Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: tku6eXf6KHJZeueZzvX0tjC5jhUsVJmtmhV6i5fqYDk=
Subject key identifier: 08:30:39:1B:04:84:11:AE:41:EB:48:D6:0F:DF:8C:0C:CD:E5:CF:09
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019FAB2C42FE634328DC1CA4EF2873F4F9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 0A5E
Signing time: Wed 29 Jul 2026 00:00:32 +0000
Manifest this update: Wed 29 Jul 2026 00:00:32 +0000
Manifest next update: Thu 30 Jul 2026 00:00:32 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: CMd222ikqnzGCnnEkLZCBIAhhMYiKi/ju6QAN/TxKnE=)
2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:42:fe:63:43:28:dc:1c:a4:ef:28:73:f4:f9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jul 29 00:00:32 2026 GMT
Not After : Jul 30 00:00:32 2026 GMT
Subject: CN=0830391b048411ae41eb48d60fdf8c0ccde5cf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:98:08:63:1c:fc:86:23:ce:86:91:22:e5:
13:c8:b6:aa:66:f0:4c:65:1e:48:66:c6:8f:1a:42:
35:e2:26:a0:91:39:8f:55:8d:9b:08:e5:98:4e:dc:
a6:7e:47:8c:13:b7:59:f5:05:c8:6d:ef:ea:d9:2c:
0f:5a:9f:38:81:86:e0:3e:b1:45:f9:f2:a3:0a:cc:
79:d2:36:3d:8b:79:10:ee:90:5a:c5:09:3d:0a:ea:
a9:22:af:2e:3d:c8:c3:02:32:6b:d6:34:a2:4b:cd:
9d:af:52:52:30:80:d5:9c:81:ae:28:de:de:56:11:
47:46:8d:19:3c:63:9b:4c:9f:a0:05:87:14:75:11:
5b:25:01:45:f9:f3:62:10:53:76:47:03:9e:85:d5:
0d:a3:7f:9d:b0:81:8e:63:8f:89:28:fd:de:38:2c:
da:74:90:dd:66:57:2e:48:20:d8:aa:b2:06:11:95:
98:2c:eb:91:59:f7:bf:3c:26:da:6b:76:5e:10:f8:
30:eb:d6:22:df:4c:87:12:f0:fe:70:3c:40:ca:cc:
4e:ae:0f:63:6c:d6:61:69:cd:20:d6:88:51:4e:f7:
f9:ae:b0:9b:da:6c:ca:ca:3a:45:1f:b2:e2:07:2d:
31:e0:d3:f1:41:d4:0e:6b:a2:04:8e:07:c6:fb:fb:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:39:1B:04:84:11:AE:41:EB:48:D6:0F:DF:8C:0C:CD:E5:CF:09
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:25:8e:de:be:1e:67:27:ea:10:5e:fd:e6:9b:2c:33:bc:1c:
22:2d:7e:f4:42:95:3e:42:b2:af:0a:8f:18:40:9d:42:1c:78:
a6:a5:fd:47:b2:34:81:54:5f:6d:1e:68:f1:72:96:44:d5:ed:
6a:1b:a2:96:6c:19:61:4c:27:85:e2:3e:02:f6:2f:6b:26:c7:
ba:e6:54:a3:29:6e:85:b2:8f:e1:70:c6:c7:8e:8c:87:4e:ea:
f0:3b:63:68:48:f8:9d:d1:77:8d:a0:d4:5c:47:5e:b3:3f:77:
a6:d9:c7:27:1d:a0:d6:ae:56:cb:b0:93:d6:c1:23:cc:63:23:
97:94:c6:38:ca:42:c7:c2:c5:d8:6a:19:8a:02:f4:3c:9e:b1:
a1:ca:b1:4f:ed:65:70:ad:df:bb:1c:94:e1:8c:66:cc:e0:eb:
99:b9:a3:2a:05:74:4e:67:e7:34:42:9b:99:42:c5:18:34:91:
b8:b1:7d:ba:4f:27:61:89:e4:6c:eb:1e:de:01:ae:f3:53:a8:
f6:b8:53:06:60:8c:d6:0a:1c:1c:51:82:5c:b2:e8:cd:ab:d3:
01:bf:5f:6f:30:bc:1f:63:71:b2:fb:a0:05:46:71:f1:ec:9f:
7d:bd:eb:8b:d0:87:0b:bc:ec:c4:0e:fd:0b:88:3b:d1:64:44:
f2:b0:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:53 2026 by rpki-client