Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: gQ/ON20+DErYFrUXjwH/AbblfyS5Acaj+2Eg08Tr7Og=
Subject key identifier: 3D:FE:C9:56:14:17:D0:2E:82:21:27:A0:CD:DF:7D:0C:B1:E1:90:F3
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 01A000CAA39E76965844E8EB10ADD27FD7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 0859
Signing time: Fri 14 Aug 2026 15:01:15 +0000
Manifest this update: Fri 14 Aug 2026 15:01:15 +0000
Manifest next update: Sat 15 Aug 2026 15:01:15 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: OSsqjcl6PLftaIz3AvVAaPsp3yeJMrxQ3hSWh5QEUxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:a3:9e:76:96:58:44:e8:eb:10:ad:d2:7f:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Aug 14 15:01:15 2026 GMT
Not After : Aug 15 15:01:15 2026 GMT
Subject: CN=3dfec9561417d02e822127a0cddf7d0cb1e190f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:ed:72:c9:5f:e7:6c:b4:7c:f8:39:51:6b:
d0:d2:17:2a:14:54:1a:6e:5f:46:a3:12:c0:1c:f8:
66:ae:90:09:40:84:70:9e:7a:35:db:65:72:36:c3:
f3:44:8e:c8:eb:82:18:55:99:78:33:20:e0:ef:7f:
bb:9d:90:ce:03:f7:08:9d:09:66:5b:6c:43:0b:21:
b3:00:e6:23:57:0c:ff:bd:12:2d:3c:16:2e:bc:27:
f0:f8:20:fa:4e:b7:35:dc:bf:cc:af:a3:b5:d0:68:
80:10:1d:da:33:75:93:a9:80:db:ae:6e:a9:d5:b7:
31:3f:4d:72:f2:70:b9:01:8e:0c:56:c1:29:c7:9c:
c6:16:e4:88:9e:cb:74:d0:6b:eb:31:bf:3a:7a:f4:
34:48:37:65:e3:1c:bf:ad:2f:8a:e8:0c:cd:0f:50:
61:15:33:54:52:c4:2a:73:ca:a3:10:81:3b:2b:fb:
cf:95:5c:5f:46:63:5f:b0:b5:ba:a7:eb:74:c5:61:
a7:c5:c9:79:b6:2c:bf:43:12:81:8e:7b:5b:47:3d:
df:f2:2c:2f:41:52:a9:90:04:4f:69:3b:9b:d7:de:
ac:59:b7:14:59:7c:a7:0e:0e:e9:c6:da:cb:a1:b0:
9f:9e:ff:16:26:a6:fc:cf:db:7f:bd:57:f9:6e:37:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:C9:56:14:17:D0:2E:82:21:27:A0:CD:DF:7D:0C:B1:E1:90:F3
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:26:9c:87:4c:14:00:90:38:13:68:5c:2f:7b:b9:79:7d:b2:
c2:fc:a1:a3:73:e8:53:08:ec:2d:60:d8:f2:fa:7f:bd:d1:75:
11:b5:cd:86:96:86:2a:9a:c5:9f:7f:b5:3d:f9:67:53:bf:e1:
87:e3:ae:81:4b:45:44:f0:f0:e1:17:09:34:c5:a5:fb:c2:3f:
4c:3b:e9:6d:f1:3f:2f:bd:f0:53:f3:81:0e:77:a1:eb:e4:d2:
15:cd:97:76:88:37:a1:f0:86:7d:2f:f4:70:b7:1a:62:9d:cf:
49:9d:85:66:2f:e2:75:cd:54:bd:69:b9:fc:a5:4a:d9:b9:a5:
6b:37:6a:bf:d7:88:78:58:a9:20:c9:1c:e3:e7:c2:04:80:20:
f3:9a:d1:87:39:4e:2d:e0:80:36:d5:e5:0d:c6:1a:f9:a1:9a:
31:84:1a:15:5f:4c:6f:fc:c8:98:ad:0a:dd:e7:83:4c:81:f5:
fe:3a:b8:85:6d:a5:19:cd:2e:d0:79:90:9b:ce:3a:c0:45:b6:
9c:bd:3a:7a:6d:ea:cd:9c:62:08:e3:26:e5:ac:04:5f:3b:36:
5c:7a:95:7e:72:f3:67:35:88:25:7f:80:5d:a8:36:b9:c9:b8:
33:15:c7:4e:b2:20:cf:69:5f:f4:db:5a:b2:53:59:06:96:de:
19:72:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:52 2026 by rpki-client