Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: d+WIXTk/cBalwyzKUGdkZWa39gcOiMwryAAHouJFxD4=
Subject key identifier: 48:3F:26:6B:1F:32:23:6F:0C:40:8D:1C:90:C9:53:82:31:6D:E5:B3
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 019D9850B3D0CAC16442109D966827251102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 0672
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: spj1IQ9is7tTsnuP9XyrsxFepMo2UkanTUCNWu1i3f0=)
2: tgLyfLjlcwMzEupMfST57LV3Kh8.roa (hash: 0v0L+j/WsnBYBPti3JFWgZtxat+165mo5Q0XdxS+nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b3:d0:ca:c1:64:42:10:9d:96:68:27:25:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=483f266b1f32236f0c408d1c90c95382316de5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0f:c4:d1:47:48:f0:bc:a6:44:06:bc:1d:89:
bc:e2:fb:fa:dc:a9:8f:61:a1:62:7e:bd:6c:21:46:
1b:da:30:87:82:f2:51:04:7e:59:9d:64:1a:81:2e:
8e:86:21:bf:47:18:21:6a:05:d4:fe:d8:b5:43:5e:
a5:46:72:0d:07:c8:52:13:9e:72:4c:a9:49:82:11:
c3:1c:79:8e:e1:97:64:77:09:fa:60:de:df:39:72:
12:c1:25:a9:15:15:8b:79:0e:21:5c:24:ca:33:85:
28:56:a5:98:34:09:85:15:f8:bf:e0:79:13:c4:dd:
b8:cc:00:9c:87:a0:13:d9:1b:91:5c:46:0c:d9:a6:
54:e9:ba:ee:53:f6:a0:05:a3:d0:14:8d:af:62:f2:
a7:6d:51:ea:05:14:89:ec:79:2b:8a:1c:54:de:e2:
39:b9:9e:c9:f0:58:f6:8c:38:5b:33:16:7c:dc:c8:
d9:76:32:57:de:91:ab:b1:bd:3b:08:b5:41:e7:1b:
53:d5:b3:28:61:e4:67:4c:45:4a:7a:a5:43:a0:46:
ce:36:cd:b8:84:5a:44:0e:6e:b6:74:69:cf:8a:87:
52:e7:b8:28:f4:5c:b9:1e:1e:e6:19:95:57:b1:1b:
43:ae:16:21:6a:02:d0:99:d3:b6:ef:af:01:7a:29:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:26:6B:1F:32:23:6F:0C:40:8D:1C:90:C9:53:82:31:6D:E5:B3
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:b8:d9:23:23:6f:20:ec:73:55:96:92:61:3b:8e:88:5b:
85:ce:ca:a5:f6:08:fd:4f:5c:b6:e8:a9:94:73:23:77:2e:6b:
ef:90:6c:d4:4d:6d:15:9a:f3:99:3d:b1:6a:27:64:3e:a3:3e:
5b:ad:ed:20:cd:e3:fc:52:23:81:b9:81:df:ab:37:64:0b:59:
9b:0e:c9:c2:45:e0:c7:26:c1:4f:5f:4e:a4:34:b8:9e:11:b7:
f6:26:08:8e:29:5b:fe:96:a2:ad:21:b4:71:04:4f:8a:bf:3c:
4f:e5:66:c8:8e:67:15:20:e1:a2:52:b5:6f:79:7a:cd:f4:ee:
35:3a:5f:be:3a:71:27:e4:78:0d:01:ca:73:de:e5:a2:d2:dc:
33:e9:4c:df:d6:d5:13:a8:00:49:29:a3:16:7b:53:ba:18:8a:
72:66:81:df:34:d3:dd:34:c8:ec:cf:d5:b1:a6:90:3a:bd:c7:
93:5c:f6:e0:b9:d5:52:98:68:1d:72:f7:53:1e:23:31:bd:59:
b8:e6:45:5e:8c:05:57:fe:c9:7a:a5:2f:22:8a:37:ff:5a:60:
7e:40:c3:66:be:66:d1:03:c5:75:a8:41:4b:6a:98:86:ca:bd:
7b:be:ed:7c:ed:6f:27:11:07:aa:ea:fc:7e:15:16:af:1c:5a:
1c:19:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:13 2026 by rpki-client