Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: wLffUqvKBDexvOgIP7kMuGeeFqPKn+d2q6dORl/NUus=
Subject key identifier: 8F:16:02:F0:99:E6:3C:79:72:93:50:B3:A2:42:CA:35:9C:77:27:5B
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019F9022E2385E8285830E0E91403DA2F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 0A50
Signing time: Thu 23 Jul 2026 18:00:32 +0000
Manifest this update: Thu 23 Jul 2026 18:00:32 +0000
Manifest next update: Fri 24 Jul 2026 18:00:32 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: mEpMHFr3ZU9NN56yVXBwaabsbGULXmMfnzZxUAGFqIA=)
2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e2:38:5e:82:85:83:0e:0e:91:40:3d:a2:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jul 23 18:00:32 2026 GMT
Not After : Jul 24 18:00:32 2026 GMT
Subject: CN=8f1602f099e63c79729350b3a242ca359c77275b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:a9:0c:39:e9:f4:23:8c:6c:ac:b0:aa:df:
b9:82:e5:02:4c:d7:4a:44:2e:b6:7f:2d:64:f6:27:
03:9c:ad:fb:53:00:82:00:57:df:3b:2c:5a:5f:68:
4b:e4:8a:54:bb:c4:de:93:da:ec:8a:2a:d9:89:d7:
d0:68:27:ba:a2:53:7c:f6:e0:c0:48:0b:da:80:4a:
74:61:c8:39:04:64:41:40:d1:82:5c:d7:1f:48:2e:
29:bd:c3:94:16:72:f0:1f:11:b5:71:8d:02:6a:b2:
e3:7d:0c:41:84:d8:66:8f:16:e8:82:5b:d9:81:b9:
f3:dc:9b:3f:92:3a:f7:c2:6f:37:64:02:d8:35:61:
93:2d:02:e0:72:56:e2:31:b7:d8:77:a6:23:b9:85:
ce:6c:c1:24:66:00:88:52:9f:12:71:be:b1:f9:24:
71:52:66:a3:2a:83:1f:7d:ab:af:df:3c:a5:bb:90:
d0:30:f7:87:30:d8:b0:ee:3e:b9:98:e5:d6:11:ab:
d9:3d:0f:df:7b:8d:8e:60:2b:58:10:c3:42:59:b2:
94:8c:10:c5:ec:3b:09:d4:27:fa:d4:f5:5e:e0:59:
4b:b3:28:69:6e:5a:21:a6:57:8a:84:77:5c:34:bd:
0f:de:8d:f7:6a:48:d2:be:79:81:13:d0:bb:fc:b5:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:02:F0:99:E6:3C:79:72:93:50:B3:A2:42:CA:35:9C:77:27:5B
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:66:21:60:26:0f:d6:85:af:81:43:db:95:5c:90:b0:3f:34:
1c:59:69:02:c2:33:17:ef:a1:50:f5:0d:dd:11:53:a9:2e:a3:
74:8b:c6:ca:f2:b1:4f:89:70:6e:f3:73:ef:0a:9b:cd:51:e8:
43:90:6a:27:9b:c8:42:21:7a:bd:b7:1f:c1:18:6d:61:34:b9:
41:7a:a5:fb:74:00:82:1e:aa:84:d5:d5:8a:d1:00:8d:5a:a1:
8c:3e:49:ce:14:dc:79:63:65:e0:49:7a:28:b1:c0:1a:76:05:
a8:05:03:fa:53:4e:23:8f:74:87:5d:fb:d1:ca:1c:c1:65:66:
80:08:8b:45:eb:03:ed:74:71:bd:80:11:82:db:95:ff:82:6a:
3a:c2:f1:b8:84:84:21:e4:7e:5e:40:d7:24:24:12:4b:b0:cf:
44:47:86:5d:b5:b0:b8:07:a6:38:14:2b:9a:e2:57:dc:f4:33:
12:24:fc:d9:66:20:92:ec:e5:58:84:3e:99:4f:fb:9f:2a:8d:
99:ad:62:92:10:6d:30:07:ff:eb:1b:d7:2e:8c:60:9e:38:b0:
5a:59:c1:91:e6:a8:7c:93:06:42:6d:5e:17:0a:6a:05:4b:e4:
53:1f:08:85:63:13:4b:63:7f:5c:0a:3a:38:f7:71:4b:9a:7d:
3a:5d:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:56 2026 by rpki-client