Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: t7yDGMVPPR00LZAD0CU9GemOM2rE+xYgkC8jWCzz/F0=
Subject key identifier: 1D:26:11:26:95:38:7B:75:C7:6A:6E:34:EB:B7:FB:31:84:7E:06:39
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019D2704800E99093B8EC8D257C4AAFA8935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: hm7+u6r2XlkONeev34qgz1tpJ9/SOBhNBaIlzRuINv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:80:0e:99:09:3b:8e:c8:d2:57:c4:aa:fa:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=1d26112695387b75c76a6e34ebb7fb31847e0639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:5e:7f:70:96:f0:6e:03:19:e8:88:e5:3c:
e3:ee:d9:53:a1:38:c7:b5:94:f7:4f:b8:93:9c:36:
81:6c:ce:77:fe:3b:b0:2f:1a:49:e1:9b:50:41:8c:
7f:07:20:2e:95:c7:e3:81:bb:48:63:dd:df:45:a4:
0b:9e:63:fa:3e:12:d5:db:ec:5b:9a:5a:8e:3a:6a:
ce:bb:eb:a3:ad:34:2c:f2:68:60:13:68:f6:73:d1:
9b:92:eb:2b:17:86:7a:18:19:36:3a:27:c2:de:1f:
0c:af:ef:0c:44:f2:65:13:a2:84:4a:35:cc:ac:3d:
40:af:8f:f8:cc:16:f0:e2:b0:e1:cb:ea:63:cd:a4:
b9:30:0e:f4:f5:5c:85:7f:a9:0d:2f:88:12:c3:f4:
bb:6c:96:8f:bb:4e:e2:99:9c:28:9e:50:74:7f:08:
1a:bd:c9:b0:b3:cb:21:81:9f:5e:90:cf:b8:ac:da:
30:58:99:ec:70:2a:85:0c:cb:6b:a3:35:c4:ec:c5:
b7:0f:8e:73:26:6b:bb:29:af:97:4b:ad:c0:41:41:
3e:ec:77:8e:39:8d:87:e7:bf:3a:9d:9b:52:42:2a:
db:af:7b:ab:33:a4:58:26:a9:76:42:d2:9f:df:87:
2e:6d:01:a1:8f:f1:5f:07:a5:e0:a1:1b:5b:bd:75:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:11:26:95:38:7B:75:C7:6A:6E:34:EB:B7:FB:31:84:7E:06:39
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:00:eb:c1:51:00:5c:6f:81:53:fe:a2:91:d1:26:b5:4d:
0f:8d:86:36:24:86:84:70:45:62:f4:25:fe:b4:c3:13:33:65:
e0:6f:52:3f:a2:06:45:ed:5b:97:a6:80:d2:a0:72:eb:ee:42:
82:93:ba:24:77:3f:9f:61:12:c2:06:3a:a3:19:84:82:b4:87:
0b:b9:c3:fd:de:e7:59:4d:97:ba:ff:b1:c5:16:da:4c:30:4e:
71:a1:91:2b:05:51:7c:13:b9:55:24:27:55:4e:50:bb:36:ec:
00:a3:b5:06:fc:73:f3:42:b3:31:8a:83:e4:d5:31:95:fe:50:
6d:4f:ac:bd:38:4a:d1:6e:8b:21:30:29:8f:a6:a2:e7:86:94:
00:df:a1:42:2a:97:33:df:d5:f2:2f:bd:48:bd:35:5b:77:20:
41:6a:5d:71:53:8b:6b:45:aa:a1:6a:7d:15:a7:0d:b0:d8:fc:
b7:c7:05:dd:9a:1d:df:f3:05:39:07:65:8b:ad:ee:67:b2:75:
91:2f:54:9a:28:8b:b2:8d:56:f5:00:ff:cc:9b:7b:23:06:08:
f5:21:d9:49:99:27:c0:61:3a:72:59:37:b0:f8:28:b6:d9:71:
85:0d:54:94:89:c5:c7:56:54:35:ba:9d:d8:c5:13:2f:0d:03:
1a:7e:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:51 2026 by rpki-client