Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: aZDhgE1OWiGcuCTj3zD7XKtgm7qe2DsNFc9ZKPq896s=
Subject key identifier: 22:17:F6:B9:C2:C5:E6:1B:63:52:3D:D9:12:51:24:03:68:3B:C8:47
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019D26CD00FF400663EEA173FA10BE7CD501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 06DF
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: YagvvAegBN41EH/Vo+HTJOiVIM8Wl9jLI3lUMWnOUCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:00:ff:40:06:63:ee:a1:73:fa:10:be:7c:d5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=2217f6b9c2c5e61b63523dd912512403683bc847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ed:d9:a3:5d:f0:49:04:76:95:5f:c9:00:52:
07:ee:41:ba:e3:3c:e8:84:88:2c:cf:ac:7a:a6:ae:
97:d3:46:01:3b:4e:1b:80:65:44:9f:6a:96:59:8b:
6b:d4:54:76:4c:8e:1b:31:0c:bd:d8:7f:93:6a:2d:
d1:4a:d5:ba:02:94:3d:95:7c:30:51:9b:b2:ae:41:
e0:65:be:64:3f:26:b5:cf:91:87:4f:1d:6f:84:40:
c0:57:1b:25:7f:92:bc:af:63:8c:72:e6:cd:44:29:
b4:72:72:6b:0e:fa:3b:d9:82:4f:85:d2:89:34:5e:
28:cf:89:05:2d:ff:61:27:05:9c:58:5b:d0:dd:ae:
f0:e5:ee:83:33:cb:06:4f:7f:06:5b:f1:4f:96:3e:
89:ad:0c:de:8d:22:f2:6c:95:79:a2:67:78:03:a3:
a4:c9:08:27:50:b9:08:4d:b6:a6:b9:f7:bc:ae:d7:
be:f6:b9:2a:ba:d6:53:94:a2:62:f5:2d:84:95:81:
60:49:d4:a7:3b:46:d9:3b:6d:b8:88:39:d7:4e:89:
4e:9e:67:81:c6:9e:87:c8:da:96:f5:d6:8e:a1:29:
a7:cd:85:f7:95:84:96:82:5a:4a:0b:75:9d:66:3c:
ea:65:9c:fa:c4:61:fd:1b:39:ec:44:68:24:72:34:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:F6:B9:C2:C5:E6:1B:63:52:3D:D9:12:51:24:03:68:3B:C8:47
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:17:1a:ad:28:94:70:f6:f1:02:55:7b:43:54:24:0a:da:68:
c2:c7:07:e3:c2:2a:c9:d9:9e:e9:c4:18:c1:b6:45:fd:1a:3c:
3c:60:e9:c9:80:f0:cf:9b:38:34:fb:ba:ad:25:7e:93:8a:eb:
0b:17:30:40:f7:07:f5:ea:95:0d:66:59:b6:e1:61:12:f5:74:
c0:e3:6f:d7:a3:a9:89:84:4b:0d:07:84:35:34:79:c9:c6:dd:
43:6c:38:a6:a7:d2:71:2b:ff:e6:b6:0e:45:d1:aa:b7:c3:38:
5b:62:ef:26:83:95:7d:be:51:85:ea:ec:9d:84:19:15:8b:2f:
39:3b:ab:61:51:26:a9:15:7c:e9:1f:b9:17:30:5e:00:4e:c7:
01:49:39:ff:0c:97:3b:50:91:9b:4a:07:51:e9:87:6c:61:36:
c5:5c:79:05:50:ac:e3:69:19:81:ac:da:2c:9e:95:a8:c7:db:
5a:0a:b4:44:73:fc:64:05:66:60:2f:ff:6e:39:68:7c:21:83:
7b:24:90:f7:3b:7d:84:8a:be:8f:36:23:46:c4:71:5e:fb:84:
3e:60:6f:6d:88:bc:d8:66:54:08:9b:42:17:d5:3e:29:e5:e3:
85:9d:ad:98:15:09:92:fd:45:91:21:c1:2f:10:f7:bf:6f:69:
c3:92:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:28 2026 by rpki-client