
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: 70o876U3wZmVy97Zv+eilVB5NH0yUhtYMFxqoOiRGJg=
Subject key identifier: 4A:1A:0F:42:11:EF:AB:DA:0C:77:D2:30:96:A6:DE:16:ED:E7:20:E4
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 019E20FFB6A0E28230AD4CA1711BF444B9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 0962
Signing time: Wed 13 May 2026 11:01:29 +0000
Manifest this update: Wed 13 May 2026 11:01:29 +0000
Manifest next update: Thu 14 May 2026 11:01:29 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: KjVXKrbdExEV6xjbZokWlpLd8VvE8lj8knI5MFVCWDI=)
2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:b6:a0:e2:82:30:ad:4c:a1:71:1b:f4:44:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: May 13 11:01:29 2026 GMT
Not After : May 14 11:01:29 2026 GMT
Subject: CN=4a1a0f4211efabda0c77d23096a6de16ede720e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:37:42:dc:7c:f0:b9:c9:02:87:9c:75:b7:
0b:e3:5d:5f:da:fb:80:2c:b5:51:db:30:8a:69:64:
09:fb:7d:6f:84:17:3c:27:21:db:00:e5:65:41:c4:
c6:4a:70:be:d5:34:be:96:5a:4b:5f:75:a4:3f:4e:
8d:87:36:fb:22:92:80:dc:b9:bc:36:a6:2b:42:cb:
20:ba:27:10:88:91:f6:d2:00:55:44:e6:86:c2:11:
75:ba:ed:ae:bb:aa:eb:3d:a8:0d:ee:0e:0a:6a:26:
46:63:30:c3:cc:68:9d:a2:58:59:0b:6c:e5:7a:cd:
1d:a5:15:6b:26:a8:ef:7a:72:80:bb:12:f2:59:5f:
99:d2:35:91:85:e3:b2:43:c8:c9:6e:65:0f:92:37:
b3:74:31:41:1f:78:d2:7e:d7:60:49:96:c5:8c:02:
52:b0:4a:fb:85:20:df:a5:c4:db:55:1d:99:ab:93:
56:6e:dc:0c:09:5b:45:57:b0:da:ce:fd:2b:55:e6:
8d:ac:59:4d:1c:ef:c9:09:69:a1:b6:ea:39:4d:d3:
97:64:fa:25:81:26:f7:54:8c:2d:1c:b7:89:ab:2a:
5d:66:52:c3:f5:62:5d:1a:18:2d:56:f5:4a:27:e3:
3b:b6:4f:31:70:81:94:0d:36:a9:80:a1:6e:f2:ed:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1A:0F:42:11:EF:AB:DA:0C:77:D2:30:96:A6:DE:16:ED:E7:20:E4
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:25:f3:47:48:19:3a:ec:e2:a2:c4:ad:90:0f:ce:20:ab:48:
c8:a5:b5:fd:a9:fb:ca:cc:c2:53:94:12:f2:82:1c:26:67:e0:
5b:77:3d:41:48:a8:1c:43:b2:32:d6:a9:91:61:6b:e7:2b:50:
fc:43:0f:ae:41:56:26:11:03:de:a8:f8:b3:fe:3c:e3:ff:ad:
cf:d5:24:c1:15:60:ba:a9:f9:e4:12:7e:3d:00:24:4e:a2:30:
53:7d:3c:09:cd:24:14:43:25:77:ab:c1:85:b8:b9:9c:63:2e:
c8:86:93:35:1d:fd:05:92:3e:6c:9f:dc:7d:fc:97:4d:81:f1:
71:f4:b2:0d:b9:fc:1b:ca:ee:37:49:a3:4d:91:fd:35:f3:e9:
50:4e:fe:98:62:2e:32:d7:7c:9d:71:db:cd:ac:f3:86:74:ac:
5a:05:81:e1:60:65:02:2f:4f:be:ba:31:76:31:c8:d2:2e:98:
c1:99:99:44:c4:36:85:46:63:e8:9c:84:18:4c:75:be:b0:65:
dc:d7:f1:6a:3f:69:f3:23:b8:52:e1:1c:7a:ac:2f:14:4c:5d:
96:d2:3c:fa:df:4c:8c:63:8f:2d:49:f9:9b:e8:b5:cb:0f:2e:
84:0c:f6:b0:8d:07:e3:2a:f4:a2:88:17:d9:c7:36:1f:95:fc:
cd:e0:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:50 2026 by rpki-client