
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: SY6RisNfVLf+6Mf/p8LxYHQBUBavHDp8svPDot+CYjE=
Subject key identifier: 73:93:45:B0:AD:A6:E7:1E:85:4A:44:7C:F3:0E:53:21:ED:D4:7F:D3
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 01A0CA0F9E5A3A4BF8C333A4EA68C70B7938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 0794
Signing time: Tue 22 Sep 2026 17:00:16 +0000
Manifest this update: Tue 22 Sep 2026 17:00:16 +0000
Manifest next update: Wed 23 Sep 2026 17:00:16 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: DM7pXFYcYVTamt1fAcFcUelq1oiBhONe9agYQ12ilM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:9e:5a:3a:4b:f8:c3:33:a4:ea:68:c7:0b:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Sep 22 17:00:16 2026 GMT
Not After : Sep 23 17:00:16 2026 GMT
Subject: CN=739345b0ada6e71e854a447cf30e5321edd47fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:92:cd:05:96:df:75:f8:13:8d:2e:5c:f4:
6c:bb:83:a1:01:94:6b:00:22:a3:87:20:5b:46:20:
a0:1d:42:2c:f0:b7:fa:54:88:bb:bb:4d:2c:26:07:
cc:2c:a4:43:47:8f:2e:25:37:f3:70:37:21:3a:db:
ff:35:f4:ec:98:eb:38:7e:fd:f3:3f:23:0f:8a:3b:
ba:a2:f3:eb:95:f0:41:72:ac:d8:f6:4e:be:ef:53:
2e:63:fe:c0:51:0a:b1:71:5d:ce:c1:46:a3:5f:6e:
96:49:65:4a:2a:67:58:16:d6:bc:2f:e2:29:48:58:
c2:ca:5d:c4:e2:15:ee:4d:9d:0e:db:bf:be:77:4f:
db:bf:96:c8:72:75:3e:f8:50:64:1c:27:56:2b:c0:
f9:66:51:3c:94:d8:b7:68:45:0b:ae:ef:00:f2:2d:
bf:b3:8e:12:ef:1e:70:ec:1f:9f:c3:e3:78:5c:63:
1c:d8:34:ed:21:2f:37:5f:dc:a9:f8:65:c1:d5:cf:
20:23:19:d7:9f:59:d0:1f:71:b5:65:09:18:79:b6:
05:13:79:ca:06:51:ae:61:38:a8:92:d7:3a:96:4c:
7a:ef:ff:b9:98:d1:3c:32:d4:96:29:9c:72:18:a1:
a1:a6:95:07:5e:f6:fa:d6:18:ec:df:14:95:de:6f:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:93:45:B0:AD:A6:E7:1E:85:4A:44:7C:F3:0E:53:21:ED:D4:7F:D3
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:65:da:8e:63:2e:d8:d5:20:61:34:81:f8:58:3b:aa:71:a5:
e5:f0:ff:16:46:08:ee:40:33:ec:71:6c:08:a0:54:46:d5:ba:
c1:50:d4:e5:f1:8e:7c:d4:25:0d:e6:1b:88:11:54:18:75:c1:
84:1d:28:88:11:60:03:7e:d5:a6:2d:a4:1e:02:76:2f:d1:c7:
40:85:93:05:17:a5:6a:d5:63:30:54:d7:6d:b1:54:b8:80:9b:
5b:e7:4d:50:61:22:60:36:29:39:da:19:d4:66:ea:61:97:e3:
60:6f:12:3f:9e:f4:c4:da:67:db:f0:8e:84:88:ea:a0:ed:77:
7c:69:c8:b7:d2:27:bd:91:68:23:8e:d8:a9:85:91:e0:e0:73:
51:4d:e3:e9:a1:e7:1e:e1:3d:b3:77:4c:9f:75:44:ff:90:60:
ed:b2:71:c8:08:e8:50:c7:91:81:6c:b8:d1:78:a1:7a:17:17:
b6:92:c5:98:de:90:62:94:e3:d7:33:c7:02:7a:d7:ec:10:8d:
75:88:1a:00:73:cb:62:e9:3b:bf:f0:ad:f1:f6:29:22:4b:f6:
35:cd:b1:07:cc:ca:04:a8:82:e7:04:09:2e:05:82:79:e9:05:
c7:c0:35:d8:99:47:e6:a8:85:d3:00:1d:01:1b:8e:76:ee:3f:
68:cf:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:13 2026 by rpki-client