Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: +czuikCz7XJ2KMjIgDJTz1oT8Veix2g4VZXLwRXazg0=
Subject key identifier: AB:C8:C3:3E:1F:13:9A:F0:F6:3A:B8:9E:A4:A2:CA:BC:FD:45:C1:6A
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019EBE7F909C2A9B2E9ECF7AD71F2AD7B733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1955
Signing time: Sat 13 Jun 2026 01:01:31 +0000
Manifest this update: Sat 13 Jun 2026 01:01:31 +0000
Manifest next update: Sun 14 Jun 2026 01:01:31 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: 7nVQ1+wtw0k4G8DgULGnLNlLvSzJnDjQE+gd9tsFFu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:90:9c:2a:9b:2e:9e:cf:7a:d7:1f:2a:d7:b7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Jun 13 01:01:31 2026 GMT
Not After : Jun 14 01:01:31 2026 GMT
Subject: CN=abc8c33e1f139af0f63ab89ea4a2cabcfd45c16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:26:91:5e:91:56:4f:0d:56:27:dd:b2:97:
a9:16:9e:26:9f:88:b6:4e:83:06:14:71:aa:31:a6:
5f:a7:47:9e:25:3e:b5:89:f4:5e:f6:62:01:36:fa:
10:6a:df:17:0d:0a:af:4e:85:a6:41:1d:a1:57:17:
2d:e1:5d:a5:de:3c:47:85:8d:20:37:c1:e5:19:0f:
ba:f2:49:64:80:70:31:e3:47:1f:17:bf:a8:5a:6c:
49:e1:62:6f:e1:50:35:56:0b:b5:4d:e7:0b:e3:31:
90:83:dc:d3:10:7a:92:ac:83:67:ed:65:10:a8:5b:
6e:e1:b7:7c:e1:6f:03:9f:4b:51:c5:a8:d8:fb:ea:
f2:f4:6d:63:cf:19:a8:bc:c3:d9:d3:98:a2:46:94:
b4:97:8b:92:a9:70:ac:99:5b:8d:7a:1d:13:dd:b5:
82:f7:a1:47:5f:75:2e:62:33:19:a1:08:da:38:18:
8b:86:ea:ca:45:6f:9b:6e:28:f0:3f:98:2c:19:85:
7f:9f:3e:13:5a:8e:1c:ae:91:62:f7:df:c3:7e:a1:
16:62:0d:8d:a1:f8:4a:06:26:9b:6d:08:de:fd:3d:
74:db:17:c1:47:99:0c:f3:3f:f4:df:90:aa:44:3a:
bb:fe:92:d2:ae:69:86:07:df:1a:87:01:0d:f0:f1:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:C3:3E:1F:13:9A:F0:F6:3A:B8:9E:A4:A2:CA:BC:FD:45:C1:6A
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f2:14:d1:0b:eb:28:8d:9e:06:cf:13:ca:31:19:59:ad:81:
6c:5c:be:6c:ac:73:a6:fd:18:59:c2:10:ef:26:56:b8:40:72:
b8:ea:53:2e:7d:80:1b:72:05:34:04:af:d2:2c:e2:ac:c6:09:
b9:ed:50:19:08:67:60:3d:be:6e:84:a9:e4:63:99:f2:27:e4:
e5:3b:3a:06:9d:80:23:77:a2:02:29:f3:fe:fe:ae:e3:3e:9d:
b3:64:39:e8:e1:c8:98:91:6c:02:98:a6:d6:3c:b8:88:fb:1d:
e0:7c:3d:24:c1:3b:26:97:d2:ae:e8:5f:7a:c9:bc:e3:42:f4:
61:b1:36:ec:af:ff:67:6c:64:07:b0:22:5a:3d:80:ed:e2:35:
f0:db:d9:04:2c:e4:16:19:54:63:ae:2d:0f:b4:2c:e1:df:d7:
7d:28:d0:c0:d1:09:f3:0c:92:a1:82:e0:92:91:aa:6f:d2:99:
c4:eb:eb:5b:ea:07:a1:0b:7d:5b:18:bb:a4:9a:32:20:16:e4:
25:35:f3:c9:6f:09:45:80:96:90:00:02:37:d2:86:b2:45:1b:
67:ff:b1:fd:9b:6f:10:81:a1:0d:b6:a0:76:1b:ab:82:ef:66:
bc:b6:96:28:6b:c1:1f:5a:dc:3e:de:43:c5:2f:3e:1c:3c:c3:
94:88:ad:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:07 2026 by rpki-client