Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: n4jWfOZ3qvLYjRkchprynLl2ayka2uoVpMkDsFJ6k44=
Subject key identifier: AC:76:BC:F1:AC:BF:D3:73:69:44:AB:D1:0C:0A:CA:FB:90:D1:9E:DF
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019F190D440FBEB275EDF177F2540830B220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 07E1
Signing time: Tue 30 Jun 2026 15:02:07 +0000
Manifest this update: Tue 30 Jun 2026 15:02:07 +0000
Manifest next update: Wed 01 Jul 2026 15:02:07 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: y+rnNrmzdtFNY87kXk1Mg1flAsazGgO+zCfFzmzTCgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:44:0f:be:b2:75:ed:f1:77:f2:54:08:30:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Jun 30 15:02:07 2026 GMT
Not After : Jul 1 15:02:07 2026 GMT
Subject: CN=ac76bcf1acbfd3736944abd10c0acafb90d19edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:40:ae:be:c8:3d:51:7a:90:23:03:89:09:
a4:a5:52:08:24:f4:92:76:95:5c:2a:71:58:eb:1d:
91:ac:5d:49:58:3d:6c:ba:da:6c:03:12:b9:c2:c4:
bb:30:49:0c:c6:df:19:19:88:a5:96:84:ea:1e:4f:
3f:41:0a:96:3e:09:9a:1d:4a:47:42:bf:28:24:0e:
5c:58:4a:6d:1b:7e:b3:e6:f5:d2:75:66:34:91:da:
94:29:d6:3e:d9:de:e8:5d:56:89:83:66:00:da:cb:
80:b5:07:3f:c8:d6:64:18:72:4e:d7:73:1a:3f:40:
29:6e:d9:fa:14:da:67:51:52:7c:5e:5a:23:ae:05:
7f:1d:7c:4b:a8:c4:ab:12:af:0a:c2:46:ed:a2:8e:
ba:5a:b0:a2:13:43:9c:ea:a6:e0:44:3b:d7:c3:43:
ed:e2:01:cb:40:77:3e:b1:17:9a:19:ee:81:9f:4e:
d0:8c:a5:0f:4f:80:49:fa:2d:20:a0:58:d8:be:df:
95:c7:55:88:19:fa:c2:25:89:a3:06:e8:86:8c:a0:
ee:b7:c7:59:c4:6b:ba:0b:e5:22:50:33:76:3a:31:
60:f1:07:5b:a3:34:cf:44:18:6e:a3:6b:a9:16:97:
ad:50:7a:74:4a:8f:1d:0f:e1:31:8e:1b:47:65:b4:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:BC:F1:AC:BF:D3:73:69:44:AB:D1:0C:0A:CA:FB:90:D1:9E:DF
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a9:00:8b:7d:b2:41:3f:e3:f5:10:8d:dc:12:8e:d9:d8:95:
d2:6c:21:37:0c:3a:2e:3b:c2:56:38:31:70:bb:94:47:3a:b9:
f2:62:49:39:87:3e:03:75:26:02:5d:10:2c:af:27:3a:c3:b4:
37:a4:80:d2:87:96:11:22:38:66:f3:eb:92:aa:19:19:fa:d0:
12:da:66:a6:e4:ad:b3:43:fa:e7:8c:a7:8f:50:2e:5b:8f:3c:
7e:a5:b4:2d:5e:de:5a:03:30:88:71:85:7e:20:a5:e6:20:8a:
01:86:9e:ba:70:9a:f8:bd:f8:2a:7f:36:d3:8d:e7:15:20:86:
0a:5c:1e:1d:5b:48:1f:6f:c1:f1:27:c9:4e:a4:09:a8:d3:c9:
03:63:59:33:50:5e:f6:ff:9d:e2:75:a5:cd:6d:7e:cf:d7:65:
68:af:a1:eb:bd:cd:dc:8c:10:ba:cc:d9:93:fe:23:11:a4:63:
69:10:6b:19:3c:b7:89:1e:f6:c5:6f:d6:5a:e8:16:08:8b:04:
bb:72:76:44:98:87:8c:96:61:57:e0:e3:70:6d:c3:03:73:27:
79:a4:6a:eb:90:ec:01:4d:1f:e5:d7:db:43:a0:bc:46:6a:b2:
7a:4c:7e:e6:0f:f1:1a:d3:65:2f:d4:ee:b8:1c:52:3c:3e:c0:
c4:a6:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:50 2026 by rpki-client