Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: jafPdX9fI2gy2SrcRsEuPWDmlcZgmAh4DIkn+xQxF1U=
Subject key identifier: 23:C2:D6:14:F2:C8:6B:AB:2D:2A:DC:4D:28:89:92:1A:DB:D0:46:3D
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019F92B68F8C3142E882DD841CB08FB249A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 1229
Signing time: Fri 24 Jul 2026 06:01:05 +0000
Manifest this update: Fri 24 Jul 2026 06:01:05 +0000
Manifest next update: Sat 25 Jul 2026 06:01:05 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: SI+vd/aUy4yiVoAv/Ijk2b61AQa4YZivKCeyoVsmTxM=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:8f:8c:31:42:e8:82:dd:84:1c:b0:8f:b2:49:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jul 24 06:01:05 2026 GMT
Not After : Jul 25 06:01:05 2026 GMT
Subject: CN=23c2d614f2c86bab2d2adc4d2889921adbd0463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:50:96:5e:0d:0c:90:3b:b6:5e:3c:b5:18:
75:50:c6:8d:9a:8a:c7:54:8f:de:91:d8:cd:86:61:
0e:f9:10:2a:42:6b:2d:35:d0:a2:73:dd:0b:12:93:
58:a8:32:18:49:a2:2d:62:86:96:ad:bb:42:c2:3d:
97:a8:61:2d:68:a0:ea:d6:aa:97:d9:a2:80:60:1a:
20:f5:54:5e:dd:4b:1e:88:b6:ce:f8:b3:06:aa:09:
a3:45:4b:62:3f:22:4a:56:7b:44:a4:17:c5:b1:d1:
13:6b:20:c1:e6:44:b6:a7:99:25:d2:e6:76:1f:21:
d2:5e:1a:43:f9:ca:40:7c:fc:7f:6f:ef:bc:4a:a5:
74:87:e4:6d:dc:5a:fb:a2:9c:29:19:25:99:97:e3:
fd:64:69:0d:16:1b:00:a7:89:ec:c5:c6:f0:1b:46:
cd:71:6c:55:33:f8:ca:4a:c7:5d:56:d2:17:b2:b5:
80:21:30:8f:fa:d4:6a:29:57:e7:db:04:a6:9a:b1:
4f:b1:44:d3:a3:77:bc:79:ee:f9:48:0e:dd:14:0f:
de:86:e0:b4:27:9f:b3:f4:52:a1:15:f4:05:56:cf:
06:b3:79:34:26:1e:22:00:8c:b2:74:6a:9b:33:e1:
11:17:05:30:c9:2b:73:ba:11:3f:ba:62:b7:d7:fa:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:D6:14:F2:C8:6B:AB:2D:2A:DC:4D:28:89:92:1A:DB:D0:46:3D
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:a7:26:aa:e7:5c:cb:17:81:09:c0:b7:52:c3:34:dd:e8:
30:98:ff:c5:94:c6:71:97:8e:fa:ac:5d:d0:e0:75:6f:76:23:
ab:1c:98:bf:68:c6:0a:4c:55:b6:36:85:47:92:aa:45:81:8c:
c9:85:86:7f:04:66:f9:f1:d7:87:32:74:2d:df:7a:84:3b:fc:
ff:a8:3d:5e:b3:45:4a:55:fd:6d:5a:7d:4f:c2:84:77:42:af:
b9:53:81:78:7a:e1:35:11:ce:a0:de:a5:57:6f:6d:63:31:e9:
d6:26:af:6c:3c:81:f6:21:f4:84:dd:e8:a5:25:a4:e9:da:5d:
fc:5e:3a:8e:0d:00:b9:a7:1d:d7:c1:3a:87:45:b3:44:e9:ea:
6c:70:f2:79:39:c6:8b:ed:16:37:bd:81:2f:ad:9b:06:fe:63:
4f:a7:2e:f1:e4:44:22:fb:9d:99:0f:7a:16:d8:3f:ab:0f:75:
22:41:c0:53:76:d4:8d:58:b9:09:d0:3f:db:21:97:14:fc:4a:
85:1d:26:4b:c5:ef:43:4a:70:65:bc:96:be:a1:4c:f6:ff:e2:
f9:cb:dd:01:ee:d5:ca:97:21:10:5c:d9:7f:99:8d:39:1e:22:
c5:fb:69:42:41:71:45:1b:ce:ad:15:36:70:2c:7a:47:90:86:
6f:1d:65:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sto+MMULogt2EHLCPskmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1
MTQ1MGQwHhcNMjYwNzI0MDYwMTA1WhcNMjYwNzI1MDYwMTA1WjAzMTEwLwYDVQQD
EygyM2MyZDYxNGYyYzg2YmFiMmQyYWRjNGQyODg5OTIxYWRiZDA0NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnJQll4NDJA7tl48tRh1UMaNmorH
VI/ekdjNhmEO+RAqQmstNdCic90LEpNYqDIYSaItYoaWrbtCwj2XqGEtaKDq1qqX
2aKAYBog9VRe3UseiLbO+LMGqgmjRUtiPyJKVntEpBfFsdETayDB5kS2p5kl0uZ2
HyHSXhpD+cpAfPx/b++8SqV0h+Rt3Fr7opwpGSWZl+P9ZGkNFhsAp4nsxcbwG0bN
cWxVM/jKSsddVtIXsrWAITCP+tRqKVfn2wSmmrFPsUTTo3e8ee75SA7dFA/ehuC0
J5+z9FKhFfQFVs8Gs3k0Jh4iAIyydGqbM+ERFwUwyStzuhE/umK31/qcYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPC1hTyyGurLSrcTSiJkhrb0EY9MB8GA1UdIwQY
MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt
NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx
LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVmnJqrn
XMsXgQnAt1LDNN3oMJj/xZTGcZeO+qxd0OB1b3YjqxyYv2jGCkxVtjaFR5KqRYGM
yYWGfwRm+fHXhzJ0Ld96hDv8/6g9XrNFSlX9bVp9T8KEd0KvuVOBeHrhNRHOoN6l
V29tYzHp1iavbDyB9iH0hN3opSWk6dpd/F46jg0Auacd18E6h0WzROnqbHDyeTnG
i+0WN72BL62bBv5jT6cu8eREIvudmQ96Ftg/qw91IkHAU3bUjVi5CdA/2yGXFPxK
hR0mS8XvQ0pwZbyWvqFM9v/i+cvdAe7VypchEFzZf5mNOR4ixftpQkFxRRvOrRU2
cCx6R5CGbx1liw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:21 2026 by rpki-client