Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: LZT4vEzCoRd55q/GJ7YxnnE+k0yFJOFMuLN3IjfiD1c=
Subject key identifier: E9:40:3D:FC:52:32:40:F9:01:14:00:6C:B1:8F:1F:21:6F:92:F3:3D
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019DA48AE5E10C1023CE308546E69D7D77C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 07:00:59 +0000
Manifest this update: Sun 19 Apr 2026 07:00:59 +0000
Manifest next update: Mon 20 Apr 2026 07:00:59 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: mPNaixy+6jmayTVnMo8vqMJTzRl/1ys+kZ4Gy40KYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e5:e1:0c:10:23:ce:30:85:46:e6:9d:7d:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Apr 19 07:00:59 2026 GMT
Not After : Apr 20 07:00:59 2026 GMT
Subject: CN=e9403dfc523240f90114006cb18f1f216f92f33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:84:65:aa:b5:d8:53:d0:e3:7d:36:a0:0f:
77:23:c8:f3:22:5b:27:e8:bb:65:74:64:fe:72:9d:
88:47:cf:56:10:70:01:99:7e:17:a0:ac:87:8d:96:
1d:b4:80:0c:18:3e:48:59:65:8e:5b:92:86:61:5c:
da:08:5d:30:ba:49:91:3b:15:82:66:2e:68:94:fe:
00:2a:71:8f:38:63:80:d4:d7:b0:51:94:d3:ea:13:
07:74:45:b1:f3:fb:f0:a9:e9:94:3a:6f:48:e8:96:
cc:c2:dd:4d:4b:42:85:74:ac:fc:05:b5:3d:da:b7:
d4:62:62:cf:b6:f9:ca:c1:e2:c7:a3:4c:77:2d:b7:
97:4b:68:a3:12:e4:fe:d9:df:72:8e:e0:46:72:7a:
cc:4a:dd:1e:7c:8b:6e:7b:4e:98:23:0e:31:44:41:
82:9a:89:bd:10:be:dd:63:80:86:09:30:5c:52:45:
a7:93:0c:3e:22:7b:e4:71:b1:7e:8f:0f:39:d8:f1:
e5:ea:25:49:9c:bf:f9:15:73:af:7c:51:c6:61:aa:
bd:d8:80:8d:f9:4f:9b:4b:9a:30:e2:95:b7:f5:19:
fd:07:f1:92:7a:13:e4:ab:dd:85:27:ef:6c:4a:67:
b6:54:d0:1e:5b:20:cc:7c:f7:fd:b4:c2:a7:23:78:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:3D:FC:52:32:40:F9:01:14:00:6C:B1:8F:1F:21:6F:92:F3:3D
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:04:7f:e2:89:87:2b:5f:51:db:f7:70:aa:04:d6:20:0d:3a:
76:9d:d4:30:4c:7e:67:eb:99:cc:5c:4b:12:c1:45:e9:74:67:
43:69:4b:a5:3c:a0:0a:70:51:4d:27:8d:50:9d:15:44:28:c8:
4b:75:f6:9d:db:19:2a:f7:2f:a8:86:9a:bc:ad:ae:ac:22:15:
5d:2d:f5:d9:46:f9:3f:f9:04:07:93:35:f0:8e:91:71:e2:c0:
72:70:5d:af:b1:1c:da:ad:38:30:14:fc:7a:2c:67:74:11:e3:
43:64:4c:c6:fc:46:32:a9:68:ff:1d:a1:4f:c1:ed:37:db:7d:
f3:bd:60:a6:d5:35:2a:7e:fa:ad:c4:dd:77:bd:b5:e7:4f:7c:
66:66:34:ea:a0:98:d0:27:e2:6d:67:31:67:9e:97:b6:ea:ff:
f9:11:db:a3:d0:72:b1:62:2b:35:65:6f:bd:eb:2a:8c:d6:95:
b3:7f:da:2e:8b:1c:90:2a:86:c5:0c:b7:ac:a1:13:28:be:54:
5d:f3:10:2b:9e:98:5b:77:84:1b:49:27:50:cc:ba:f6:b7:3c:
84:0d:e2:1f:b4:b5:ba:a1:42:25:dd:7c:39:ab:d4:2d:21:28:
40:46:8a:b3:f5:e7:b7:15:f5:3e:f4:f0:e1:e0:f1:21:f5:99:
ff:dc:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:35 2026 by rpki-client