Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: 4Dkryqv7nSVaaYbYSSrXeVB4tjKQfxFoavDBSQKjEIo=
Subject key identifier: 7F:CD:10:AC:1F:9A:BE:66:36:0D:46:22:68:FC:16:B3:F0:14:C3:08
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019E1E35451756A9583D31DAC6630D5F4E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 22:01:08 +0000
Manifest this update: Tue 12 May 2026 22:01:08 +0000
Manifest next update: Wed 13 May 2026 22:01:08 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: d+l8qYaSqkdeOYM1Y8R1uIm3q/ngL3BUjK9mV4v5Wl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:45:17:56:a9:58:3d:31:da:c6:63:0d:5f:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: May 12 22:01:08 2026 GMT
Not After : May 13 22:01:08 2026 GMT
Subject: CN=7fcd10ac1f9abe66360d462268fc16b3f014c308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:c3:7a:91:da:87:94:3e:f5:81:b9:d7:1c:
68:4d:a1:7c:44:1c:c6:10:26:5c:2f:6c:4d:4b:e0:
a2:9d:05:fd:86:6c:1e:a9:ab:d3:c6:ef:06:c4:0a:
df:94:25:e7:43:8c:15:80:b8:33:20:bf:ba:36:2c:
4b:4b:65:cf:dc:2b:20:c5:9b:cb:c9:31:44:47:74:
f9:b5:a0:24:7d:d6:50:04:a5:7c:d5:6b:8c:74:9f:
fa:f9:03:17:0c:e5:1d:5e:36:b4:4f:3d:c6:91:ca:
33:c2:9f:9f:10:2e:4b:4e:88:ae:59:d0:da:bd:2d:
a3:b1:4a:32:cc:53:7e:e1:89:98:f5:56:b8:9a:6c:
60:fe:88:cb:04:88:e8:31:10:dc:b2:81:09:34:b4:
d6:f7:ff:30:50:4c:42:1b:74:e2:55:0e:02:a4:21:
7f:7c:cf:bc:05:a5:84:dc:d6:2d:99:ce:52:46:61:
f5:df:70:8e:60:5a:cb:85:5b:ca:b2:99:6f:3b:b1:
9b:d7:14:21:1e:12:c7:d8:58:6d:7e:c8:7e:f5:f2:
36:2c:1b:8c:f3:3d:9d:9b:f3:98:46:88:b3:37:0e:
58:c1:d5:d2:3f:ff:22:4d:1e:93:f0:30:d9:06:8d:
cc:05:43:ce:38:a5:bf:87:e6:b7:a3:5d:52:53:26:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:10:AC:1F:9A:BE:66:36:0D:46:22:68:FC:16:B3:F0:14:C3:08
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0c:f8:12:d3:71:66:a8:6e:4d:00:31:17:3e:f9:16:ac:80:
fc:f5:7e:4e:db:0f:ee:78:78:3f:09:6b:d0:4a:8e:95:90:5a:
99:1e:91:63:d7:21:0c:33:d4:df:d6:b2:8d:fe:ef:51:c6:0f:
8a:a8:7e:34:e7:a5:da:6c:29:61:36:d9:d9:cd:2b:89:f7:ab:
4b:9a:b6:ec:1d:77:12:50:fe:04:50:35:42:b6:6d:e9:48:bb:
72:8f:6f:05:f9:76:cd:98:88:b9:3e:89:23:6c:24:35:2d:08:
6d:f5:64:ee:cd:f0:f4:d8:c8:dd:ee:0e:6e:3c:e6:7d:6f:61:
fe:61:6b:e6:14:eb:23:22:13:38:56:13:db:54:b2:98:5f:82:
e9:f3:83:8c:73:44:41:a9:10:62:21:f2:0b:f3:86:5d:8c:e3:
ba:04:f4:ac:70:6f:f7:ec:a4:86:c8:9d:ba:a7:6b:e4:56:69:
b4:a7:34:3e:02:6a:ff:84:64:30:f5:80:3c:0a:4b:1e:46:92:
77:31:1b:8b:2e:11:22:ad:06:34:52:7a:fd:18:8e:3e:e8:26:
28:13:6d:58:ac:b8:da:df:e8:55:4d:85:67:0c:54:84:28:8c:
ef:3f:81:f4:21:70:65:d7:af:a0:6a:60:4f:92:91:b1:3b:26:
04:35:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:17 2026 by rpki-client