Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: GKxWKfwJA5YTlmM4YGiqdTMm70ivXqSLNnpOqtyB8Ag=
Subject key identifier: 5B:B7:1F:A5:3B:ED:4E:91:8A:44:F7:7A:3B:D7:F5:6F:1B:BE:3C:6B
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019E29949880A6B0BA0C275E7A1CFC047FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 16FB
Signing time: Fri 15 May 2026 03:01:04 +0000
Manifest this update: Fri 15 May 2026 03:01:04 +0000
Manifest next update: Sat 16 May 2026 03:01:04 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: LvcfyasGwwV6IkjM2qFxsYwpojn12bclE1s+nMIWjbI=)
2: DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (hash: sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:98:80:a6:b0:ba:0c:27:5e:7a:1c:fc:04:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: May 15 03:01:04 2026 GMT
Not After : May 16 03:01:04 2026 GMT
Subject: CN=5bb71fa53bed4e918a44f77a3bd7f56f1bbe3c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:a6:b8:e7:1d:7a:ef:bb:79:dd:da:24:77:
38:ba:b9:2c:6f:41:52:3b:c4:d9:d3:54:d0:38:ab:
b2:14:4c:8f:50:57:d8:e4:30:65:b1:e5:63:4a:e4:
25:b8:1c:fa:2e:1c:b7:d6:75:eb:fc:8d:02:42:15:
d4:0c:0a:5d:f5:ac:e9:c1:47:7d:78:e6:f5:b7:2a:
db:58:29:f1:13:e2:75:21:91:d0:b8:4d:85:cf:58:
ed:ea:37:3f:38:db:01:10:82:cf:1a:45:48:f8:57:
fb:85:2f:8b:bf:9f:ea:29:4f:4d:f8:2d:ea:73:28:
89:e4:52:f1:39:b3:ce:61:b1:91:71:38:0f:ef:13:
24:a3:0a:13:e8:05:27:e1:0d:ee:1e:c7:4a:ca:78:
9c:03:38:36:93:ab:7b:a5:e9:12:70:0f:f6:91:47:
73:56:2b:a6:79:1e:38:bf:c4:5a:3a:16:91:dc:0d:
da:80:a2:83:a4:70:4e:df:ab:65:73:50:d1:48:a3:
b4:40:1d:10:7d:f4:dd:71:3e:a1:dd:44:53:dd:2a:
e3:b8:52:b8:d5:df:1e:f4:4f:0f:b3:d8:45:f6:66:
94:bd:65:f6:a4:fd:d0:a8:06:e0:31:32:81:ab:bf:
f0:2b:a6:75:07:49:f5:88:4c:76:54:98:6f:26:b5:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:1F:A5:3B:ED:4E:91:8A:44:F7:7A:3B:D7:F5:6F:1B:BE:3C:6B
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:29:9a:39:72:bb:e9:15:9c:97:b1:33:20:93:be:f7:0d:
ff:9e:ab:f8:7a:cb:26:7d:bf:e6:ea:89:93:2a:69:aa:2a:75:
9f:18:27:44:f3:fa:b0:c7:e6:7f:83:f6:7b:af:76:35:eb:d1:
e8:83:5f:9e:8d:dd:eb:fc:76:58:51:f6:cb:29:89:79:a7:07:
89:08:95:a0:8f:0f:3a:90:cf:4b:cd:a3:4e:55:bd:84:37:c2:
b0:7c:46:53:f9:5f:36:11:66:bc:59:6f:b4:f1:ef:09:86:dc:
cb:0d:77:d3:86:ae:8b:41:7f:f9:3d:47:75:6e:11:be:1f:5d:
2e:7a:8b:7b:99:49:9f:90:ac:6b:5d:77:13:4d:6e:aa:89:df:
3a:06:4e:73:58:7f:32:fd:71:63:d9:96:75:a4:3f:4e:12:4f:
b3:5e:07:a2:5b:3c:3a:01:1a:ab:d4:f3:0f:8f:ba:af:00:3f:
8f:ab:51:55:4b:cb:fe:70:05:69:47:bc:62:64:6e:02:00:a6:
08:15:24:57:a3:8f:fd:b6:71:80:e0:52:65:09:60:7f:bb:67:
bb:31:b9:ce:08:e6:4c:98:ca:25:72:ba:59:ea:be:da:7e:0c:
f8:ef:b0:13:7f:3e:c1:16:6d:01:a8:b8:d6:5e:90:b0:92:f5:
07:93:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:08 2026 by rpki-client