Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: 5kXRseqedV/agCM4WVdS4dvqOJUlPvfMcVTrDTTz5dQ=
Subject key identifier: 82:33:80:04:FD:A9:7D:89:04:AC:08:B7:E5:CF:65:E5:DB:71:62:8F
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 01A0C7EB54474555D79EB4B6F29DC106367F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1A63
Signing time: Tue 22 Sep 2026 07:01:23 +0000
Manifest this update: Tue 22 Sep 2026 07:01:23 +0000
Manifest next update: Wed 23 Sep 2026 07:01:23 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: Ib8x8iPtKwQ2m9oO8YUOPndiWv3KEs3lMFSptGiorWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:54:47:45:55:d7:9e:b4:b6:f2:9d:c1:06:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Sep 22 07:01:23 2026 GMT
Not After : Sep 23 07:01:23 2026 GMT
Subject: CN=82338004fda97d8904ac08b7e5cf65e5db71628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:64:2e:68:c6:9d:b2:cd:11:e0:71:da:9b:
2d:60:0a:f0:a3:65:09:15:e9:d5:4e:6e:1a:3f:00:
fd:b1:4f:24:f0:22:7f:7a:7d:f1:99:26:d9:7c:d1:
2f:55:0a:81:5c:7c:88:21:de:9e:a8:e2:28:e4:9b:
b1:73:55:6d:f3:21:8f:80:41:3c:9f:b2:2b:f3:32:
a0:53:af:c9:1a:af:a5:ec:50:d7:be:2e:70:30:4c:
a9:5a:28:7d:0d:30:d0:2a:e6:47:79:71:fa:4f:ef:
16:3a:6f:be:b7:cc:30:d9:44:7b:2a:c2:79:b3:6e:
de:bb:fc:38:02:d8:a9:c8:50:94:09:b2:96:d5:ce:
6c:a6:ab:ba:a9:2f:9f:83:c3:89:86:ac:07:6f:40:
c9:95:f0:55:43:d9:0c:6f:be:a0:88:da:99:04:f1:
ba:a0:a9:6f:ad:04:37:35:d9:5d:fe:a2:dc:68:ce:
d9:c9:3d:5d:7f:d1:67:c7:80:16:b8:76:a7:3a:a1:
68:2d:0a:13:e5:15:90:9a:ba:9d:2e:90:e6:f0:08:
de:60:a5:aa:c0:52:35:40:b0:ef:96:a9:68:b5:c9:
50:e7:55:49:8d:45:9b:3f:d1:52:3d:a0:6a:84:10:
73:3c:b4:7a:79:77:d9:70:73:b8:d9:cf:33:20:c7:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:80:04:FD:A9:7D:89:04:AC:08:B7:E5:CF:65:E5:DB:71:62:8F
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f4:8c:f0:9c:82:00:a4:9d:da:91:c5:60:29:d0:2a:3d:21:
87:63:a9:ab:94:f6:d0:ac:94:78:d6:12:86:20:ab:6f:c2:d9:
c8:1c:ae:ee:fa:23:26:e6:4d:5e:10:91:23:d7:a0:9c:b2:31:
e3:f3:92:fb:c2:aa:a0:00:05:f7:5f:e1:dd:b7:83:7d:11:b3:
c8:24:1c:b0:5a:27:96:a8:72:6f:f3:ad:69:af:ed:98:b0:c8:
d6:37:f3:7e:12:fa:75:8c:d6:75:e9:72:dc:8f:20:d7:62:52:
fe:58:35:36:c5:4b:31:40:43:ff:91:c3:42:f1:17:48:1e:e6:
69:c7:b6:41:2e:a1:50:61:ba:ef:2d:d9:90:16:6c:03:ce:76:
5f:41:45:cd:29:48:b8:84:52:16:32:ac:86:7e:be:03:55:3a:
1f:04:dc:43:e5:b1:c1:df:da:fc:14:19:90:e2:23:34:5e:e4:
06:d5:26:d1:1c:97:08:dc:fa:31:1a:2f:2d:88:c9:7b:28:9c:
82:cf:ab:44:73:04:58:28:25:4e:58:ba:1b:33:4e:00:99:12:
18:4c:64:d5:49:de:97:45:73:58:08:9f:5e:f9:e7:06:d0:32:
37:1b:b5:c3:61:a7:b7:80:fd:01:7f:dd:7a:90:f8:13:28:17:
b5:22:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:10:28 2026 by rpki-client