Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: BA1WwCAI9WXeD3eDK6p9dADUyUoWyksQckfsM+tqCbU=
Subject key identifier: BD:95:A5:D3:D4:EC:05:E3:8B:A4:5C:F5:21:92:91:C9:62:05:1A:56
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019D9AABCE3A1094086ACF43555BA40094AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 071B
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: NymTATwcpQ0AVFrw7T/8Pd+USXFDsw+P62ksCm9pNaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ce:3a:10:94:08:6a:cf:43:55:5b:a4:00:94:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=bd95a5d3d4ec05e38ba45cf5219291c962051a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:51:a7:65:4e:b1:2b:c0:fe:c9:8a:30:53:
97:66:03:2a:93:12:aa:aa:d7:6b:13:94:aa:3b:ae:
e3:6d:fb:e4:9d:7e:19:98:dc:71:f8:96:0a:e8:83:
f3:2f:5f:a9:b3:99:5f:f6:66:11:13:99:56:5f:9c:
46:5c:d8:a6:94:80:08:c0:e3:1a:6a:3d:4a:06:2f:
24:03:a9:c8:d8:89:43:ab:50:9e:58:52:e8:33:b7:
39:ef:be:fb:4c:ee:8d:3c:9b:af:8e:1c:af:53:32:
24:2f:f7:b8:47:f6:47:1f:bd:10:60:c4:5f:7c:28:
8f:a1:cb:48:26:53:99:10:9f:c6:54:af:6b:0a:6f:
8f:9d:a6:52:79:56:43:ef:da:28:9f:ed:90:bc:6c:
e9:f1:51:a0:86:6e:6f:a7:30:08:7a:9b:ca:1c:05:
8f:00:42:60:c6:a4:b6:c9:b1:a0:a8:2d:88:23:4b:
9c:cc:ee:ef:27:ea:a0:8d:71:d0:74:9b:a2:a7:16:
85:58:5a:68:d6:c3:82:6b:ab:d4:4d:6e:69:30:4f:
49:75:54:4d:cb:2c:ad:18:ef:06:f0:3e:55:f9:24:
d2:94:ba:d4:88:0f:c9:92:d2:78:ab:e2:d4:f0:63:
4b:4f:a6:3f:aa:c6:4f:dc:f1:41:35:d7:46:3e:2e:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:95:A5:D3:D4:EC:05:E3:8B:A4:5C:F5:21:92:91:C9:62:05:1A:56
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:15:4f:f4:fa:60:2e:99:00:bf:b4:11:dd:17:7d:91:56:d9:
59:d0:5c:46:90:a1:82:dd:38:1e:e2:98:fe:b6:b2:3f:5d:94:
b9:45:ec:a1:5f:01:d7:be:8e:23:84:67:5a:52:55:2b:c4:9f:
f5:ce:05:50:c0:7b:eb:20:65:c5:38:48:4a:14:6f:64:74:48:
5c:15:2d:88:6c:f2:fa:ac:8e:82:9d:b2:05:5c:75:d4:a0:73:
11:66:d9:af:3a:19:27:ba:03:39:d3:96:26:11:99:21:3d:46:
ef:f8:b7:33:67:74:5c:41:eb:3e:ff:f9:4c:35:80:91:fa:ac:
62:db:0e:e4:d1:f7:45:24:c2:1a:3a:75:95:65:0f:71:83:0b:
65:88:b8:1e:d4:85:d0:29:45:86:ce:f8:06:97:53:8c:9c:20:
97:b4:13:70:5d:c3:db:e5:f6:c6:47:fb:dd:16:b4:c5:db:b9:
a2:1b:7c:f0:44:8f:76:cf:f3:e4:20:42:e5:97:bc:05:b8:55:
cf:b2:8e:3b:24:9d:1d:c6:a6:c9:69:0d:66:29:02:0f:cf:1e:
19:0a:91:2b:78:19:4d:1e:73:01:79:3b:69:f6:22:52:fb:be:
fb:3c:3f:1a:69:f9:8c:9c:71:97:af:0f:56:b5:f8:a1:f4:07:
12:45:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:14 2026 by rpki-client