Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: H1Xyfzq77tOaxMH5CLszdqEl/L28faXrE3qXNoNSOM8=
Subject key identifier: 63:6F:3A:6E:CB:E4:4D:7E:61:C7:20:CC:4F:1C:64:E0:59:3C:12:FC
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019CAB6AFFAE3286605BA723085034E4E876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0B8A
Signing time: Sun 01 Mar 2026 22:00:42 +0000
Manifest this update: Sun 01 Mar 2026 22:00:42 +0000
Manifest next update: Mon 02 Mar 2026 22:00:42 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: DpFApT+sjBg4qkgHgvf/JK75B6XHzmJAiDy5t051ddU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ff:ae:32:86:60:5b:a7:23:08:50:34:e4:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Mar 1 22:00:42 2026 GMT
Not After : Mar 2 22:00:42 2026 GMT
Subject: CN=636f3a6ecbe44d7e61c720cc4f1c64e0593c12fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:b7:9f:71:9c:e2:39:b2:1d:92:21:60:32:
3c:4f:56:c1:18:8a:86:5a:42:b2:52:18:c5:7b:1d:
36:16:9a:b2:0f:57:93:a6:18:fc:8b:aa:81:ea:45:
95:80:a0:d1:fd:6f:76:29:2f:14:a0:75:06:9f:eb:
18:b6:5c:04:e3:9e:b3:c3:47:ae:4d:16:87:e2:e8:
b3:52:13:0f:93:da:e3:68:77:2c:b1:3a:12:d9:3c:
5c:76:01:45:41:00:82:35:9b:6e:1b:b3:67:ea:61:
4c:b8:3e:b6:21:af:70:27:20:4f:30:70:ec:85:bf:
88:13:02:1b:d1:97:49:a8:47:10:1b:ea:34:4a:17:
11:25:53:c6:22:08:37:b6:0e:7b:82:c8:b0:51:6e:
58:05:7a:34:8d:6d:ad:ee:07:f0:9d:c3:bc:af:9a:
d8:73:ec:94:d4:b9:5f:ee:21:b7:2d:09:8e:f9:03:
7c:56:66:cc:01:8b:1c:a0:8b:16:8c:b5:8b:08:09:
1e:0c:2e:0b:ec:68:80:f0:0a:a3:e4:b5:8a:a4:d6:
c5:ce:10:dc:1b:47:01:15:29:6e:38:df:65:77:d8:
13:fb:7d:eb:0a:4d:64:77:08:16:f4:2a:e5:e7:4e:
4a:41:d6:22:7f:93:66:4c:7b:a7:3c:23:61:21:7a:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:3A:6E:CB:E4:4D:7E:61:C7:20:CC:4F:1C:64:E0:59:3C:12:FC
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:2b:02:ae:59:c3:12:c9:2f:47:18:67:77:59:78:af:75:
1c:29:bd:9f:98:5d:c4:5c:7d:01:d3:82:7f:d7:d0:d1:e2:88:
b5:50:3e:90:ad:bd:be:6b:04:01:96:9a:c9:51:4b:71:64:08:
24:15:4d:03:71:d2:b9:0a:95:7d:3b:57:1f:f3:00:e8:cb:29:
1e:e9:6e:bc:39:35:39:ea:ac:fb:58:e1:83:16:3d:bb:5c:69:
c2:dd:73:0e:ac:5f:9f:48:cf:ed:16:42:ec:b4:38:6e:00:6a:
c0:19:6e:5d:2a:70:f2:72:b7:5b:33:2d:63:ff:6f:f5:6a:49:
45:64:c1:79:b7:13:75:49:11:4f:13:ef:12:a5:4d:66:66:f3:
ce:58:03:6a:d5:b1:63:be:43:f3:6f:0b:12:03:0f:08:41:a1:
b8:11:96:6c:4a:28:47:6f:55:17:a0:52:36:fa:12:b3:e5:f2:
f8:1c:69:ac:c2:9e:af:cc:91:bb:d5:2d:4b:7a:8c:8f:fc:6d:
cc:c6:a7:48:3e:a5:11:43:86:70:fa:24:02:69:81:9a:46:1b:
28:d1:a2:3e:6f:bb:00:23:9f:0a:bf:e8:74:45:62:3d:9f:02:
87:71:1c:0b:90:4c:a1:7d:15:33:5e:27:e3:01:6d:a6:1e:b0:
dd:c6:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:07 2026 by rpki-client