Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: fSxYn0nGqZAd57v1fJ+lE/gbLp/PZO1h19VXZ46tMvs=
Subject key identifier: 18:8D:81:23:5E:10:97:1A:14:09:76:BE:A3:50:5C:50:22:7B:D8:E9
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019D2A0464183AD0413ADCAA1B29E72061FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 0912
Signing time: Thu 26 Mar 2026 12:00:23 +0000
Manifest this update: Thu 26 Mar 2026 12:00:23 +0000
Manifest next update: Fri 27 Mar 2026 12:00:23 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: WZkPbaSVRtF6JI3VrWP1RsiSCchsY9xRsTVykhHuVZg=)
2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:64:18:3a:d0:41:3a:dc:aa:1b:29:e7:20:61:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Mar 26 12:00:23 2026 GMT
Not After : Mar 27 12:00:23 2026 GMT
Subject: CN=188d81235e10971a140976bea3505c50227bd8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:ae:f6:57:c0:8e:26:1b:2d:a7:da:e0:c6:
76:90:fa:bd:a1:1d:30:cd:0b:7e:c5:5d:c6:dc:8a:
26:c1:b8:6b:67:5e:75:79:9a:88:59:b0:d9:c8:f5:
6d:8d:12:a4:18:46:e6:a1:6c:37:22:a8:bc:c4:8b:
5e:a0:66:01:a2:dc:d8:11:9f:ad:48:55:ac:51:aa:
46:ed:c8:7f:3d:fd:99:07:51:a4:cc:77:21:8d:44:
fa:36:7e:3d:73:76:c3:0f:7c:26:61:97:5d:17:f2:
3a:27:cc:32:78:4b:22:49:04:76:da:18:01:dd:91:
45:eb:51:47:d7:88:14:26:d0:9e:8e:66:f6:1f:37:
dd:97:90:25:22:26:db:fd:5b:64:6f:19:13:01:78:
d5:a2:78:6e:58:9d:dc:fc:2e:bd:1f:2a:3e:09:4e:
45:e9:e8:b8:94:74:1d:06:63:63:c7:59:c8:45:31:
dc:7e:fd:6a:e5:3f:b7:d1:34:f3:e7:ee:1d:41:65:
19:55:4d:7f:bc:23:b0:14:62:7f:39:87:01:ac:3d:
55:da:79:85:c0:ef:78:9d:40:6f:26:3a:b0:f1:8a:
bf:a5:29:80:ef:01:f6:10:f0:69:c8:8d:9c:b8:da:
62:b9:19:2b:69:37:dd:bf:4d:5e:24:ab:87:12:2e:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:81:23:5E:10:97:1A:14:09:76:BE:A3:50:5C:50:22:7B:D8:E9
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2a:ca:19:aa:05:40:7e:5c:53:2c:f8:8c:de:e9:c8:57:ba:
6a:b8:12:34:8c:8d:d5:c0:7f:14:d1:9a:70:e6:42:1b:1b:7d:
e1:c6:c3:82:a7:cf:dc:6a:c3:85:bc:f8:a7:1f:68:39:b9:e5:
5f:73:68:bb:8b:3d:81:ef:ed:bf:fc:5a:15:a0:c4:35:02:69:
e3:16:fc:90:5d:91:6a:7b:9f:42:ed:c3:f6:74:b3:21:34:dc:
b9:c3:f2:33:bd:46:ab:a2:b9:61:47:95:22:23:21:39:6d:9c:
74:fd:f4:63:14:b9:0b:96:03:1f:81:95:bb:a7:87:19:5a:ad:
e6:70:48:ec:62:43:ff:ab:ed:5b:9e:33:63:60:1e:c1:c9:99:
c4:d3:b0:72:26:65:97:3f:da:03:67:27:84:dc:44:4b:f8:3b:
e2:c3:0a:34:4d:9e:81:7f:0e:e3:7c:c1:ac:06:07:31:a1:15:
87:46:c1:0d:45:af:c9:01:72:a2:36:0b:bf:75:b4:02:69:02:
b1:90:11:39:52:ff:03:d6:dd:5c:ff:fc:14:d3:a0:ee:4f:bf:
71:73:d9:0c:fe:d3:26:2e:c3:61:4c:44:f3:38:fd:f7:c3:15:
f7:c9:9c:ee:72:9e:27:32:3b:5d:0a:e8:23:b9:3d:df:d8:c9:
b6:ae:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:23 2026 by rpki-client