Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: c5VURWH0QsAN+mOZGvvoX/ltIfkHZXusuEbQr7D0Vx0=
Subject key identifier: D7:AB:01:64:76:08:DC:CB:EC:8B:11:32:35:D9:13:DE:A0:87:82:21
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 01A0C9A24B79156BDD42D929E8AE9E28661C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 08C1
Signing time: Tue 22 Sep 2026 15:00:51 +0000
Manifest this update: Tue 22 Sep 2026 15:00:51 +0000
Manifest next update: Wed 23 Sep 2026 15:00:51 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: HLqPsusPXv2+dR4OjRt4uvSz4c1ijfsWIwZfeXZGeVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:4b:79:15:6b:dd:42:d9:29:e8:ae:9e:28:66:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Sep 22 15:00:51 2026 GMT
Not After : Sep 23 15:00:51 2026 GMT
Subject: CN=d7ab01647608dccbec8b113235d913dea0878221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:d4:2b:b6:9a:91:32:28:9a:98:2b:4c:f0:
8c:e6:71:38:a6:9e:42:fc:26:e4:bf:e6:72:e5:16:
6b:ab:f6:a3:c0:71:a8:a7:3a:a2:a4:54:e6:e7:e3:
1a:60:ff:26:9a:92:f7:89:e7:49:2b:a8:92:6d:a6:
b6:08:86:40:26:e0:77:2e:9d:33:12:8b:20:7a:af:
34:a4:d5:45:72:38:59:95:b1:51:3f:46:bf:df:23:
cc:92:d6:de:43:e7:0a:02:b9:df:eb:d2:57:04:2d:
a0:f9:e1:25:48:ba:bd:44:62:6f:0b:26:fd:62:3c:
16:59:1c:06:dc:1a:47:21:5a:8e:59:a3:c1:c9:4d:
f3:65:10:c0:a1:4b:12:11:7b:dd:f7:d4:2c:39:b6:
d7:37:b7:93:74:f2:94:9f:eb:e1:7e:d4:e0:3d:51:
19:1d:77:4b:eb:99:5f:f7:7a:f2:76:f8:7b:18:0c:
d1:57:c6:2a:17:88:fd:bc:d4:c9:66:28:e5:af:d9:
0f:8e:15:78:1a:87:e1:ba:5c:e8:24:4b:55:0b:52:
dc:00:cb:ef:65:27:9c:20:e1:98:15:ca:ce:db:05:
30:55:1d:a1:55:9e:08:4e:e0:ed:c3:e6:45:f7:65:
19:6e:e8:5b:87:65:81:69:af:e3:54:6f:64:84:09:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:01:64:76:08:DC:CB:EC:8B:11:32:35:D9:13:DE:A0:87:82:21
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:61:4d:50:b6:17:0c:c0:a4:89:0f:2d:d8:05:f5:e7:03:4e:
24:b1:ff:16:eb:82:a3:66:56:89:95:b0:00:4b:3a:c0:e2:b8:
ae:aa:2a:21:e5:d1:8c:ee:5c:4a:b7:98:5e:22:6d:eb:2d:a5:
5a:ac:a0:54:0c:34:a6:a8:c1:85:19:cf:7f:52:22:07:e8:cc:
da:69:65:57:9c:7d:d6:73:56:1d:ad:ce:b5:d7:c2:d7:d8:6d:
09:39:15:c4:3b:05:52:04:e2:67:a3:13:66:da:2d:9f:8b:ab:
44:8e:37:04:1d:d0:fc:03:87:06:ea:68:d1:1b:ff:c6:c4:aa:
58:89:82:11:c8:f7:7a:01:63:78:e5:e2:69:ec:1e:76:7a:29:
7a:ae:dd:f4:20:15:5a:c9:bc:b8:c8:55:35:4c:e5:2a:7b:25:
3a:1d:f8:7f:1a:25:7b:fe:1a:e2:62:7e:df:e0:b3:e4:45:a9:
b1:79:06:c8:20:a6:12:79:69:43:93:2b:f4:47:64:6b:ee:9f:
6e:dc:bf:49:4e:98:5a:e1:d9:39:0c:95:6c:dc:33:2c:9e:54:
4d:45:33:e5:5b:12:f4:dc:c2:f6:5c:48:14:6a:a2:43:f6:9b:
a3:9e:f5:d9:cb:4d:ff:cf:76:a5:e2:ca:73:76:1b:cd:91:4e:
69:28:9f:ca
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDJokt5FWvdQtkp6K6eKGYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjYwOTIyMTUwMDUxWhcNMjYwOTIzMTUwMDUxWjAzMTEwLwYDVQQD
EyhkN2FiMDE2NDc2MDhkY2NiZWM4YjExMzIzNWQ5MTNkZWEwODc4MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAXUK7aakTIompgrTPCM5nE4pp5C
/Cbkv+Zy5RZrq/ajwHGopzqipFTm5+MaYP8mmpL3iedJK6iSbaa2CIZAJuB3Lp0z
Eosgeq80pNVFcjhZlbFRP0a/3yPMktbeQ+cKArnf69JXBC2g+eElSLq9RGJvCyb9
YjwWWRwG3BpHIVqOWaPByU3zZRDAoUsSEXvd99QsObbXN7eTdPKUn+vhftTgPVEZ
HXdL65lf93rydvh7GAzRV8YqF4j9vNTJZijlr9kPjhV4GofhulzoJEtVC1LcAMvv
ZSecIOGYFcrO2wUwVR2hVZ4ITuDtw+ZF92UZbuhbh2WBaa/jVG9khAnitQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNerAWR2CNzL7IsRMjXZE96gh4IhMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWFN
ULYXDMCkiQ8t2AX15wNOJLH/FuuCo2ZWiZWwAEs6wOK4rqoqIeXRjO5cSreYXiJt
6y2lWqygVAw0pqjBhRnPf1IiB+jM2mllV5x91nNWHa3OtdfC19htCTkVxDsFUgTi
Z6MTZtotn4urRI43BB3Q/AOHBupo0Rv/xsSqWImCEcj3egFjeOXiaewednopeq7d
9CAVWsm8uMhVNUzlKnslOh34fxole/4a4mJ+3+Cz5EWpsXkGyCCmEnlpQ5Mr9Edk
a+6fbty/SU6YWuHZOQyVbNwzLJ5UTUUz5VsS9NzC9lxIFGqiQ/abo5712ctN/892
peLKc3YbzZFOaSifyg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:29:03 2026 by rpki-client