:90:91:8b:
50:fa:7b:30:54:24:67:37:fa:e0:d8:1e:5b:cf:0a:82:59:07:
db:5e:51:55:f7:91:3d:60:44:6a:14:ef:3a:8f:3d:92:f3:41:
88:39:e2:cf:fd:1f:49:99:df:80:3b:72:73:dd:f0:29:72:9f:
ed:f3:fa:a6:10:42:96:2d:89:d8:19:19:5d:fc:fa:f9:ef:fb:
c6:83:f8:70:32:ba:e2:2e:59:96:12:a9:c9:cd:c9:31:17:f8:
ab:6f:05:b5:92:65:35:cd:34:3c:ed:f2:ec:c8:c8:7b:76:52:
a1:ef:cb:d8:e9:b3:e8:2f:1d:ee:38:40:de:48:71:5a:ee:cd:
3f:36:b4:ef:6d:6f:54:6f:cf:79:b3:9b:05:fd:f6:37:76:57:
c2:0a:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:42 2026 by rpki-client