Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: S2IS88EK/A9oWs/rkldeEzu++hhEOC5Gp22utuvEyXM=
Subject key identifier: 50:01:E1:F9:43:40:77:5F:51:D0:64:12:19:E8:CA:CA:22:A7:4F:3F
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019E2F5FA33FF5AABDA6927AF05E999893F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 0768
Signing time: Sat 16 May 2026 06:00:57 +0000
Manifest this update: Sat 16 May 2026 06:00:57 +0000
Manifest next update: Sun 17 May 2026 06:00:57 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: G6RZtdlC7o8BOcLojpv0hCmxJxxBrydeOD+JJQ4vbTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:a3:3f:f5:aa:bd:a6:92:7a:f0:5e:99:98:93:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: May 16 06:00:57 2026 GMT
Not After : May 17 06:00:57 2026 GMT
Subject: CN=5001e1f94340775f51d0641219e8caca22a74f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:15:b2:e6:5d:3b:93:3d:5e:7c:c5:3e:3b:
45:b7:74:d3:da:f5:6f:e4:bc:b6:1b:77:9d:4e:23:
48:6c:3f:20:a0:9f:75:45:f2:3c:b6:c5:7d:82:82:
61:1f:66:4f:57:c7:47:b4:75:82:87:43:9f:4e:52:
b5:e8:72:10:5b:a5:82:d0:7a:e2:e5:22:06:9c:c7:
9d:34:10:0c:31:01:d3:98:3d:10:7f:65:1d:2a:21:
48:0f:70:20:55:c7:a2:ff:b3:bd:0c:dc:34:c7:8c:
34:1e:39:ab:a1:84:e1:46:66:bd:8c:88:57:03:0d:
8d:b4:5d:31:8a:a8:80:97:38:ff:f7:88:26:92:5d:
ff:11:d8:f7:68:82:c5:6d:eb:a4:13:83:0b:be:75:
00:ea:3f:1f:93:05:91:8b:63:ca:d5:70:d3:ff:4f:
17:e7:03:45:93:bb:a4:fc:19:f2:7a:72:16:72:e1:
57:26:ce:5f:59:ef:93:ef:9e:05:79:51:15:b8:9f:
84:c2:01:fd:6c:53:5a:eb:9c:ff:07:5f:2c:ea:63:
61:6d:9d:eb:2c:c1:6c:fe:ce:2a:d3:f4:ca:28:ca:
56:cd:d4:ec:89:3a:34:b7:b0:39:9a:d9:c0:29:6f:
92:20:f0:3c:6d:6d:92:4b:91:f7:0c:91:06:1a:73:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:E1:F9:43:40:77:5F:51:D0:64:12:19:E8:CA:CA:22:A7:4F:3F
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bd:22:09:d0:8a:a0:cb:0d:af:38:e0:5c:fe:7a:a6:ce:77:
66:a3:9b:b2:dc:4a:4b:6b:7e:93:54:a1:4a:29:32:53:7f:45:
18:b0:4e:80:3b:2a:9a:3f:d8:f7:85:27:26:55:b0:a1:8e:95:
9c:27:cb:da:9a:1a:c4:8d:bd:9c:b0:cc:89:c5:06:b1:0e:be:
a2:5f:a9:e6:42:33:fc:88:1f:13:54:61:9b:66:08:80:eb:af:
e1:2f:d5:aa:14:21:08:74:1f:17:b4:53:e0:59:f7:56:3b:4b:
6e:3c:30:01:bd:68:81:70:2d:9c:6b:d2:98:1a:3d:e3:6e:60:
57:36:a5:d8:02:d6:6d:2e:11:29:29:ee:ac:20:19:1e:bd:ec:
2b:ab:ae:74:06:bc:b0:c2:de:cb:02:4d:cb:8b:cf:35:d1:46:
84:95:4d:4a:a4:2d:9c:b5:f7:b2:fc:db:ea:ef:67:92:ba:8c:
9a:fe:b3:6d:91:33:c5:f1:ee:58:cb:72:f6:d4:ae:26:7c:18:
20:05:c0:fb:f0:f6:34:1c:21:a6:5d:14:38:27:bd:d9:af:95:
59:d2:6c:e9:0b:1e:68:5c:b9:6a:40:09:0d:2d:db:7a:5b:d5:
b5:35:f0:c1:70:69:fd:96:ff:3b:01:c5:d5:1d:81:12:b1:54:
67:94:41:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4vX6M/9aq9ppJ68F6ZmJP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjYwNTE2MDYwMDU3WhcNMjYwNTE3MDYwMDU3WjAzMTEwLwYDVQQD
Eyg1MDAxZTFmOTQzNDA3NzVmNTFkMDY0MTIxOWU4Y2FjYTIyYTc0ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEAVsuZdO5M9XnzFPjtFt3TT2vVv
5Ly2G3edTiNIbD8goJ91RfI8tsV9goJhH2ZPV8dHtHWCh0OfTlK16HIQW6WC0Hri
5SIGnMedNBAMMQHTmD0Qf2UdKiFID3AgVcei/7O9DNw0x4w0HjmroYThRma9jIhX
Aw2NtF0xiqiAlzj/94gmkl3/Edj3aILFbeukE4MLvnUA6j8fkwWRi2PK1XDT/08X
5wNFk7uk/BnyenIWcuFXJs5fWe+T754FeVEVuJ+EwgH9bFNa65z/B18s6mNhbZ3r
LMFs/s4q0/TKKMpWzdTsiTo0t7A5mtnAKW+SIPA8bW2SS5H3DJEGGnMGJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFAB4flDQHdfUdBkEhnoysoip08/MB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYb0i
CdCKoMsNrzjgXP56ps53ZqObstxKS2t+k1ShSikyU39FGLBOgDsqmj/Y94UnJlWw
oY6VnCfL2poaxI29nLDMicUGsQ6+ol+p5kIz/IgfE1Rhm2YIgOuv4S/VqhQhCHQf
F7RT4Fn3VjtLbjwwAb1ogXAtnGvSmBo9425gVzal2ALWbS4RKSnurCAZHr3sK6uu
dAa8sMLeywJNy4vPNdFGhJVNSqQtnLX3svzb6u9nkrqMmv6zbZEzxfHuWMty9tSu
JnwYIAXA+/D2NBwhpl0UOCe92a+VWdJs6QseaFy5akAJDS3belvVtTXwwXBp/Zb/
OwHF1R2BErFUZ5RBlg==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:12 2026 by rpki-client