Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: 1kA3A+uHGfoU3t7BrY2YnuLLdu+UO59fQdsFKUeCqRI=
Subject key identifier: 1C:87:99:EE:2C:D0:51:69:BE:6E:5C:7A:CD:50:9D:3C:15:2F:62:48
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 019D29296EE59F58D8E6B9985A1AAF231B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0C98
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: 8BfP3EhEaBgAvPGfXUJoXwMhtp0G4EVlALpHtOmB1p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6e:e5:9f:58:d8:e6:b9:98:5a:1a:af:23:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=1c8799ee2cd05169be6e5c7acd509d3c152f6248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:65:eb:b7:e0:c4:b0:c6:5b:5a:03:64:4a:
ae:44:eb:1a:c2:3a:b5:d1:8f:92:8d:68:36:a5:87:
d8:d0:0f:0d:4c:ab:ba:18:dd:d7:73:b4:e5:c3:ff:
b7:d8:76:39:3f:79:d6:0c:1d:63:be:9d:8d:76:2c:
e4:ef:6b:8a:65:a7:c5:02:ff:85:ec:49:67:38:07:
3d:c5:c0:3c:c2:24:33:be:f5:96:37:af:98:62:73:
35:8e:67:67:6a:09:d3:65:cf:36:ec:02:74:ad:33:
45:9e:c3:ce:a8:a5:63:0a:55:ff:7d:ce:04:4c:23:
8f:48:72:bf:ae:ee:d4:9f:08:a2:c7:fe:16:76:f8:
6c:5f:b1:ac:2b:18:52:f2:76:95:32:77:bd:c4:6b:
51:e4:9d:59:5a:7c:16:92:67:12:6f:00:61:46:de:
9f:db:72:15:84:ab:a0:48:b0:5d:c2:22:5b:2a:d8:
b9:02:f1:4f:61:ef:e3:01:45:13:37:e4:e3:38:c3:
f1:26:0d:a5:e8:a0:0d:72:20:d0:eb:b6:62:3f:4a:
22:fb:04:7b:93:46:b7:40:24:34:d8:55:a7:b5:5f:
f6:d5:11:ce:f1:f7:3b:de:9b:fa:b2:5e:cf:12:d5:
b1:ae:ce:b2:69:4b:e4:4c:99:80:b2:99:21:7b:69:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:99:EE:2C:D0:51:69:BE:6E:5C:7A:CD:50:9D:3C:15:2F:62:48
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3b:d2:06:18:ff:37:c0:c7:1b:3e:1e:78:c2:af:2d:e2:9c:
13:e6:eb:ed:0f:7a:0b:7c:8f:f4:f3:ad:a3:81:3a:03:9f:6e:
dc:6f:8c:87:46:8b:aa:fd:30:23:c3:66:3c:87:71:ff:23:96:
30:ed:7b:7a:d9:12:c1:e9:49:96:93:c6:bd:2e:32:bd:eb:3e:
7f:6f:c7:93:d4:75:37:e8:e8:85:a0:b6:1a:17:e1:a5:83:a0:
0a:ef:c5:60:b1:04:5b:13:01:d2:81:e8:f9:72:41:48:19:c4:
a4:cf:07:f4:3b:f9:b1:b2:08:b7:7e:03:48:8a:13:73:d2:9f:
b5:2a:6f:4f:67:8b:c9:ce:36:b0:6d:17:6d:fe:40:0f:ab:95:
f8:d6:5d:50:06:d1:4f:4a:eb:84:c4:fb:d8:d5:bf:5d:c8:49:
fb:4e:91:d4:59:3f:03:7f:cf:78:88:6d:9d:aa:b6:5c:68:5c:
7a:b4:d8:fa:49:28:96:7e:93:0d:1e:2e:29:77:49:a8:80:60:
49:9f:f6:04:ba:71:f5:19:95:4f:ac:ee:b4:91:ff:70:17:ae:
71:da:9b:ab:a8:eb:83:39:a9:76:a6:03:8c:ce:e0:10:49:16:
03:89:7d:c5:09:81:17:d7:9f:e0:d6:94:32:dd:02:41:bd:ff:
ac:6e:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:10 2026 by rpki-client