Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: gHa0jEaOB5J6S8GY7EK1wWGR20uOM4oOYFOp/+6XCnI=
Subject key identifier: 0D:0F:09:78:64:D0:FD:03:C0:1B:44:7B:1F:F6:81:D8:7C:61:1F:FC
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019CAC7E4D47048BCACA92796E316D3E8787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 08D1
Signing time: Mon 02 Mar 2026 03:01:24 +0000
Manifest this update: Mon 02 Mar 2026 03:01:24 +0000
Manifest next update: Tue 03 Mar 2026 03:01:24 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: Ni8HKorJ1oO1LYEF6VceFOQ/NYI6MyMMQmqthIj7+T4=)
2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4d:47:04:8b:ca:ca:92:79:6e:31:6d:3e:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Mar 2 03:01:24 2026 GMT
Not After : Mar 3 03:01:24 2026 GMT
Subject: CN=0d0f097864d0fd03c01b447b1ff681d87c611ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:4d:4c:0e:3e:a4:9f:1f:ce:3f:be:97:8e:
02:88:42:fa:17:33:fa:ec:57:1e:42:c0:af:cf:32:
e8:3a:f9:c7:c7:c9:d4:5b:b1:0a:88:7d:c9:e5:e5:
6f:cb:73:9d:e9:b0:84:be:60:de:b4:00:58:b2:75:
16:44:85:40:54:96:d4:3e:76:b8:04:b2:6b:0f:f5:
56:eb:55:12:bf:68:03:6d:9f:37:23:07:d5:9b:1f:
01:40:be:71:a0:4d:b6:48:6a:c8:f9:76:ee:73:1a:
46:22:5a:47:f0:38:9d:84:2b:d8:d7:2b:ea:72:51:
03:2a:0a:e4:3e:c5:15:07:ba:1a:c4:df:5f:3c:a2:
45:1c:55:31:e1:b2:60:a1:ca:7c:fe:82:66:50:09:
c7:3e:9f:16:41:57:07:48:77:10:52:64:51:a3:a9:
de:a1:95:e5:e2:50:1e:44:2d:a4:ca:04:fa:39:ca:
27:42:33:5a:c7:96:97:cf:95:df:44:72:b4:94:2a:
b7:50:90:22:8c:8d:1f:aa:53:0b:9a:f7:6b:1c:62:
4f:10:2c:1c:f8:95:1a:ba:a4:f4:26:de:4b:37:86:
9a:7b:f7:70:94:14:0b:12:49:60:67:0e:a5:c8:f4:
a4:67:d0:75:66:8c:ca:86:5d:96:88:b8:d9:21:ef:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:09:78:64:D0:FD:03:C0:1B:44:7B:1F:F6:81:D8:7C:61:1F:FC
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:68:2b:be:dd:99:c3:d2:18:12:34:8b:c1:7d:b6:ef:84:bd:
53:a4:3e:dd:8c:6a:e5:eb:9f:9b:70:63:86:81:ab:ed:e6:ff:
79:a6:ae:50:0b:6a:8f:12:a0:da:0a:bd:83:88:f4:f9:0b:2d:
d2:a7:43:f9:5c:94:25:24:93:81:59:ac:65:f4:aa:f6:7b:98:
2e:f9:62:f0:ce:c9:07:b6:20:aa:97:d8:4f:09:db:dc:ef:59:
92:d7:2a:76:f8:f5:58:a9:0b:3b:3f:95:d7:c0:22:30:67:cc:
30:f9:12:01:9d:e0:fb:8b:8b:75:70:2e:78:49:f9:a1:0c:41:
56:16:79:3a:e1:7e:c7:f1:35:df:ad:83:26:e7:84:5f:c7:bf:
d7:bb:b6:50:4b:67:18:5c:74:ed:de:ad:8a:56:40:15:78:3d:
1b:40:af:6b:b0:57:28:20:57:e1:fb:28:7b:db:52:a0:a9:b5:
92:c9:da:7f:f1:d0:66:9d:55:29:33:e3:36:d6:3d:46:94:c5:
30:1e:d1:7d:36:40:ee:0d:04:e9:f1:fe:b3:0c:5f:08:1a:45:
62:07:11:de:1b:43:e5:ed:16:be:2e:bc:f8:6b:28:0f:d9:7a:
91:4f:9d:58:c8:3e:54:87:88:40:ef:c9:71:61:2e:58:85:e3:
90:8b:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:11 2026 by rpki-client