Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: yvJQ0wGs0fJ/TDK4UTxyGpH73h6lrO+I7kZz8ZvHg7k=
Subject key identifier: 8A:62:3D:D9:99:77:4E:67:21:AD:A0:55:12:03:18:A6:DA:5E:25:77
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019DA2D372144C1185DFD6558B9761503561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 05F2
Signing time: Sat 18 Apr 2026 23:00:59 +0000
Manifest this update: Sat 18 Apr 2026 23:00:59 +0000
Manifest next update: Sun 19 Apr 2026 23:00:59 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: tLDI+eXkbVyxDuCA0ldt0xU+jtkdT7AatlxGTkYAMOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:72:14:4c:11:85:df:d6:55:8b:97:61:50:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Apr 18 23:00:59 2026 GMT
Not After : Apr 19 23:00:59 2026 GMT
Subject: CN=8a623dd999774e6721ada055120318a6da5e2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:5f:f1:fd:ef:d1:b1:71:6e:bd:50:ac:28:
06:36:de:94:60:3b:64:d8:2b:b9:7f:c8:7d:a0:0e:
df:0d:76:cd:14:74:7e:c7:42:de:9b:e4:20:dc:e3:
39:6f:b0:ca:73:ff:b0:ed:45:e3:bd:63:fd:b1:29:
9a:1b:f5:50:08:28:4b:9c:de:80:1f:a4:bb:a9:fb:
ce:6d:b8:ec:df:6f:16:a7:1e:df:fe:2d:b4:1f:27:
c1:10:02:2d:9b:61:87:a1:aa:36:84:09:61:4b:db:
74:e1:dd:52:e0:a3:fd:2a:e0:d9:07:d6:5e:da:ba:
1c:c0:7b:0c:1d:ac:68:c0:d4:10:bd:9f:0e:e0:08:
c9:f6:88:10:e9:33:c7:5a:86:cf:93:2a:c7:28:08:
64:37:fb:b0:d1:2d:5f:ed:aa:3a:e0:85:62:8c:86:
4a:5a:6d:2f:3e:7f:29:89:69:1a:20:c3:b2:86:28:
68:9f:2b:42:4b:77:45:7e:31:c3:c7:26:20:84:a7:
a6:d1:c1:f9:e8:92:e6:48:b7:e7:20:59:b9:04:99:
8e:16:73:6b:b3:28:b1:e8:91:64:5f:8f:89:04:0c:
83:d5:44:5e:a6:f1:00:2c:78:86:e4:65:84:38:88:
b3:39:34:62:33:65:52:07:66:77:c6:37:23:01:0a:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:3D:D9:99:77:4E:67:21:AD:A0:55:12:03:18:A6:DA:5E:25:77
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:d2:b8:2e:2a:fd:4d:45:d6:1f:96:99:88:05:a4:10:6c:
dc:ce:90:8b:4b:bc:56:d7:34:23:b0:64:d9:82:38:71:7d:e4:
6c:5a:fc:85:29:6b:4c:9a:50:b9:34:0b:e2:dd:68:d2:01:e4:
ab:f8:4c:83:d3:74:07:28:31:b7:05:54:e1:b5:b1:a4:24:51:
35:c5:4b:bc:39:3c:b6:ed:9b:80:b1:0a:9f:29:87:88:d5:dc:
a8:2b:2e:cb:e9:a8:2c:52:90:2d:94:9e:12:9b:22:cd:d2:f1:
36:c0:f4:a9:86:cf:c7:ef:c4:95:14:03:6d:77:be:f9:37:3d:
1c:5f:23:13:5a:13:91:f2:61:7c:a4:d4:3c:8d:62:37:c4:13:
86:ff:0f:d4:40:41:a0:d5:40:57:7c:57:75:b4:96:d7:d2:db:
8b:f6:a2:87:0f:f6:c6:dd:d6:c6:d1:ff:1d:ea:a2:c7:a7:a6:
88:3e:ce:34:8c:42:4f:35:8a:b3:96:5f:b1:d5:bd:0f:74:6a:
01:3d:5e:0c:2b:3a:7f:81:78:a0:81:19:c3:8b:8a:f0:d4:01:
60:7a:0a:29:56:49:20:91:3a:a2:5e:c2:17:b6:0a:f7:35:7e:
4c:9c:c2:e3:0f:31:19:6b:74:6e:30:48:4a:bd:da:0e:57:1d:
c1:57:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:14 2026 by rpki-client