Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: VoJmYOa3Ria8VEba0SR0hIfOYl7Ye9CWPsrvvqfKwXk=
Subject key identifier: 59:2D:90:F1:54:B0:16:AD:E1:F9:17:6E:5B:7C:EB:0E:86:14:4C:02
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019FA86283E305466AD544B6297CCCDEBD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 06FE
Signing time: Tue 28 Jul 2026 11:00:56 +0000
Manifest this update: Tue 28 Jul 2026 11:00:56 +0000
Manifest next update: Wed 29 Jul 2026 11:00:56 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: j11OwkJYa30g1RWdrXjJK/RP0iCHSygEXpS8LJ2QZbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:83:e3:05:46:6a:d5:44:b6:29:7c:cc:de:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Jul 28 11:00:56 2026 GMT
Not After : Jul 29 11:00:56 2026 GMT
Subject: CN=592d90f154b016ade1f9176e5b7ceb0e86144c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:ba:ac:9c:9d:69:f8:b2:09:fd:7c:2f:a4:
01:a7:9b:15:92:95:42:c3:6b:97:f3:c5:5f:d6:c1:
1c:4c:5c:ac:a8:4c:dc:d0:57:0c:00:d4:d7:b3:e7:
15:03:ab:da:de:73:d9:33:12:90:f5:66:ab:ae:a1:
a8:fa:0f:6d:75:59:a3:de:5b:fc:81:81:c6:97:78:
b9:a7:c7:38:ca:cf:24:00:be:ff:c9:28:ae:5b:ee:
4b:6a:83:9a:b8:7a:7d:18:6a:80:ce:14:37:37:82:
8b:c5:06:94:b0:cc:80:6b:a8:ae:a3:e8:d4:4a:9a:
0a:a6:e7:93:cd:76:4a:24:98:d6:02:89:76:36:83:
15:73:fa:73:d1:d5:f5:4e:b6:2d:4b:49:2b:dc:39:
a6:32:f6:c4:7d:8a:71:ec:bc:24:78:8a:85:72:16:
7c:3a:bd:ac:44:04:e3:32:49:7f:a9:0b:6b:19:38:
d2:70:35:ba:01:b9:be:0c:72:1a:10:42:ee:e1:1d:
f9:29:54:92:cd:6f:2b:09:7d:1f:97:9b:23:13:ea:
c9:4e:20:10:0a:54:b8:7c:f9:20:d0:27:21:9f:3b:
99:7c:86:3f:ee:50:39:ce:87:dd:c7:f4:6c:26:33:
52:5e:b7:67:d6:dd:a1:07:a2:ea:46:b0:3f:ba:4e:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:90:F1:54:B0:16:AD:E1:F9:17:6E:5B:7C:EB:0E:86:14:4C:02
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:54:4a:a8:f9:b6:4f:57:53:61:ec:f7:63:22:7d:96:0d:
b0:4a:b9:6a:f2:76:a9:de:bf:eb:ce:77:d3:18:69:6f:a5:2c:
b9:ec:20:36:f2:8e:c0:69:33:46:5f:f4:50:1f:ab:51:12:66:
c7:fe:73:f5:10:fe:10:66:ba:61:c7:59:27:f7:e9:3b:7f:08:
d3:0f:e1:6b:ba:4d:8c:6c:52:3b:40:94:81:ab:f2:a4:0b:25:
b7:af:61:8e:ba:ef:10:90:ba:ef:97:78:ff:23:18:6f:ec:4e:
3e:13:c0:df:94:f1:bf:31:11:a9:00:e3:26:50:d1:a4:40:7b:
32:9b:a4:69:0d:8e:cf:e7:74:98:d3:d2:b6:73:19:ea:08:ed:
20:ca:fa:48:35:ca:7e:a7:a5:7b:9a:06:24:ce:a6:f7:30:4b:
69:17:d4:34:6a:af:2b:80:20:00:dc:dd:d7:22:7f:5f:8f:b8:
04:b5:64:97:6f:cc:84:20:b2:b7:38:42:25:cc:2d:31:95:fa:
26:96:cb:28:b1:1b:9b:a3:e2:f7:7c:f0:2a:58:3e:41:f6:6f:
de:5e:92:24:44:45:38:c8:d7:39:68:2d:b7:b8:2e:08:d5:49:
42:aa:93:44:75:2f:8d:8d:c0:3c:da:3c:cb:c2:2b:04:28:84:
c9:0b:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:41 2026 by rpki-client