Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: +RKdfsto+l1jiT3I8AHB6r53auUBALmgun8qloOXxX0=
Subject key identifier: 87:73:33:F0:79:25:1D:BB:BA:9D:65:9E:66:CE:4B:B3:05:A5:17:3F
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019CAD228298AEB0FD536BBB668AAB8A5A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 06A0
Signing time: Mon 02 Mar 2026 06:00:45 +0000
Manifest this update: Mon 02 Mar 2026 06:00:45 +0000
Manifest next update: Tue 03 Mar 2026 06:00:45 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: E6ba0Sj1mgOx8u15AvD1h5U/QewkGT1mKPvcViTve6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:82:98:ae:b0:fd:53:6b:bb:66:8a:ab:8a:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Mar 2 06:00:45 2026 GMT
Not After : Mar 3 06:00:45 2026 GMT
Subject: CN=877333f079251dbbba9d659e66ce4bb305a5173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:0e:0e:0a:0d:dc:e5:9f:33:fe:8a:61:10:
ab:a2:a6:14:81:81:95:8d:d3:58:a6:3c:bd:94:1d:
66:28:75:81:32:bf:72:9a:5a:1f:ac:40:c7:23:c5:
fe:d4:57:2e:c9:c5:fc:17:ba:6d:aa:ac:6b:28:59:
49:c3:69:cd:1a:66:e0:3f:1e:5b:7c:64:de:a3:04:
e3:f4:0e:6d:62:58:39:48:89:9e:3c:49:85:07:5f:
75:d1:83:34:e3:70:46:24:4c:fd:d5:4b:cf:8e:aa:
63:bd:be:ba:1f:7c:43:1c:06:d4:8c:27:51:ff:ca:
b8:e9:44:e3:5d:c1:08:af:0d:69:ad:24:60:af:6e:
59:bf:6a:18:77:4b:47:18:d2:95:05:2a:3c:f2:cc:
43:da:64:5e:44:27:92:be:f5:9b:ad:f3:b7:b1:57:
bb:31:87:6e:7e:25:50:af:63:99:1c:a2:5e:b6:25:
58:86:7b:b6:1d:73:9d:41:40:3e:46:53:93:c4:e4:
f8:81:e6:bd:3f:dd:f8:e9:bc:23:9f:c4:52:90:50:
2b:8b:31:02:82:15:c0:6c:46:62:ee:76:0d:dd:2e:
43:ca:ef:03:eb:22:6e:ed:8b:f6:04:38:ae:ce:7b:
48:24:7a:48:87:ac:24:85:84:b5:ad:ad:9d:3d:36:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:33:F0:79:25:1D:BB:BA:9D:65:9E:66:CE:4B:B3:05:A5:17:3F
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:b1:29:a2:33:ac:e7:e4:58:c5:4d:88:8b:63:ff:e3:15:
36:93:17:87:44:16:d9:24:b0:9a:3f:7a:f6:22:de:e0:97:59:
5f:56:d8:a6:c4:3e:8d:26:fc:9f:f2:52:0d:99:e8:61:03:de:
29:c1:8c:58:69:2f:ab:4c:85:95:dd:14:f1:7c:67:e5:28:c0:
47:b9:47:e8:15:c9:78:87:ba:d5:72:34:82:7c:77:fe:8f:af:
e8:69:f6:5a:71:98:b7:ef:f3:3e:68:9b:58:da:41:e0:c7:6e:
92:52:22:bb:c4:ec:97:8d:91:34:61:d5:8e:e9:5d:d1:c6:c0:
e4:a2:59:e2:28:0b:89:b2:8c:a1:e0:1c:99:e9:29:47:eb:e6:
04:5d:3e:14:7d:b9:f1:a4:13:e7:21:bb:00:43:8e:1c:d5:5a:
a0:db:e8:75:8e:1b:9c:84:98:9a:8c:3f:d3:d8:04:d9:f4:ca:
e3:3b:2e:05:44:04:1a:cc:d7:46:a3:e3:e0:e8:1a:8d:c2:df:
b3:36:20:0c:c6:81:ee:c2:6b:67:91:a1:72:c5:a6:c9:2b:08:
5c:f6:67:00:1c:47:c1:41:41:ba:bf:da:c1:f9:2b:d6:13:32:
40:fd:24:f0:19:37:51:59:a1:ff:61:8d:82:63:52:16:68:df:
4a:70:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:39 2026 by rpki-client