Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: H5X7B+xXxMKY+hHTycoXmKIjxNx8ekIKXlPssuDJbPY=
Subject key identifier: AF:1D:CA:5E:0A:F9:1D:88:7C:DD:CC:3B:97:01:E1:44:04:9E:6D:A9
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019FA9E27EA00A4715837E26BCB223F328CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 1235
Signing time: Tue 28 Jul 2026 18:00:20 +0000
Manifest this update: Tue 28 Jul 2026 18:00:20 +0000
Manifest next update: Wed 29 Jul 2026 18:00:20 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: fZ+lluWDExkwNuwc02cSiPHdm4t3fWEtrAeMjfQ4hiM=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:7e:a0:0a:47:15:83:7e:26:bc:b2:23:f3:28:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jul 28 18:00:20 2026 GMT
Not After : Jul 29 18:00:20 2026 GMT
Subject: CN=af1dca5e0af91d887cddcc3b9701e144049e6da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:af:5d:1f:06:15:78:d7:3f:ee:43:ba:06:
a3:e1:23:e2:97:f7:cd:49:bf:2e:db:5a:4f:c2:07:
c9:db:38:28:83:3d:52:33:44:1c:31:17:21:c0:0c:
ba:67:1c:6c:c5:0b:54:ce:a7:e6:66:5c:9a:7d:0a:
0d:a1:23:a3:72:1f:ac:69:10:9f:08:47:4c:e2:c3:
d4:87:2d:71:c9:17:d1:57:b0:92:35:05:e7:c7:e6:
ae:4b:6c:73:83:8e:e1:f6:b8:be:23:7b:f7:6b:fa:
12:70:69:de:27:9a:71:aa:68:ec:de:6e:e2:74:ff:
1c:4a:5e:e4:f1:69:57:57:4c:27:b2:05:bd:cc:ec:
02:eb:87:17:8d:00:55:74:1e:32:26:f7:dd:9c:b1:
0f:5a:2e:1a:a9:f0:0f:aa:c3:1a:6a:77:f7:d4:5b:
ce:76:33:3c:f3:ca:ee:9a:dc:d2:b1:6a:c5:79:fc:
02:b7:39:3e:07:62:e9:b7:02:09:f3:92:76:12:86:
1f:47:1d:a9:ea:04:88:73:8d:71:c4:0d:d5:ba:84:
5d:86:cb:4b:22:b7:e3:cd:0e:f2:c4:36:79:a8:95:
27:9e:dd:c6:b6:7a:51:1e:2f:85:a4:31:4e:cb:dd:
7a:26:af:7c:86:7d:cb:49:11:45:dd:e1:8a:28:01:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:CA:5E:0A:F9:1D:88:7C:DD:CC:3B:97:01:E1:44:04:9E:6D:A9
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:f7:79:24:e7:3c:17:3a:0f:86:88:01:21:ec:05:b8:7d:
ab:c9:18:64:dc:83:e9:6a:e5:03:7b:62:fc:65:11:85:9e:94:
de:5e:40:f1:c3:e9:e7:1a:50:46:16:6c:b7:27:4f:07:11:42:
ae:f6:a5:44:24:ec:78:3a:f3:b4:2a:9a:97:d3:93:92:bf:2d:
5b:e2:1f:6a:7c:89:cf:b0:c4:51:ba:12:df:c5:86:b4:7c:da:
77:96:70:53:00:e6:5e:3b:43:4c:17:7a:bf:db:64:84:34:a0:
57:2c:96:7a:2e:8c:40:d6:70:64:9f:ec:1e:fc:29:31:2b:28:
40:44:2c:d1:5b:61:b1:78:db:c6:6d:e5:7f:0e:a9:c7:ca:ea:
52:8b:f9:c4:30:70:39:19:5f:4c:35:70:8b:58:28:17:2f:6e:
51:b0:39:f0:7c:9f:7c:6a:f7:74:d6:16:3a:97:9b:09:3c:64:
e0:70:fe:47:12:b4:87:35:7c:af:b7:c8:b9:b6:a2:f7:c1:28:
6e:e4:0e:50:f5:c1:d3:51:58:89:6d:e5:e6:05:9b:2c:f4:a8:
f0:cd:a1:15:fd:98:f0:dc:9c:da:d9:8c:ba:0e:05:73:5e:f5:
0f:64:e8:49:35:1e:4f:c4:0a:22:a0:04:07:65:ed:8c:2f:68:
3a:db:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:46 2026 by rpki-client