Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: wUl7qne0uIb/FaFbOaT2o0oH03mK1k0M/e3GYdUwfvY=
Subject key identifier: EC:75:26:30:E2:4D:40:CA:5E:E3:F1:C3:B6:78:4F:72:14:6F:0A:99
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019F90C7E046F509D280DE9ABB1E2AF3C971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 1228
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: oyVJkpV07pO13dTsWtB+wPfH1y6YlJRxsGOOJkLMEEw=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e0:46:f5:09:d2:80:de:9a:bb:1e:2a:f3:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=ec752630e24d40ca5ee3f1c3b6784f72146f0a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:c3:da:c7:8b:3f:06:99:b2:3e:11:34:96:
6c:55:c0:29:37:50:36:b8:a6:9a:95:18:d6:06:9f:
96:7d:ad:5b:fe:5d:68:99:a0:0f:51:ca:2b:cf:2e:
32:9a:2c:82:3b:98:32:a6:32:4f:a3:2d:32:98:a0:
e8:21:11:e7:b1:25:72:a5:dc:39:b5:fc:0d:f0:04:
1c:84:2a:55:5f:88:ac:b8:0a:be:63:86:ee:a1:f6:
9b:c5:b5:24:d2:ab:67:fe:24:5a:44:4b:08:15:48:
4a:fd:91:2c:74:ad:71:f4:e6:ea:f9:5d:5a:2f:ce:
ac:39:83:b0:89:4c:d5:c5:6e:08:b3:fc:0f:89:f5:
f8:41:0e:a1:84:8b:d5:f0:28:13:68:5c:c1:ff:1c:
56:dc:27:75:73:21:e7:d0:fb:64:65:8f:bf:a0:77:
ef:b0:e4:68:de:a7:74:fd:0d:cc:b0:bd:d0:00:10:
43:a5:eb:04:d1:0e:c7:f3:3b:e7:b5:fa:42:e7:7d:
cf:c4:46:36:55:e5:35:2f:b4:17:c5:82:5b:66:22:
9c:0b:6d:1e:22:e5:b4:84:67:7c:12:66:b8:0e:fd:
57:3b:a7:c7:64:8a:f7:3c:e5:a8:f4:ee:22:28:0a:
9a:f0:b4:d7:ee:15:72:33:df:d6:13:a2:29:a9:74:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:26:30:E2:4D:40:CA:5E:E3:F1:C3:B6:78:4F:72:14:6F:0A:99
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1e:ad:27:5b:ec:92:8a:d8:f1:2d:70:92:76:64:05:7f:9e:
5a:c6:98:b9:de:67:a1:b5:fb:a1:d8:bb:b9:d6:4e:ba:a0:a9:
fb:0c:44:44:a3:20:59:0b:32:9b:41:7f:60:16:8c:09:52:30:
0a:94:18:0d:af:48:a6:77:3f:05:0a:30:58:bd:a2:00:b2:1a:
57:b9:5d:23:1f:5a:18:10:9f:e8:e4:99:4b:38:62:31:a8:5c:
a9:f7:5d:7c:02:8f:54:b8:eb:57:fb:a4:9a:ac:72:bc:78:a5:
19:5a:e2:37:eb:bc:ed:1f:8b:24:f4:ff:f3:17:4a:ff:65:aa:
9f:24:04:88:01:44:37:fb:33:97:e8:31:26:98:87:3b:1b:11:
3b:5a:cc:6e:31:5f:de:e9:61:f2:e3:6a:4b:ed:0c:3f:5d:16:
43:ae:86:6c:8e:8d:ea:09:ab:0e:d7:12:83:02:a3:70:34:2d:
69:c2:2c:a9:48:3f:2c:65:16:e8:19:ab:2d:e1:6e:8c:64:15:
54:2d:68:cd:f1:07:15:89:04:8a:f9:ec:a3:83:9f:20:80:6e:
a4:b7:14:69:46:2a:64:bd:58:2d:f7:64:03:f7:6b:b3:f3:c8:
4a:3d:ef:1f:7b:30:c9:e2:e2:9e:16:45:63:bf:7e:a3:7a:b5:
1e:ec:39:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx+BG9QnSgN6aux4q88lxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1
MTQ1MGQwHhcNMjYwNzIzMjEwMDQ1WhcNMjYwNzI0MjEwMDQ1WjAzMTEwLwYDVQQD
EyhlYzc1MjYzMGUyNGQ0MGNhNWVlM2YxYzNiNjc4NGY3MjE0NmYwYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9/D2seLPwaZsj4RNJZsVcApN1A2
uKaalRjWBp+Wfa1b/l1omaAPUcorzy4ymiyCO5gypjJPoy0ymKDoIRHnsSVypdw5
tfwN8AQchCpVX4isuAq+Y4buofabxbUk0qtn/iRaREsIFUhK/ZEsdK1x9Obq+V1a
L86sOYOwiUzVxW4Is/wPifX4QQ6hhIvV8CgTaFzB/xxW3Cd1cyHn0PtkZY+/oHfv
sORo3qd0/Q3MsL3QABBDpesE0Q7H8zvntfpC533PxEY2VeU1L7QXxYJbZiKcC20e
IuW0hGd8Ema4Dv1XO6fHZIr3POWo9O4iKAqa8LTX7hVyM9/WE6IpqXTS/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx1JjDiTUDKXuPxw7Z4T3IUbwqZMB8GA1UdIwQY
MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt
NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx
LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB6tJ1vs
korY8S1wknZkBX+eWsaYud5nobX7odi7udZOuqCp+wxERKMgWQsym0F/YBaMCVIw
CpQYDa9Ipnc/BQowWL2iALIaV7ldIx9aGBCf6OSZSzhiMahcqfddfAKPVLjrV/uk
mqxyvHilGVriN+u87R+LJPT/8xdK/2WqnyQEiAFEN/szl+gxJpiHOxsRO1rMbjFf
3ulh8uNqS+0MP10WQ66GbI6N6gmrDtcSgwKjcDQtacIsqUg/LGUW6BmrLeFujGQV
VC1ozfEHFYkEivnso4OfIIBupLcUaUYqZL1YLfdkA/drs/PISj3vH3swyeLinhZF
Y79+o3q1Huw5ag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:13 2026 by rpki-client