Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: fqerq1mlU2wppP0TK4PUhO0jtKPOau9slYZ5GCR2YE8=
Subject key identifier: 10:E3:2E:98:3D:BE:26:AA:F9:CC:67:D6:13:FB:61:18:67:24:80:5E
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019CAD598909106F0D0A2F42A7E4593E0E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:00:51 +0000
Manifest this update: Mon 02 Mar 2026 07:00:51 +0000
Manifest next update: Tue 03 Mar 2026 07:00:51 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: c69XgM2PRmffNqch+Rcz/idhZjGRUQUfbeE8sF+GcP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:89:09:10:6f:0d:0a:2f:42:a7:e4:59:3e:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Mar 2 07:00:51 2026 GMT
Not After : Mar 3 07:00:51 2026 GMT
Subject: CN=10e32e983dbe26aaf9cc67d613fb61186724805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:c1:46:8a:7b:ab:d1:4f:3c:2d:3c:b2:c5:
3d:1b:32:5d:ea:c7:e2:4b:d5:39:02:f2:9c:96:a3:
d3:05:f2:be:12:3b:12:f1:42:3d:bd:3c:20:86:1a:
58:1e:a8:68:10:fc:d7:df:d4:42:57:28:c2:6a:10:
69:7b:7a:93:93:e2:83:93:49:2b:5c:df:ef:95:eb:
b7:df:ae:9c:d7:0e:0b:00:89:e7:b3:ad:58:b3:92:
0f:d0:9c:3f:26:65:b7:b1:75:31:5b:72:90:79:e5:
76:df:42:d6:43:a1:45:c1:55:9f:ea:1e:59:3f:e4:
18:3c:c3:a1:19:ce:17:a1:10:2d:b8:13:6d:8f:df:
77:5b:4b:c0:31:f0:d9:44:ca:a7:50:e0:4a:bd:38:
48:0e:45:a0:4a:de:9c:e7:8f:1a:72:c0:3f:a8:4a:
10:b8:2f:f8:ab:52:cc:35:b4:33:05:58:02:6e:6e:
69:7d:a7:dc:87:aa:36:e2:e6:50:e4:43:8f:c6:eb:
48:4a:8d:46:52:94:5a:ff:49:c1:85:6b:6b:74:89:
db:44:44:5a:eb:16:78:14:cb:c2:91:53:6b:dd:bd:
99:3c:18:b0:cd:e7:53:2d:b4:6d:79:a0:12:9d:a8:
a6:d6:24:4d:b1:be:3e:8a:28:c4:e6:92:d7:01:8f:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:2E:98:3D:BE:26:AA:F9:CC:67:D6:13:FB:61:18:67:24:80:5E
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:64:32:fe:8c:26:7f:da:ac:5d:f7:25:0f:30:2c:20:84:4b:
ef:f2:7c:b0:6a:1c:bd:55:bd:bf:15:ea:f2:78:a1:a8:32:85:
65:90:a2:84:64:83:54:84:6b:11:46:fe:07:ff:1f:a7:85:ad:
45:c4:68:8a:d2:9b:48:e4:3e:f0:0b:a0:5e:a4:94:da:32:de:
19:c4:34:c4:1d:24:10:27:0c:5d:6d:74:c6:4a:cb:ca:12:b7:
76:41:f5:1a:c0:91:b7:dc:38:97:14:7e:87:a1:82:35:0b:0b:
7c:0d:66:81:8c:f6:58:b2:bd:d5:79:1a:7c:79:21:23:52:69:
25:c8:b1:7d:97:64:3d:96:3f:20:f5:cf:fe:d7:76:fe:2f:f0:
f5:f1:99:67:1c:72:e1:de:12:1d:a9:c3:15:0e:3f:54:4b:f8:
26:d9:9e:eb:5b:dc:17:1a:03:5b:b0:a9:d8:eb:af:b9:00:72:
0a:c5:ab:e6:0d:90:a3:14:20:8a:54:35:10:3c:96:7a:12:47:
c0:a9:ce:70:2c:66:f5:2e:ca:b3:bd:2e:bd:90:66:67:db:76:
c3:5c:c6:ad:69:f4:7f:53:69:7f:77:e7:8c:06:68:e4:77:ae:
fd:35:77:8e:d1:1c:60:03:7f:2c:95:c4:48:de:b9:7d:cb:f6:
e0:27:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:53 2026 by rpki-client