Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: yK92qEuPJ92wMC6eur4f7ZA/zBh24VCZSqO74aQaMVE=
Subject key identifier: 3A:38:AC:E5:23:47:1F:2D:0A:BA:9A:C2:B9:4C:BC:AA:10:57:D0:C9
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019CAB3418EFB0842512A8027524FF1BA28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 10A8
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: rjOUXD+CSQ0j89Nny4LO9y2QGs7fBwgxsxSqG5UgLIo=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:18:ef:b0:84:25:12:a8:02:75:24:ff:1b:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=3a38ace523471f2d0aba9ac2b94cbcaa1057d0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:9f:9d:f5:c1:ec:97:8e:81:48:f9:3f:05:
90:91:cb:99:d7:a9:3d:61:f5:ae:e6:db:4d:65:b9:
aa:9a:bb:b6:af:35:81:57:77:2a:f5:35:f4:78:b9:
8a:20:ab:68:24:9e:52:68:48:c9:d6:56:42:37:12:
23:83:63:bf:0d:9c:2e:05:82:4c:b2:b0:cd:90:fb:
24:2d:da:1b:04:2e:5d:1e:e3:df:f1:b6:86:68:c8:
d2:41:e2:ae:94:4e:a5:e5:df:cc:a7:06:9e:7a:1c:
49:b2:0a:51:00:0c:e0:29:42:48:89:a1:3e:98:b9:
c5:b2:61:2c:8c:43:c5:f6:c4:0b:99:b6:19:15:1f:
f9:7e:07:02:96:5f:14:65:86:ed:6a:ea:db:d5:38:
12:cd:5d:d8:01:62:fa:09:21:67:b6:64:25:d9:dc:
0d:ed:07:46:3d:4f:7b:fa:0b:65:ae:09:41:e8:e6:
40:70:6f:eb:39:62:2f:dd:01:72:53:5f:1c:d4:3d:
6a:ee:4c:41:d2:04:a3:9e:1f:5b:5d:28:82:79:57:
be:29:1c:e0:f3:a0:41:64:d6:16:3b:7d:ef:46:5f:
a5:ce:a5:7e:fd:3b:76:8b:34:41:0c:f9:2d:fa:4d:
75:63:b9:7c:fe:26:af:93:4d:7e:19:b6:a4:3a:e6:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:AC:E5:23:47:1F:2D:0A:BA:9A:C2:B9:4C:BC:AA:10:57:D0:C9
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:6a:6c:17:67:55:c2:2f:96:56:69:ed:1b:49:92:93:a7:
26:b7:ae:e4:a4:25:c3:cd:4d:3c:72:6c:91:66:90:ba:26:17:
6e:9e:ba:55:02:22:1b:4a:49:84:62:5b:81:2c:b4:dc:b3:36:
a8:b5:18:ea:47:28:dd:7c:1b:5e:dc:1d:7f:ca:60:1a:b9:d6:
0f:0c:b6:4b:9d:d2:e9:e6:e5:eb:93:9e:de:5e:89:67:39:98:
09:9a:56:4e:aa:29:ec:ae:25:db:15:ed:3d:e1:3c:c0:50:15:
d2:c4:8f:eb:b8:e4:a9:d7:7a:aa:36:8e:a2:6f:1d:b2:6f:19:
34:9d:9d:9a:af:ed:ad:9a:75:86:8d:9a:b4:d3:d6:19:56:0b:
bf:1e:6c:b2:a3:b8:a7:51:5f:77:6f:61:8f:12:80:16:cf:31:
20:21:7b:c7:01:e3:2f:b1:7a:af:d0:53:8d:37:8f:c5:f1:14:
a7:87:99:b6:e4:d6:d1:86:f3:47:51:34:ed:e2:8d:3d:60:37:
b9:42:c7:b4:e9:da:34:5f:ed:40:0e:45:8a:42:e9:ff:df:28:
db:25:33:38:07:3c:a0:33:ce:97:31:8b:c8:db:2c:3e:7b:6f:
14:d4:35:0a:b6:74:37:41:6b:cd:79:98:fe:8a:bf:4c:7e:c4:
42:09:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:24 2026 by rpki-client