Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: 2ic8OVlcsA7Z8S3xHSJeLkG0bUsNQTcIimnOp4dqZFk=
Subject key identifier: 04:0E:0D:F3:79:B4:B2:9D:93:2A:4D:18:44:77:E6:19:62:F5:6F:CE
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019E1DFDEDCE17885B8F02882E0A032DA272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 1168
Signing time: Tue 12 May 2026 21:00:41 +0000
Manifest this update: Tue 12 May 2026 21:00:41 +0000
Manifest next update: Wed 13 May 2026 21:00:41 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: RSJza59vT1z8Q68nAO9zC5YBJIRqKNKOd+Ry8k5yYz4=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:ed:ce:17:88:5b:8f:02:88:2e:0a:03:2d:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: May 12 21:00:41 2026 GMT
Not After : May 13 21:00:41 2026 GMT
Subject: CN=040e0df379b4b29d932a4d184477e61962f56fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:c9:ab:fa:43:90:e4:59:9a:d3:5f:21:f1:
a3:f5:24:0d:76:1f:34:80:e9:c2:61:a9:a4:81:71:
b5:f6:c1:78:db:f4:10:3d:c3:bc:15:4e:e9:a2:26:
55:aa:88:a6:3b:89:c4:1a:db:6a:98:d9:6c:b7:71:
86:98:00:a9:41:ef:6c:d5:29:ea:68:38:c1:49:55:
fa:a9:1b:50:df:98:d4:9d:f0:10:db:b8:67:4a:c4:
7d:a8:01:ac:8b:f2:b0:80:f3:2f:2f:f5:83:98:9f:
36:85:e1:62:22:7d:d6:e5:4b:89:0d:37:c7:ba:46:
94:70:45:7c:cc:a0:cd:0f:6a:0f:2f:e8:0a:b0:65:
c5:a5:cc:c7:25:1a:f0:54:19:1e:14:e7:a7:22:8f:
c4:d0:c1:ed:bf:ec:35:83:9f:01:da:59:16:f5:5e:
1e:da:3d:98:9d:32:2d:ed:19:6e:fa:f2:ac:e0:f6:
28:80:09:56:79:19:06:34:ca:3a:3d:85:be:fc:3c:
ea:a3:91:20:ce:57:72:2c:48:68:e4:6c:ba:d6:46:
8d:2a:37:81:4a:50:50:9b:e3:58:77:90:ce:74:cf:
16:17:68:08:1a:ac:7f:5c:b8:b9:e6:cc:65:88:cb:
cf:a2:b0:80:cb:05:e4:19:7e:58:c5:ca:ed:97:fd:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:0D:F3:79:B4:B2:9D:93:2A:4D:18:44:77:E6:19:62:F5:6F:CE
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1b:07:b0:d5:76:72:0a:45:be:f1:2a:56:d3:b9:5e:33:8f:
0b:93:49:b7:cc:b7:e2:eb:ff:b1:0e:7b:27:37:a9:fd:9f:66:
b9:ad:1f:fd:a4:2f:f1:b6:62:0f:a4:ab:95:cb:b9:ca:ca:ef:
54:f1:e5:37:c7:20:5a:e6:cd:eb:78:70:ce:9d:e8:98:98:fa:
0e:7f:6c:75:fd:f1:ef:0e:8f:03:80:f4:fd:68:07:76:d1:6f:
aa:9a:30:8e:b9:a6:1a:32:47:10:9f:fc:44:5a:0e:f4:44:41:
0c:a2:45:36:70:23:41:95:16:6d:6d:ce:0a:af:6d:80:19:76:
d0:67:84:58:85:eb:4d:29:3a:98:22:14:e1:b8:c8:18:72:56:
08:22:3f:de:5c:d7:63:1f:42:75:d2:40:9b:9d:03:fe:c0:84:
fb:d9:7d:40:df:5e:2c:24:06:4d:18:9c:4e:c1:0f:d9:82:e7:
98:06:3a:18:2f:79:5a:76:09:f0:bb:10:76:1b:41:dc:06:f9:
d4:d5:15:52:17:39:89:3a:87:50:c6:c4:75:0d:38:5e:43:72:
ff:a8:16:6c:ec:5e:5b:36:f4:6f:9c:ac:9e:b8:5d:be:73:16:
75:46:b4:32:ee:d7:73:de:27:be:b0:85:d4:8c:5f:e1:15:eb:
3a:15:f7:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/e3OF4hbjwKILgoDLaJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1
MTQ1MGQwHhcNMjYwNTEyMjEwMDQxWhcNMjYwNTEzMjEwMDQxWjAzMTEwLwYDVQQD
EygwNDBlMGRmMzc5YjRiMjlkOTMyYTRkMTg0NDc3ZTYxOTYyZjU2ZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2zJq/pDkORZmtNfIfGj9SQNdh80
gOnCYamkgXG19sF42/QQPcO8FU7poiZVqoimO4nEGttqmNlst3GGmACpQe9s1Snq
aDjBSVX6qRtQ35jUnfAQ27hnSsR9qAGsi/KwgPMvL/WDmJ82heFiIn3W5UuJDTfH
ukaUcEV8zKDND2oPL+gKsGXFpczHJRrwVBkeFOenIo/E0MHtv+w1g58B2lkW9V4e
2j2YnTIt7Rlu+vKs4PYogAlWeRkGNMo6PYW+/Dzqo5EgzldyLEho5Gy61kaNKjeB
SlBQm+NYd5DOdM8WF2gIGqx/XLi55sxliMvPorCAywXkGX5Yxcrtl/2LOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQODfN5tLKdkypNGER35hli9W/OMB8GA1UdIwQY
MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt
NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx
LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxsHsNV2
cgpFvvEqVtO5XjOPC5NJt8y34uv/sQ57Jzep/Z9mua0f/aQv8bZiD6Srlcu5ysrv
VPHlN8cgWubN63hwzp3omJj6Dn9sdf3x7w6PA4D0/WgHdtFvqpowjrmmGjJHEJ/8
RFoO9ERBDKJFNnAjQZUWbW3OCq9tgBl20GeEWIXrTSk6mCIU4bjIGHJWCCI/3lzX
Yx9CddJAm50D/sCE+9l9QN9eLCQGTRicTsEP2YLnmAY6GC95WnYJ8LsQdhtB3Ab5
1NUVUhc5iTqHUMbEdQ04XkNy/6gWbOxeWzb0b5ysnrhdvnMWdUa0Mu7Xc94nvrCF
1Ixf4RXrOhX3tg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:44 2026 by rpki-client