Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: NZMjHsswKnCzEbzzvmsfYWQgxkT9LVXc/Sma4fJrrFs=
Subject key identifier: 5F:47:ED:3E:A2:2F:8A:C0:6E:D8:33:F1:13:0A:00:21:AB:48:52:18
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019F90FF06E39A7F97A91CD4F5A3015116B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:01:00 +0000
Manifest this update: Thu 23 Jul 2026 22:01:00 +0000
Manifest next update: Fri 24 Jul 2026 22:01:00 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: su9Uc08SV3GH8vFzi/QcQHqGDUC8yXNGPO6L8EpQXmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:06:e3:9a:7f:97:a9:1c:d4:f5:a3:01:51:16:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Jul 23 22:01:00 2026 GMT
Not After : Jul 24 22:01:00 2026 GMT
Subject: CN=5f47ed3ea22f8ac06ed833f1130a0021ab485218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:d8:1a:19:e2:34:5a:09:91:8f:1d:d5:2f:
bc:0e:2c:cf:70:1f:54:b7:fd:c9:ee:cf:4b:4e:ad:
39:6b:ef:89:49:4a:51:e1:ed:2c:cc:02:36:94:5b:
11:c8:a9:91:cc:0d:d2:83:ca:c0:6c:96:fb:30:2c:
56:c2:40:9f:57:20:ae:7c:55:d7:e3:5c:39:c9:4b:
c0:e4:1c:97:7b:87:e5:6d:76:db:27:92:75:d3:bf:
e8:63:ef:36:7c:d6:31:33:db:1a:f4:ee:a5:d1:cb:
a4:b2:af:1f:6d:7d:91:4c:54:88:62:94:58:4e:1a:
18:3d:47:28:3d:11:5b:b2:44:60:f7:f6:ea:29:40:
12:6d:8e:6a:5b:b6:45:2c:36:e7:8f:7e:0f:00:20:
fb:fc:d6:51:3b:eb:e8:bb:1b:2a:ae:88:bd:b6:be:
4f:64:58:7e:dd:d3:08:cf:6f:85:f0:f2:fb:4b:64:
b0:a1:ca:8d:79:18:22:ab:46:19:dd:ff:e2:49:46:
df:14:f7:52:49:e7:5a:0e:bb:a8:17:0d:c8:ac:98:
12:b7:27:a9:af:30:b2:3d:39:3c:f5:7f:02:15:a8:
39:70:2a:15:16:d6:e3:d2:79:d0:de:ab:09:a6:f8:
4d:f1:1c:0c:66:57:34:5c:c6:23:2a:90:1b:4a:3b:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:47:ED:3E:A2:2F:8A:C0:6E:D8:33:F1:13:0A:00:21:AB:48:52:18
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:35:8b:cd:6e:57:43:a4:9f:f3:dc:19:7e:ba:be:db:72:
3e:f8:5b:de:e9:90:45:07:b4:d8:17:41:3b:a7:f0:3e:1a:76:
b4:d5:3e:22:52:18:b6:6d:d1:54:0e:3f:10:15:b8:5e:ee:57:
39:4b:81:0b:c2:7b:7b:a2:a8:0c:45:b2:5d:09:d5:12:f3:75:
eb:31:5b:db:3f:de:d2:a1:54:7a:ae:30:de:9f:53:6b:a7:5b:
90:fc:d1:d0:97:f2:0d:bb:f9:cc:06:08:03:7f:ba:87:53:e7:
2f:d6:d0:7b:bc:9f:6d:41:a4:1c:55:9a:9b:ea:56:8a:a6:a6:
37:14:f5:28:d5:55:cd:b2:e7:b5:ce:15:00:56:1e:1f:b2:27:
5f:e1:e2:de:0f:0f:c7:56:8b:b0:73:cb:0f:87:01:54:a1:c3:
ee:88:c9:79:d6:df:81:41:38:1c:2d:57:ff:1e:57:6f:95:14:
3b:4b:4f:6a:87:85:79:68:ef:42:ef:b5:a3:58:64:33:71:51:
a3:4b:aa:17:7f:97:0f:4c:aa:99:e2:83:41:94:b4:c7:2c:e4:
64:e7:5f:ea:72:31:20:d2:fd:1f:39:61:8b:52:d8:5f:d8:ea:
3c:35:17:b9:f7:7b:73:2f:f0:e1:82:9c:6c:31:18:5b:55:99:
64:09:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:43 2026 by rpki-client