Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: 4KGZQDuCOsDE+p2Mo7JlbhlmC2dsB+0secyzBkxa4qc=
Subject key identifier: 12:0E:9F:11:D1:97:9D:7A:3B:35:3B:26:7A:E8:BF:53:6C:90:28:84
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019CAD908A170B9413BD370118F92CBBCB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 0573
Signing time: Mon 02 Mar 2026 08:00:56 +0000
Manifest this update: Mon 02 Mar 2026 08:00:56 +0000
Manifest next update: Tue 03 Mar 2026 08:00:56 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: xUUdChPZz40UGMG1bAFcX/noqnzGUYh4HxWiYrsfLus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8a:17:0b:94:13:bd:37:01:18:f9:2c:bb:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Mar 2 08:00:56 2026 GMT
Not After : Mar 3 08:00:56 2026 GMT
Subject: CN=120e9f11d1979d7a3b353b267ae8bf536c902884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:08:2e:34:17:98:aa:f7:02:c5:d2:c4:fb:
0d:2a:cc:f1:87:af:91:ee:fc:9b:18:bd:f4:ee:0a:
7d:d2:d4:07:00:2e:51:ba:e3:76:71:ef:ad:e8:e1:
2a:e1:f0:7e:bb:55:66:34:e9:ab:92:ad:64:aa:fc:
ad:a4:8c:13:f6:2d:f9:46:aa:46:29:87:48:e5:79:
ef:d6:4d:16:d7:85:13:ea:1c:48:4e:58:21:ee:3b:
f2:4d:8b:3b:f7:80:d2:5d:9b:2d:00:b2:d6:ec:b5:
0b:4c:57:94:cb:b4:af:62:51:19:8f:1f:78:7d:37:
b6:76:84:8b:ca:51:9d:59:19:22:d8:23:3f:f7:3a:
d0:52:46:ed:8c:e8:13:cd:18:fa:b3:ba:ae:77:17:
52:8f:42:17:39:a1:09:4a:af:fa:b0:d5:99:bf:49:
52:c2:d4:de:85:5e:43:96:14:4b:cf:29:8e:fa:3e:
92:a6:ad:a8:2f:c7:78:18:82:52:6b:6a:cb:b8:4e:
b8:f7:e1:8d:cf:88:86:67:6d:cd:a5:53:f4:bc:a0:
e6:6d:a9:a5:d3:56:6a:a2:9d:88:9d:76:b2:9c:90:
46:bf:c2:ac:0c:c2:fc:b3:95:40:38:2b:dc:e6:d8:
3a:22:84:92:1b:19:b5:13:6e:c9:90:a2:76:34:07:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:9F:11:D1:97:9D:7A:3B:35:3B:26:7A:E8:BF:53:6C:90:28:84
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:24:91:64:8a:68:20:0f:06:48:b5:66:10:42:2c:e6:86:77:
a8:62:cf:42:32:c2:f2:4e:50:f7:c1:00:0d:12:ec:fe:ed:ef:
34:c7:3d:96:db:7c:f6:c9:c8:6b:b6:d4:1f:16:d4:be:6f:de:
54:02:9e:b9:97:7d:1b:e7:5b:a8:82:7c:58:2c:79:cf:76:89:
f6:56:e4:87:a3:90:83:ff:0f:b1:54:9a:1d:2a:d9:72:7d:fa:
55:65:de:e9:22:f2:f4:0c:93:b7:ea:a1:fc:ab:99:2c:b5:ff:
04:67:7c:1c:a2:05:22:b8:bc:da:86:9a:43:16:1f:b9:db:f1:
1a:95:89:2e:02:58:73:04:5f:a0:04:22:64:ed:e6:da:ac:b9:
64:1c:d5:3c:1e:53:e3:aa:a3:32:92:bf:03:8d:9a:d0:a1:95:
3a:43:f5:53:2e:63:d3:4f:03:ec:75:72:f5:be:68:50:19:c7:
80:37:b8:ae:1a:e9:77:f3:47:ad:86:58:50:1e:82:f9:a8:2a:
9c:a6:cc:a5:c5:4f:52:bd:78:89:d2:b7:59:02:7a:66:c6:95:
c5:b2:a9:96:35:de:ad:38:ba:3d:69:e2:df:90:ef:84:e3:35:
f0:83:c9:43:db:cf:4d:f9:02:72:0a:ce:63:0e:b1:f3:70:2e:
d1:2b:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:11 2026 by rpki-client