
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: jd+JE/2tQHwptqvh7sb84CE4BmXl+sM41KpzcK5O7ZM=
Subject key identifier: 2D:BD:B6:02:0D:3C:5A:2F:9C:47:CE:F9:AF:C4:DF:A0:04:C3:74:E8
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019F17F96F07817EB58D57EC05B0D10ED4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 10:00:50 +0000
Manifest this update: Tue 30 Jun 2026 10:00:50 +0000
Manifest next update: Wed 01 Jul 2026 10:00:50 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: RB4UnoDmFnPDJ2D2/0+2qmPo1Xyw4XMm3wkMJYgvGuc=)
2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:6f:07:81:7e:b5:8d:57:ec:05:b0:d1:0e:d4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Jun 30 10:00:50 2026 GMT
Not After : Jul 1 10:00:50 2026 GMT
Subject: CN=2dbdb6020d3c5a2f9c47cef9afc4dfa004c374e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:24:fc:ac:45:0e:03:0d:89:cc:4a:45:c4:
2c:b6:34:03:e8:a7:7d:f0:58:96:71:e9:c5:91:65:
51:a1:6b:c3:e7:61:2e:38:9f:05:0a:46:d3:d1:70:
38:a1:63:a0:f1:56:f5:6d:c5:8e:bd:5b:1d:05:1b:
8d:db:0a:28:50:af:56:d7:0c:98:73:96:f4:70:0e:
74:dd:b4:9b:1d:03:b8:0a:0c:9e:69:ae:16:68:2b:
df:f8:c4:01:0c:f7:c5:87:21:a3:1b:f4:a0:04:1f:
e0:f1:b0:79:e1:b7:92:eb:d5:44:57:3d:5c:40:d7:
38:96:f9:14:2e:50:3f:5b:b2:d6:4f:4f:f9:0e:58:
79:de:f6:57:97:bf:33:20:fb:9c:a3:5b:e9:01:1b:
54:a5:b6:de:b1:52:d1:c3:a1:ce:8f:1c:fe:05:24:
9e:fa:a4:b7:90:97:fd:2b:ea:7a:2b:68:80:a0:f2:
b1:0b:e8:0a:bb:20:66:9f:62:77:09:37:ef:b5:67:
da:3a:7b:93:44:ea:e2:00:1c:27:53:e5:c3:c3:b6:
7c:be:e1:03:e5:08:db:0d:3c:ad:3b:e4:87:cb:e2:
38:8f:d8:40:9a:a1:83:9d:a3:f4:e8:34:93:a0:1a:
5c:fc:85:b3:5c:ad:31:3b:77:5b:3b:3b:fe:05:4d:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:B6:02:0D:3C:5A:2F:9C:47:CE:F9:AF:C4:DF:A0:04:C3:74:E8
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6c:55:86:a4:cd:6c:fb:58:b3:dc:0e:80:31:bb:1f:24:8f:
5a:08:9e:c3:c0:b2:68:61:f6:dc:de:2e:83:b1:b3:da:b0:84:
39:e8:01:b9:5a:c5:b1:f1:50:12:7a:37:4b:f7:ac:81:d9:a4:
dc:68:12:f7:62:5c:16:6d:77:03:4b:1a:99:27:21:3a:8f:6b:
69:0c:39:50:db:f5:1e:1c:90:a6:75:0f:25:ab:80:c4:27:f4:
cf:15:79:b7:3c:6a:7a:bd:44:fc:8a:26:ef:2d:e7:5a:0b:ce:
34:69:2a:cd:a4:a2:3e:f8:f1:3e:a3:73:15:00:51:4f:dc:0a:
6f:36:fe:b4:f2:13:33:44:e7:93:96:72:dc:93:f3:58:ac:1c:
d0:08:91:5b:1e:36:d0:f6:a0:bf:02:61:9c:18:d8:9c:9e:26:
dd:df:63:ec:fe:7d:15:cb:e4:d8:c6:38:9e:01:74:7b:8c:ae:
64:60:e6:2d:50:a3:f8:96:d6:c2:5b:6f:75:8b:52:9c:16:f8:
5c:4a:8e:4d:52:1b:69:e1:00:a6:30:30:76:ef:93:2d:e1:73:
a2:f4:d3:fe:7f:eb:7a:de:6e:b7:6f:3d:6c:4e:a8:23:5b:4b:
52:bd:e2:aa:8c:26:44:2d:94:59:92:1a:b4:55:54:d9:73:65:
9f:9d:0b:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8X+W8HgX61jVfsBbDRDtTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm
NWZjYjIwHhcNMjYwNjMwMTAwMDUwWhcNMjYwNzAxMTAwMDUwWjAzMTEwLwYDVQQD
EygyZGJkYjYwMjBkM2M1YTJmOWM0N2NlZjlhZmM0ZGZhMDA0YzM3NGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSQk/KxFDgMNicxKRcQstjQD6Kd9
8FiWcenFkWVRoWvD52EuOJ8FCkbT0XA4oWOg8Vb1bcWOvVsdBRuN2wooUK9W1wyY
c5b0cA503bSbHQO4Cgyeaa4WaCvf+MQBDPfFhyGjG/SgBB/g8bB54beS69VEVz1c
QNc4lvkULlA/W7LWT0/5Dlh53vZXl78zIPuco1vpARtUpbbesVLRw6HOjxz+BSSe
+qS3kJf9K+p6K2iAoPKxC+gKuyBmn2J3CTfvtWfaOnuTROriABwnU+XDw7Z8vuED
5QjbDTytO+SHy+I4j9hAmqGDnaP06DSToBpc/IWzXK0xO3dbOzv+BU11EQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC29tgINPFovnEfO+a/E36AEw3ToMB8GA1UdIwQY
MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2
LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk
ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWxV
hqTNbPtYs9wOgDG7HySPWgiew8CyaGH23N4ug7Gz2rCEOegBuVrFsfFQEno3S/es
gdmk3GgS92JcFm13A0samSchOo9raQw5UNv1HhyQpnUPJauAxCf0zxV5tzxqer1E
/Iom7y3nWgvONGkqzaSiPvjxPqNzFQBRT9wKbzb+tPITM0Tnk5Zy3JPzWKwc0AiR
Wx420PagvwJhnBjYnJ4m3d9j7P59Fcvk2MY4ngF0e4yuZGDmLVCj+JbWwltvdYtS
nBb4XEqOTVIbaeEApjAwdu+TLeFzovTT/n/ret5ut289bE6oI1tLUr3iqowmRC2U
WZIatFVU2XNln50LQA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:56 2026 by rpki-client