Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: 5vCo+XIkKXF1eHJo4v+tgYSvYQ5IWRK+S4FqgriXzRI=
Subject key identifier: AB:CF:E9:D8:4D:68:32:C5:0B:8A:53:C6:AF:49:3C:A9:3C:12:0B:2B
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019D98BDB4BA545C56F8CA0A59EB6888B9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 1123
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: yyHWCKr5wPG5yKu+o0+ZxS47vIks4TggbAesWBpyiMk=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b4:ba:54:5c:56:f8:ca:0a:59:eb:68:88:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=abcfe9d84d6832c50b8a53c6af493ca93c120b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:1e:ee:84:df:46:90:46:42:5d:e5:73:08:
c0:89:e0:5a:5d:24:41:29:15:70:52:3d:a0:a0:b9:
4f:64:72:89:9a:13:c5:69:08:56:2f:3c:29:2e:e5:
fa:ce:73:dc:b9:b9:d6:b3:ad:f7:d2:dc:88:0d:0e:
35:ce:fe:c9:8a:68:3b:f1:e6:e1:21:5a:75:96:7c:
25:4f:68:66:67:ee:89:aa:1a:b4:9d:bb:e7:13:b9:
8c:aa:50:ea:98:20:3f:8f:46:7b:0a:b8:61:43:bd:
d5:a8:0c:63:fa:59:1b:1f:15:b6:d9:fc:80:78:34:
4c:50:e9:60:ff:f8:66:20:59:13:f4:4f:40:f3:67:
69:b1:8e:a4:c8:49:65:e0:af:58:26:be:81:35:3e:
1b:1d:10:47:c9:25:54:cb:ef:ce:f3:60:4a:be:92:
d3:5f:d2:f9:99:05:a3:34:0a:72:19:29:5f:77:15:
37:c9:16:b9:03:84:66:ae:ba:79:45:65:12:87:f7:
df:b4:08:a9:3f:27:5c:82:ed:63:75:7c:a1:08:50:
3d:57:6d:02:cf:7f:a5:0e:58:6e:d8:2f:a0:2a:29:
41:b9:39:32:b3:09:b7:f1:7f:56:72:37:a8:8e:fc:
39:04:1c:3a:23:99:d0:d8:ce:5f:e4:cc:49:d7:e3:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:E9:D8:4D:68:32:C5:0B:8A:53:C6:AF:49:3C:A9:3C:12:0B:2B
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:15:7e:f0:d4:33:81:96:64:a4:9e:0c:32:9d:ff:5e:11:85:
92:1d:8f:e4:f5:f2:af:c8:e6:10:ba:92:a9:93:7a:34:b5:a9:
50:55:b2:d1:4a:ac:66:a5:74:39:ed:ae:10:c8:14:e1:f9:5a:
f1:ba:dc:25:44:ff:a0:52:c7:9e:64:87:12:0c:2b:fc:da:f6:
b0:c6:af:8d:91:88:da:15:ce:e7:f7:c3:5d:fc:5a:da:51:5b:
df:2b:09:f4:42:90:1b:d0:e2:d5:45:c5:7d:c2:b0:ae:9c:ca:
2d:93:c6:57:25:f3:5e:75:78:20:9f:93:cb:e5:a7:78:e9:be:
b8:90:54:9c:e4:3f:24:8d:ad:fc:1b:ec:60:41:25:be:53:9e:
90:4a:80:55:3f:b5:91:c6:46:64:a8:14:37:f3:dc:b5:03:eb:
a7:31:63:e1:3c:31:33:f9:13:c0:dc:d3:8c:5f:b9:08:92:42:
27:ad:de:48:17:5c:4a:a9:29:88:40:58:01:71:61:e8:46:9d:
2f:a1:04:b0:fc:0c:48:64:2e:6a:62:37:5f:62:2f:9b:0c:bc:
62:55:52:84:69:00:54:01:55:aa:4c:11:ff:95:4f:46:e0:b7:
92:66:7d:de:c2:78:25:cc:48:4d:3b:a4:53:06:da:c1:18:9e:
16:97:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:08 2026 by rpki-client