Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: iydVBK7kmYW9yrUZArVRSUkex4SwuHtOvOVFLi8bQaQ=
Subject key identifier: 28:08:13:1C:F7:85:F5:54:6E:C0:E2:43:A0:69:68:20:AA:4E:4A:40
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019D254C8C2BC1C1AD2193DC90F4F1B77F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 05B1
Signing time: Wed 25 Mar 2026 14:01:06 +0000
Manifest this update: Wed 25 Mar 2026 14:01:06 +0000
Manifest next update: Thu 26 Mar 2026 14:01:06 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: DcqYEfB2AG7L1p7fw18CGuoj68qzQ5FQkjuEryTDVco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:8c:2b:c1:c1:ad:21:93:dc:90:f4:f1:b7:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Mar 25 14:01:06 2026 GMT
Not After : Mar 26 14:01:06 2026 GMT
Subject: CN=2808131cf785f5546ec0e243a0696820aa4e4a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:28:ec:9f:79:50:9e:d5:81:f6:3f:cd:30:
80:ab:a6:ed:73:0d:b1:29:87:14:d1:2b:29:99:48:
55:32:d1:92:fe:ca:e9:b9:bc:e6:e5:89:3f:a4:e8:
a9:68:d1:95:5f:20:e8:88:b2:03:bd:2b:0e:f7:ae:
c0:52:0b:c2:44:9b:b0:6b:38:2c:aa:56:db:aa:e3:
3a:3a:27:a6:22:8d:7b:a7:a4:e7:a5:f9:5f:63:f2:
ee:d5:ec:3d:ff:ac:92:10:10:b8:07:db:37:52:b6:
cf:50:0e:df:fd:94:73:94:a5:10:fb:64:ca:41:f4:
c8:62:4f:73:3a:73:bc:dc:ee:1a:a7:16:ce:57:7c:
2e:bf:9e:8b:19:d1:25:a0:15:46:37:db:f2:d0:32:
6f:d7:db:1a:6f:3a:2f:79:7d:95:36:5f:1f:6e:c7:
66:58:42:40:2f:66:57:86:ba:57:de:e4:ff:85:d9:
0b:69:8b:54:b5:13:44:d4:e9:1e:10:2b:85:b7:e0:
85:c0:1d:f7:99:1e:9c:e9:ed:ff:e8:46:a4:35:fe:
12:1d:be:47:4d:b4:fd:64:b4:07:01:b4:95:80:5e:
60:51:30:05:c8:c3:19:8a:9a:e4:1a:75:8b:5d:0a:
64:2c:c2:37:5e:b0:47:b7:01:2b:ef:c9:d4:fe:90:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:13:1C:F7:85:F5:54:6E:C0:E2:43:A0:69:68:20:AA:4E:4A:40
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:57:49:47:f4:11:43:dd:50:2e:58:31:20:25:0e:c5:c8:
ee:73:b1:8f:81:fb:6a:a5:10:58:f0:40:6c:c7:16:8f:e5:b9:
56:36:1e:16:46:f8:ba:fc:23:ec:15:86:81:a3:78:73:72:5e:
99:37:dd:3f:b0:d4:1d:a9:bc:e7:6a:a1:2f:82:be:5e:bb:8a:
30:9b:b1:91:02:29:52:27:93:88:5c:3c:f9:b3:e5:c3:ae:e1:
84:db:68:fe:c3:b7:7d:2e:dd:bd:8f:13:db:9c:c6:62:06:8e:
2b:45:3e:e2:d3:f8:66:54:f9:07:58:c5:e4:2d:b8:51:33:2b:
17:64:39:fe:28:7b:f4:4c:03:97:62:67:06:80:13:31:5a:3c:
fd:45:0a:4b:d9:3e:a3:78:81:4f:56:98:15:86:76:30:e4:16:
c9:9b:6d:7f:45:79:e2:65:9e:5c:a7:d3:ce:00:46:d9:51:95:
40:50:e4:96:df:9a:7c:b4:c3:db:67:b2:15:f4:07:00:39:fa:
ef:d4:39:3a:db:30:86:2e:f2:7c:43:b5:d8:5f:12:67:1f:9c:
81:e9:5d:2e:63:45:d9:40:32:f3:b5:52:87:05:af:c3:44:46:
e1:0d:e9:1f:35:4e:94:50:4f:24:e2:c0:86:57:7c:bb:d9:d6:
3b:84:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:08 2026 by rpki-client