Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: 2yqKkTGfdpqXHfWzaR9d1H3aHpN1dQSoD/Ea4h1Y3pM=
Subject key identifier: 09:F6:0A:F9:1E:5C:71:7D:ED:83:8E:24:43:9A:88:A6:B7:B2:CB:BC
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 01A1DE02D32ACC58D61A1B3D239FAFF79EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1AF3
Signing time: Sun 15 Nov 2026 07:01:29 +0000
Manifest this update: Sun 15 Nov 2026 07:01:29 +0000
Manifest next update: Mon 16 Nov 2026 07:01:29 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: I8cn6SbtezfWD6f8OAHMH4cKkcfL2gzNa1Qmss5POkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:d3:2a:cc:58:d6:1a:1b:3d:23:9f:af:f7:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Nov 15 07:01:29 2026 GMT
Not After : Nov 16 07:01:29 2026 GMT
Subject: CN=09f60af91e5c717ded838e24439a88a6b7b2cbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:49:77:87:a6:17:6b:b5:fd:6c:7a:37:f3:
96:bf:7e:ed:c4:6f:d3:7f:a5:a1:50:71:ed:58:43:
47:e1:b8:c5:a9:25:f2:1e:b5:3b:79:93:6d:44:fa:
e2:06:96:de:d6:6a:a5:43:af:7c:b6:9d:fd:f6:06:
1b:8d:27:65:b9:26:af:c7:69:9b:d0:16:96:21:78:
5f:c7:c2:a6:fc:3f:98:7f:f1:26:2e:88:e7:96:c3:
3d:0d:42:6c:03:c7:83:66:76:b2:b8:92:0e:14:aa:
84:1b:a6:68:c6:f9:b0:5c:84:38:d1:a5:62:ae:11:
f5:42:ca:07:a5:27:1c:64:4c:23:d3:63:59:83:b2:
c6:ca:48:46:14:ab:33:0f:41:11:f3:01:73:5d:ba:
22:4f:2e:05:98:b9:e9:79:54:f1:55:57:67:76:00:
2c:a5:46:21:5c:c8:34:61:a0:c1:bd:a4:4c:16:b3:
ce:b9:ab:d1:fc:77:e6:01:f2:38:8a:46:e5:bc:28:
75:4a:b5:c2:70:b9:68:de:bd:84:ff:17:93:2c:a5:
46:31:0b:40:a8:9e:69:7e:d0:1d:a8:de:11:57:9c:
1a:82:6c:74:16:34:1d:3a:22:29:5f:d4:69:11:49:
c7:2b:23:cd:b8:35:53:9c:67:da:c5:47:b0:1e:e4:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:0A:F9:1E:5C:71:7D:ED:83:8E:24:43:9A:88:A6:B7:B2:CB:BC
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:68:af:4a:a2:0b:72:ad:85:6c:17:25:30:bc:24:3f:fd:b1:
8c:2c:08:ca:e5:66:be:86:38:77:3b:dc:5a:64:ea:03:c7:7f:
8d:27:fc:64:2e:bf:1c:13:0f:31:8d:4f:f3:9c:91:24:03:1a:
71:65:c3:65:ec:20:fd:0d:17:68:55:a8:50:65:a2:1c:39:0d:
8c:23:cb:2e:f0:7d:35:b7:b9:4b:6f:79:2e:66:bc:e9:7e:d5:
bf:88:28:3b:16:a1:b9:9a:22:f9:26:b8:05:ee:de:0b:2d:38:
43:cd:98:99:7b:2f:bc:d6:0f:04:5f:43:12:9f:3f:90:f5:41:
33:e2:e7:1d:e9:d5:8b:e2:26:07:c0:15:00:ce:85:39:c7:c4:
90:22:1f:2f:e6:ad:52:38:94:e4:d9:13:ea:f0:12:1f:ab:4f:
f3:5f:43:87:2c:45:7e:64:20:30:bc:0e:8a:30:3a:9a:0c:45:
60:16:6b:fe:89:98:9f:7f:34:00:f8:f7:76:d2:8e:05:3f:32:
51:2c:8a:14:c8:b7:f1:e7:dd:bf:df:06:ab:8c:cc:04:0f:1d:
a0:ec:9d:b2:85:de:21:6a:57:bc:89:1e:ab:ac:46:22:19:2e:
c5:c0:28:bb:4d:54:2e:0d:39:6e:51:7d:ef:30:73:8f:0c:d3:
13:15:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:25:51 2026 by rpki-client