Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: e2ijZwJYELE/jAqt0HA87O0RHglpo0Yqll9BcCJF9tI=
Subject key identifier: B6:61:7D:2E:1E:F2:C6:5C:97:29:92:51:0C:30:DA:8A:DC:82:04:54
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019E1C7D5BEFEDE4A0066CDA615D938AD20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 0631
Signing time: Tue 12 May 2026 14:00:37 +0000
Manifest this update: Tue 12 May 2026 14:00:37 +0000
Manifest next update: Wed 13 May 2026 14:00:37 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: KKCU+g6vdh5KjCDRd4ZCN5ImW7ZQ7XMcJHf6XgnBFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:5b:ef:ed:e4:a0:06:6c:da:61:5d:93:8a:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: May 12 14:00:37 2026 GMT
Not After : May 13 14:00:37 2026 GMT
Subject: CN=b6617d2e1ef2c65c972992510c30da8adc820454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:7a:d6:b2:e3:ef:ab:4b:94:b3:71:84:e4:
22:18:84:7a:ed:3c:79:ce:98:a1:fe:4c:c3:ae:ba:
80:75:6b:92:e4:fa:be:03:6c:a6:b2:68:0d:4d:bc:
b4:0b:a2:f4:4c:d1:70:59:ec:89:9f:37:e7:ae:f9:
99:07:c8:b0:e5:ae:60:1d:5b:a8:0b:d6:89:5c:f7:
79:35:fd:b6:e0:ab:2a:fb:1c:53:c5:92:b7:cb:05:
14:75:b7:f2:9d:8d:e8:cb:92:06:6b:e9:d0:14:72:
cc:66:5d:ea:f7:de:04:2c:e1:5e:d9:c7:82:61:c6:
ca:65:2a:61:26:21:18:07:b4:d8:03:f7:29:b8:97:
fe:17:40:9c:a0:70:da:63:1b:1c:2f:33:72:d0:e3:
9c:85:89:83:f5:bc:6a:c8:4b:71:85:ef:96:8d:c2:
4f:70:26:e4:af:8f:f9:26:25:ee:18:62:02:cd:9c:
65:59:0e:61:f8:db:35:a5:03:55:ed:8a:9d:97:48:
09:d2:ec:fd:e7:a1:87:9b:97:b7:98:0b:74:26:87:
8f:2a:84:0d:d0:b8:5b:f8:4d:e8:0f:76:94:c8:35:
e3:14:b4:17:3a:09:6a:de:5f:61:27:0a:c9:11:ef:
3e:0d:0c:a1:23:1c:ae:7a:a8:d9:0d:dd:c6:13:63:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:7D:2E:1E:F2:C6:5C:97:29:92:51:0C:30:DA:8A:DC:82:04:54
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:db:14:67:51:1e:6f:84:5f:22:97:9a:76:8d:4b:56:a4:62:
fb:bd:d8:6d:32:49:31:fa:44:05:83:c5:6a:6f:83:64:a4:a9:
65:6d:71:a6:c1:d4:5a:77:bd:71:71:db:04:49:4e:7f:b5:7f:
1f:2f:0a:5f:8e:23:8d:f9:30:73:ac:20:79:01:54:65:1d:4f:
26:fd:a3:f8:da:be:39:54:9a:7d:8e:31:aa:0a:c6:51:f3:f0:
c1:33:8f:4c:2a:82:cb:46:7e:5e:94:b7:78:7a:95:08:20:4f:
1f:31:7e:87:14:47:eb:e9:4c:ba:ea:8f:62:99:49:7b:59:38:
df:e8:57:24:90:92:28:3f:0d:9c:62:cb:5b:16:2d:a4:10:92:
03:aa:37:78:ff:e5:bc:ff:99:64:ef:0a:de:66:45:db:b4:7d:
b6:51:0a:e1:e9:36:54:f2:c4:b6:20:1c:18:b8:24:13:a2:d3:
23:86:36:6a:c5:c1:c4:32:6f:0d:1f:ae:e1:38:b3:40:73:3e:
c0:dd:7b:8e:03:81:6f:cf:4e:00:e8:b4:aa:1b:d4:ce:75:5a:
d1:b5:b8:28:30:59:e8:22:b7:e5:63:b0:1c:60:1d:a4:ba:3b:
c9:c5:e7:1a:8c:bf:7e:84:db:45:ab:c1:e8:64:ca:cd:79:7c:
fa:c9:b5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:26 2026 by rpki-client