Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: qigF2ym4u3Q5/+OX52uDU/+81+RaeB7orKiXeBXrMU4=
Subject key identifier: 1E:DC:61:73:C8:70:5E:EC:5E:DD:05:68:91:17:C4:B3:61:E4:FB:F3
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 019D284DA593B96923EBB352951AB1E7BEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 0638
Signing time: Thu 26 Mar 2026 04:01:10 +0000
Manifest this update: Thu 26 Mar 2026 04:01:10 +0000
Manifest next update: Fri 27 Mar 2026 04:01:10 +0000
Files and hashes: 1: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: bNn7bOt529Rn+JZg6UOuLNj00HPYhtZaWkzpErfPliQ=)
2: tgLyfLjlcwMzEupMfST57LV3Kh8.roa (hash: 0v0L+j/WsnBYBPti3JFWgZtxat+165mo5Q0XdxS+nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a5:93:b9:69:23:eb:b3:52:95:1a:b1:e7:be:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Mar 26 04:01:10 2026 GMT
Not After : Mar 27 04:01:10 2026 GMT
Subject: CN=1edc6173c8705eec5edd05689117c4b361e4fbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:d9:d3:ff:5a:2e:6e:cb:4a:65:52:09:65:
0f:aa:92:b9:5e:fa:d7:11:6b:55:c2:a5:c3:ec:5b:
c0:b4:d6:51:89:b7:1c:51:cd:19:fc:eb:83:33:de:
f7:e7:d2:62:cc:95:c7:d4:bc:1b:6e:92:3e:3f:25:
aa:61:5e:be:6d:46:ad:a1:b0:14:d7:04:cd:05:c3:
a4:4f:88:ec:86:46:35:a8:50:9a:61:93:cd:75:8f:
e8:0a:f3:70:4a:3b:d9:91:df:a5:75:02:71:c6:9a:
70:3b:52:77:0b:26:06:c6:ba:a2:35:bc:4e:72:3b:
2a:56:45:b3:08:b3:08:8c:e4:aa:1b:b9:6b:7a:56:
3b:c7:d5:86:be:99:1a:81:85:80:15:fc:2a:4d:b5:
aa:fa:dd:42:4a:89:2b:68:1a:2a:96:50:b5:a6:58:
76:10:18:f9:d2:b8:59:c7:50:48:7e:6a:d0:f4:22:
07:20:c4:88:ce:60:6c:e6:1c:19:38:f9:82:00:0e:
24:15:65:cc:56:d4:59:d2:be:f1:b2:07:e0:bd:74:
6e:43:f5:93:4b:50:68:37:38:87:ec:bc:ce:0f:48:
61:c5:4f:2f:4c:0a:87:5a:af:5d:c8:d8:da:ef:eb:
92:07:48:27:17:5e:39:f6:ae:9d:10:0e:f5:f6:1b:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DC:61:73:C8:70:5E:EC:5E:DD:05:68:91:17:C4:B3:61:E4:FB:F3
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:58:0c:50:ca:ef:23:f1:91:08:a8:a4:ee:0a:dd:05:45:
d2:40:2d:9b:d5:d8:7f:82:1f:44:7e:bd:cd:f6:ba:ea:71:96:
c3:16:7d:a2:a1:c9:d2:f0:ca:a1:6e:a1:5f:fe:d7:da:ad:e9:
10:a4:d9:93:20:e8:e9:8e:5e:71:0b:d4:a0:dc:25:8f:ac:b9:
a9:5d:a4:17:91:f0:75:67:30:43:df:a3:c6:97:61:c4:8d:ee:
f8:41:59:56:8e:ae:fc:36:8d:6e:35:f1:03:32:28:a1:12:29:
13:b9:d7:36:7e:6a:11:af:62:d1:be:94:fd:67:7d:ae:36:cb:
a5:3f:5c:7b:b1:4c:86:5f:ef:91:30:a2:8e:87:01:09:46:54:
5a:70:45:12:86:e2:0e:a3:f5:bd:3b:67:d1:f1:c7:39:ba:90:
44:44:17:e5:de:f8:24:fb:6d:a2:10:c8:3a:b4:bf:c3:22:33:
db:b7:cb:e3:0f:4a:5c:05:78:cd:75:cc:3a:29:4d:2e:cd:97:
2b:53:85:08:8b:f7:3d:29:62:b3:02:17:a1:68:50:8c:f2:40:
28:9a:2a:28:84:b6:65:90:87:4b:8a:c2:f1:b7:63:7c:fa:11:
32:51:0b:b2:70:7f:e0:8c:ec:31:1b:c8:5e:84:77:75:62:ac:
c7:58:35:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTaWTuWkj67NSlRqx577DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3
MTA4NWYwHhcNMjYwMzI2MDQwMTEwWhcNMjYwMzI3MDQwMTEwWjAzMTEwLwYDVQQD
EygxZWRjNjE3M2M4NzA1ZWVjNWVkZDA1Njg5MTE3YzRiMzYxZTRmYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75XZ0/9aLm7LSmVSCWUPqpK5XvrX
EWtVwqXD7FvAtNZRibccUc0Z/OuDM97359JizJXH1LwbbpI+PyWqYV6+bUatobAU
1wTNBcOkT4jshkY1qFCaYZPNdY/oCvNwSjvZkd+ldQJxxppwO1J3CyYGxrqiNbxO
cjsqVkWzCLMIjOSqG7lrelY7x9WGvpkagYWAFfwqTbWq+t1CSokraBoqllC1plh2
EBj50rhZx1BIfmrQ9CIHIMSIzmBs5hwZOPmCAA4kFWXMVtRZ0r7xsgfgvXRuQ/WT
S1BoNziH7LzOD0hhxU8vTAqHWq9dyNja7+uSB0gnF1459q6dEA719huQiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7cYXPIcF7sXt0FaJEXxLNh5PvzMB8GA1UdIwQY
MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt
OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0
LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFVYDFDK
7yPxkQiopO4K3QVF0kAtm9XYf4IfRH69zfa66nGWwxZ9oqHJ0vDKoW6hX/7X2q3p
EKTZkyDo6Y5ecQvUoNwlj6y5qV2kF5HwdWcwQ9+jxpdhxI3u+EFZVo6u/DaNbjXx
AzIooRIpE7nXNn5qEa9i0b6U/Wd9rjbLpT9ce7FMhl/vkTCijocBCUZUWnBFEobi
DqP1vTtn0fHHObqQREQX5d74JPttohDIOrS/wyIz27fL4w9KXAV4zXXMOilNLs2X
K1OFCIv3PSliswIXoWhQjPJAKJoqKIS2ZZCHS4rC8bdjfPoRMlELsnB/4IzsMRvI
XoR3dWKsx1g1HQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:40 2026 by rpki-client