Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: NlRX7Q95mf3BbC9EHhicDJPN7lllYtBa+AWcn3LDaIg=
Subject key identifier: 63:1E:BC:F8:04:4B:CB:28:2A:20:AC:DD:EB:48:48:7D:3E:32:13:89
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 01A0DB043731F3FFB4834DEEC29E3807333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 08CA
Signing time: Sat 26 Sep 2026 00:01:21 +0000
Manifest this update: Sat 26 Sep 2026 00:01:21 +0000
Manifest next update: Sun 27 Sep 2026 00:01:21 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: eAxT9NbzDPUsWmzyre4Rk67cHPBPIoEZkoKuDHIg0LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:37:31:f3:ff:b4:83:4d:ee:c2:9e:38:07:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Sep 26 00:01:21 2026 GMT
Not After : Sep 27 00:01:21 2026 GMT
Subject: CN=631ebcf8044bcb282a20acddeb48487d3e321389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:1c:5c:31:45:91:3f:02:1b:ea:7b:a3:62:
a9:03:6e:53:71:e9:b2:14:c8:6a:42:38:68:1f:d6:
0b:3f:43:ba:69:80:bf:47:4a:8d:8b:e3:79:7a:34:
1a:5d:b8:a0:03:66:b5:0d:db:76:42:e0:6d:4d:ba:
b8:2d:11:34:f3:a7:09:e2:40:21:4a:aa:3d:7c:33:
b5:1c:36:2a:62:60:8f:55:0d:c7:48:28:4d:38:4c:
75:cc:80:b7:b1:66:a0:0e:94:5e:d1:12:e8:d0:3a:
11:ce:1d:da:2c:4c:21:81:43:e2:af:7f:12:e5:64:
98:fb:d5:3a:e8:ea:7a:13:41:d5:3c:ca:c1:4f:64:
02:94:f0:a1:d3:4a:99:cb:87:02:b6:53:45:c8:ca:
c3:8c:4e:2c:5c:d6:c4:f7:c9:54:e0:41:62:57:fd:
10:d0:3d:0a:13:d1:db:f7:0b:7a:8a:14:e2:d8:ae:
3f:93:d4:73:6c:5a:1f:54:42:2b:d7:30:29:bb:00:
44:b8:de:9a:10:62:a0:f4:8d:1b:89:1e:81:18:18:
22:e6:3b:b1:b3:dc:cb:b8:31:03:a1:13:eb:99:9a:
a3:61:f0:89:fd:84:89:52:35:61:95:3c:4c:ed:e5:
c5:d1:03:18:1b:56:b4:e7:b6:cf:fb:41:d5:1f:ed:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1E:BC:F8:04:4B:CB:28:2A:20:AC:DD:EB:48:48:7D:3E:32:13:89
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:67:f1:5b:84:e4:9b:5f:a5:be:83:37:4e:13:e5:61:c3:2b:
e4:61:c8:d1:8f:3e:19:4a:6a:22:e2:5b:79:1e:14:fe:69:df:
d6:32:0a:50:1e:4f:72:fe:3f:57:4b:2a:a9:95:64:d4:49:01:
4a:5d:7c:32:e1:fa:ab:7e:d6:f5:70:71:7a:dd:f2:05:c7:4f:
9b:0f:8e:5f:63:b3:e2:45:6e:3c:b7:15:f7:d9:68:13:e8:57:
88:0f:96:61:bc:d4:37:16:49:19:2d:65:c2:2f:a4:db:ba:b7:
78:6a:b7:ea:98:00:7d:1e:e9:fe:25:78:fd:90:57:b8:1e:fd:
55:70:fc:01:53:79:02:8f:95:da:b9:15:24:21:17:56:aa:bc:
cc:dc:f7:10:45:e9:90:6a:d5:98:56:bc:aa:6e:f4:15:51:a5:
5e:00:32:6d:ef:d3:04:48:55:aa:f3:bc:41:01:a8:9c:be:f9:
27:cb:5f:15:9c:e3:11:df:d7:3a:a1:19:c4:eb:15:f5:7d:64:
cc:7a:58:ce:f5:7c:8b:ed:ea:a7:93:28:9d:10:6c:c9:67:bb:
35:b4:1f:10:10:41:36:2e:21:67:e6:fb:4e:40:ae:bb:45:64:
f8:cc:ec:15:77:dc:1b:db:6e:c8:7e:db:40:9e:19:c5:9f:cf:
51:0d:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:52:37 2026 by rpki-client