Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: JSjON7hgnm9NE7QUN38nDtSN3T2OSiVou8CfWsH65bs=
Subject key identifier: 87:9C:F6:27:4B:57:DB:1E:A6:5F:6C:0C:F0:F7:11:41:73:C4:78:DD
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019D2A3B8FF7E950C020DD89137EDF28D840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 13:00:39 +0000
Manifest this update: Thu 26 Mar 2026 13:00:39 +0000
Manifest next update: Fri 27 Mar 2026 13:00:39 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: 5NEmc1HSgc/B1EWz5ycLTS9pbxWaTVzYuaroUvgd9/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8f:f7:e9:50:c0:20:dd:89:13:7e:df:28:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Mar 26 13:00:39 2026 GMT
Not After : Mar 27 13:00:39 2026 GMT
Subject: CN=879cf6274b57db1ea65f6c0cf0f7114173c478dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:0a:a3:93:0b:5d:99:d2:f1:66:0f:7f:16:
c1:48:40:d8:fd:ad:51:d5:99:f2:56:68:15:2d:62:
c0:cc:ac:3e:3c:ba:36:00:07:3d:3c:f4:97:2a:a1:
a8:7f:2b:84:d4:21:d0:81:0b:83:c8:3c:60:c8:af:
10:84:eb:15:b4:10:3a:30:8d:49:66:ff:60:a1:8a:
68:56:af:7f:50:21:b3:2c:2a:de:5a:0b:7b:a0:d4:
5c:d2:bc:0c:e4:7a:4e:41:81:76:01:9a:06:5d:48:
99:50:f8:06:85:1f:1e:33:05:ed:b7:ff:6f:01:d9:
ba:28:aa:17:36:8f:bc:f6:44:20:25:0b:a8:b6:0f:
7b:3d:cc:46:2b:3d:bf:fb:b7:73:a5:19:58:0d:94:
55:1c:48:aa:d6:b7:14:71:52:9e:11:5b:38:2c:b0:
75:eb:76:64:16:fe:fc:3b:ad:d7:e0:6b:89:4b:6e:
11:91:83:19:24:55:09:86:01:22:0e:4c:81:f4:64:
b5:4a:1d:da:1b:2a:6e:82:29:18:63:4f:08:75:7e:
13:a2:6f:59:1b:f7:9e:3d:1f:60:42:ff:f0:ff:c1:
a2:b6:13:f2:f0:a5:e6:46:24:ac:03:d3:a4:41:90:
bd:9c:fe:79:6e:7f:ae:5b:d8:a7:dc:73:00:b0:a4:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:F6:27:4B:57:DB:1E:A6:5F:6C:0C:F0:F7:11:41:73:C4:78:DD
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:4e:d9:7d:a0:05:b1:f9:cc:99:34:eb:47:de:8d:d3:85:
7b:ea:7d:92:25:b3:27:08:9c:a0:2a:d5:4b:58:fb:15:28:f1:
64:d0:45:7c:80:c5:78:6b:30:fa:25:5d:c5:fd:d0:4d:c6:72:
1e:a0:d1:59:2b:54:fb:f2:d0:82:73:da:b4:fd:7f:e1:ab:e1:
2b:46:a9:99:3d:f4:43:5e:fd:29:3c:bd:e7:14:ab:96:fa:a5:
1f:fa:8f:d6:4c:97:fb:09:7b:a3:d4:3e:bf:3f:79:e4:6f:f0:
32:ea:32:7d:c2:b5:0c:6d:d5:14:bb:3f:c4:46:e1:b6:6d:98:
91:80:89:68:08:51:29:8f:88:21:03:39:55:31:48:f9:c6:86:
cb:f0:dd:54:b4:e1:9a:9b:25:73:c3:b7:af:ce:d0:c5:4f:de:
ae:eb:22:12:ab:73:13:e4:df:36:e8:b0:51:8b:77:09:db:0c:
79:9a:73:31:ec:87:96:77:46:70:7e:b5:88:d9:08:f0:28:71:
e3:e2:89:3d:f3:ab:1a:5c:4f:57:12:c6:56:19:17:14:48:44:
ff:93:50:e1:a8:14:13:34:e6:f7:16:bc:4f:fa:17:5e:ec:52:
57:83:a0:ee:63:6a:ac:71:e8:a8:00:dd:7a:d8:a5:12:8c:5f:
2d:52:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:48 2026 by rpki-client