Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: 8A/dkWspbFg94jXpMQMucBSpoSOBaNM/OwcMIWN3Wxs=
Subject key identifier: 98:9F:B5:56:3F:98:A0:E9:81:96:51:F8:2E:F2:70:54:F0:F6:F0:E3
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019D3A8A71F906376A2145DA4CFB1C88B959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 05BC
Signing time: Sun 29 Mar 2026 17:00:44 +0000
Manifest this update: Sun 29 Mar 2026 17:00:44 +0000
Manifest next update: Mon 30 Mar 2026 17:00:44 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: bv5fPqhJ5ZcFirGztCrSay/8O8wnLOzK4G6mpoqJuhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:71:f9:06:37:6a:21:45:da:4c:fb:1c:88:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Mar 29 17:00:44 2026 GMT
Not After : Mar 30 17:00:44 2026 GMT
Subject: CN=989fb5563f98a0e9819651f82ef27054f0f6f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:b9:e5:cb:4f:10:20:c8:95:fd:62:e2:94:
96:7d:49:48:69:06:97:c4:ff:b3:b1:d1:5b:69:24:
6e:35:2e:c4:2d:bc:0f:45:b8:3d:47:73:3b:6d:0e:
a4:8d:b1:d7:38:6c:f6:9c:2c:e2:b0:f7:4e:17:33:
84:3b:0f:9d:62:a3:6b:d6:28:fe:20:01:5a:bf:0d:
bf:62:16:77:46:23:49:64:b6:c0:41:64:ae:b8:1b:
41:c1:ec:82:6b:ab:bb:d1:bf:73:4e:3f:c3:eb:4d:
ef:d6:cf:a5:3e:c1:89:7f:29:a0:67:aa:b9:97:18:
13:84:ed:19:e5:d0:96:fc:e6:9e:ff:11:b2:2c:94:
19:42:e9:2b:97:a9:9d:79:29:e7:73:72:14:1b:42:
4f:89:39:2f:db:ef:67:97:23:41:80:08:72:de:2f:
c7:1e:88:96:4c:a5:de:38:63:b3:aa:e1:18:26:f1:
cc:fd:29:12:ee:55:d3:35:78:ea:45:2c:40:72:e5:
d5:3a:60:44:f2:c1:85:16:be:76:b5:52:4c:82:de:
10:08:cc:e8:b3:20:c9:e8:00:55:61:41:30:8b:6e:
8c:79:6e:75:81:80:10:8e:2f:e9:25:34:0a:fa:ba:
d7:4c:a2:32:79:45:7c:5b:12:23:be:c6:02:d8:f6:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:B5:56:3F:98:A0:E9:81:96:51:F8:2E:F2:70:54:F0:F6:F0:E3
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:85:e0:a9:f0:2c:15:3a:d2:e5:44:9c:d8:9b:11:f0:af:
bf:86:cf:94:3a:9a:b0:bc:c1:b2:db:46:7d:2f:f9:c8:07:0d:
51:5f:9b:dd:a1:10:84:62:e6:3c:60:5c:4a:f2:10:67:80:1a:
37:01:4e:1d:ea:5c:ae:3b:65:bb:7c:b4:b3:6c:c4:ef:d6:58:
6c:6f:c1:85:bd:5d:00:ce:d3:01:d2:db:67:bd:40:a8:66:4e:
c1:b2:91:b8:a8:ec:ab:7c:68:8f:a1:1f:7e:52:95:8a:49:01:
58:89:17:f3:86:7a:05:29:9f:60:4f:ee:9d:e8:48:06:b1:c5:
cd:fd:57:d9:f1:f0:8b:d5:d1:31:bd:ce:ab:58:f8:24:55:8c:
4f:8e:c6:ec:ee:c9:5a:39:76:cb:ba:1a:9d:2c:cc:d5:5d:ae:
0d:be:31:67:6a:fe:64:00:7e:78:03:5e:9a:c3:35:c8:ed:70:
bb:e0:17:55:fd:f9:67:ce:c9:21:34:0f:c4:c1:b3:eb:c5:23:
0e:3c:ca:24:69:66:73:6b:9b:06:f8:19:90:c9:77:54:02:dd:
c7:09:14:85:56:f2:f2:b5:bd:e0:df:b7:00:e7:f0:fa:02:12:
32:09:26:ea:b5:c3:1c:fb:2c:5e:f8:f5:8b:68:8c:aa:81:55:
2d:e5:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:39 2026 by rpki-client