Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: YWxJPmlR2A3V4x8LBULsQTGvkbZ9W8RUW82iNxaqxRM=
Subject key identifier: 96:00:20:9F:21:8D:3A:29:2A:5E:DF:AD:D7:5A:4B:BA:2B:9A:F5:53
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019D26CCC010429FD6427C2F02FEB12B96E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 10E8
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: qthq0WGl2Uu1O2x5m/vM++i3PaKqGIhXwTLgMIEMPLQ=)
2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c0:10:42:9f:d6:42:7c:2f:02:fe:b1:2b:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=9600209f218d3a292a5edfadd75a4bba2b9af553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:a1:5d:0e:8b:dd:bb:49:7d:19:9c:c2:c1:
c0:dd:20:ad:e0:66:ff:3e:92:65:6b:91:6a:5f:08:
f4:a3:2a:d1:f2:e7:78:e3:44:d8:a1:11:12:fc:a7:
4a:02:b7:69:26:47:b7:8a:fb:e7:08:7e:6e:fa:df:
25:ff:b1:ce:27:63:49:00:76:dc:f7:d3:04:76:27:
ef:d0:90:0d:4f:02:26:1b:ff:ef:d5:63:11:18:44:
48:51:bf:cd:49:b9:ee:5b:f8:7d:56:b3:92:92:1c:
92:9e:a2:ca:5a:86:ff:92:ee:05:5e:88:71:f0:c3:
2b:46:31:c5:4a:35:f5:17:5e:6c:d1:68:1e:f6:ac:
77:96:cc:6d:94:ff:17:5c:5a:13:1c:33:61:9b:bc:
26:53:f3:e4:dd:1a:8e:15:db:c9:a3:af:73:5f:1e:
63:21:11:4b:e7:17:57:a2:e2:5b:4c:8e:58:e3:30:
08:06:20:14:ac:2b:d8:b8:ea:f4:f9:eb:68:e5:ad:
e2:1c:b1:6f:75:03:78:1c:d5:e9:dd:33:d8:01:57:
e7:20:13:60:af:2a:86:d1:58:81:4d:a0:47:98:56:
14:7e:7b:9b:18:35:b8:52:92:0d:d6:18:16:04:cd:
2d:a8:b8:a4:db:ab:fe:d9:1b:88:f0:46:92:95:74:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:20:9F:21:8D:3A:29:2A:5E:DF:AD:D7:5A:4B:BA:2B:9A:F5:53
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7b:f3:dc:68:b5:df:d6:8a:18:a4:77:d1:f9:9e:29:20:39:
d2:58:81:13:20:ee:07:77:c8:11:b7:63:8f:90:97:2e:23:ca:
8c:18:40:d7:0d:f3:4f:b1:41:b6:66:0a:18:82:a8:aa:c3:20:
f8:31:89:78:35:19:21:f4:06:b0:0d:0e:02:38:9d:c1:11:6e:
cb:57:78:77:c7:17:95:2f:a7:99:d8:54:53:50:b5:a3:b1:ee:
1e:7c:ba:50:bd:56:ff:90:b6:1b:05:8d:d0:12:58:91:50:91:
dc:f9:c5:e7:3d:c2:e6:1c:de:24:1b:17:68:a8:3c:3b:d3:42:
df:50:1f:7d:b5:fa:de:0d:1c:bd:17:27:81:f8:8c:9b:7b:3a:
ca:2e:78:62:75:f8:d8:92:8f:91:bc:62:95:8e:7e:3f:29:56:
36:8f:51:d2:9f:b7:83:f1:45:69:5b:44:55:06:4c:65:61:3f:
2a:9d:bf:6a:f8:b8:b4:d1:0b:a9:b0:c6:17:ad:d6:94:ad:fe:
af:61:71:eb:bf:83:2d:c6:e6:c6:6f:d0:53:63:8a:5c:91:a1:
e5:10:f5:bf:a4:da:c5:3d:4b:21:7a:34:ca:78:e6:ea:cf:41:
cc:11:90:43:14:ab:53:a4:51:fb:2f:b9:4c:6a:09:a9:c5:18:
ee:de:de:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMAQQp/WQnwvAv6xK5bkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1
MTQ1MGQwHhcNMjYwMzI1MjEwMDQ1WhcNMjYwMzI2MjEwMDQ1WjAzMTEwLwYDVQQD
Eyg5NjAwMjA5ZjIxOGQzYTI5MmE1ZWRmYWRkNzVhNGJiYTJiOWFmNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ehXQ6L3btJfRmcwsHA3SCt4Gb/
PpJla5FqXwj0oyrR8ud440TYoRES/KdKArdpJke3ivvnCH5u+t8l/7HOJ2NJAHbc
99MEdifv0JANTwImG//v1WMRGERIUb/NSbnuW/h9VrOSkhySnqLKWob/ku4FXohx
8MMrRjHFSjX1F15s0Wge9qx3lsxtlP8XXFoTHDNhm7wmU/Pk3RqOFdvJo69zXx5j
IRFL5xdXouJbTI5Y4zAIBiAUrCvYuOr0+eto5a3iHLFvdQN4HNXp3TPYAVfnIBNg
ryqG0ViBTaBHmFYUfnubGDW4UpIN1hgWBM0tqLik26v+2RuI8EaSlXSyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYAIJ8hjTopKl7frddaS7ormvVTMB8GA1UdIwQY
MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt
NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx
LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3vz3Gi1
39aKGKR30fmeKSA50liBEyDuB3fIEbdjj5CXLiPKjBhA1w3zT7FBtmYKGIKoqsMg
+DGJeDUZIfQGsA0OAjidwRFuy1d4d8cXlS+nmdhUU1C1o7HuHny6UL1W/5C2GwWN
0BJYkVCR3PnF5z3C5hzeJBsXaKg8O9NC31AffbX63g0cvRcngfiMm3s6yi54YnX4
2JKPkbxilY5+PylWNo9R0p+3g/FFaVtEVQZMZWE/Kp2/avi4tNELqbDGF63WlK3+
r2Fx67+DLcbmxm/QU2OKXJGh5RD1v6TaxT1LIXo0ynjm6s9BzBGQQxSrU6RR+y+5
TGoJqcUY7t7ecg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:43 2026 by rpki-client