Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: +9eQ8kDub9LMshSdHBdOjpkJe3izLNiF2Ilyg29Adds=
Subject key identifier: 84:87:50:49:E6:05:0F:CD:E7:84:2C:7B:5A:35:57:02:7D:08:49:A0
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019D40C3AD676892B4D53CCC555B9BD14908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 1895
Signing time: Mon 30 Mar 2026 22:00:58 +0000
Manifest this update: Mon 30 Mar 2026 22:00:58 +0000
Manifest next update: Tue 31 Mar 2026 22:00:58 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: CBY3pUQm1RfhV29o5ocy2t9EB8XZJxb5bmotGb0XcCE=)
2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:c3:ad:67:68:92:b4:d5:3c:cc:55:5b:9b:d1:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Mar 30 22:00:58 2026 GMT
Not After : Mar 31 22:00:58 2026 GMT
Subject: CN=84875049e6050fcde7842c7b5a3557027d0849a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:07:9c:8d:fe:f6:3e:dd:40:a3:0c:c9:d5:
a9:9e:84:26:72:e7:a2:1b:62:1d:0b:4c:27:e9:4d:
9d:0d:83:4e:16:fa:75:0f:02:60:ec:72:9f:83:8e:
c4:d0:61:32:dc:3a:e8:7a:80:66:1d:10:ac:a3:cd:
8e:17:d9:76:10:c8:e5:b7:4b:cf:93:13:64:76:83:
c5:82:9d:17:76:f5:3f:9d:6e:ac:c5:01:e2:4d:09:
a5:c5:9d:4e:b8:d4:5d:17:3f:68:49:56:4c:4a:ba:
47:e8:05:9b:71:2b:8b:3f:14:cc:da:a2:09:95:f2:
4e:be:ab:a8:7a:f8:55:09:e2:b8:4e:80:5a:86:96:
27:52:c8:f2:9b:0b:74:0d:59:08:13:a5:d1:f2:75:
ac:de:c4:ee:03:aa:03:28:44:02:6f:39:b1:35:86:
4d:00:38:b7:08:f9:70:1a:a4:9f:2d:5f:23:a9:cf:
e6:00:1b:8c:3d:b2:6b:14:74:81:96:68:b3:8c:0f:
b5:b3:bb:b2:34:0d:b2:68:7e:0f:2c:8f:de:51:61:
67:0d:06:9f:aa:5c:bf:13:55:3b:b5:d2:51:22:9e:
53:7a:83:21:80:11:1c:75:88:76:6f:7f:99:41:f7:
f7:d3:11:95:4c:c1:1b:77:60:e5:0b:c8:c6:17:18:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:50:49:E6:05:0F:CD:E7:84:2C:7B:5A:35:57:02:7D:08:49:A0
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:95:09:eb:65:97:77:06:ee:6d:56:92:05:f4:4a:6b:50:fe:
6c:b7:b5:cd:80:4d:62:cb:13:72:32:0f:2a:da:e6:02:45:07:
72:76:ab:a1:9c:3e:4c:6a:11:65:06:b7:f7:4f:a6:1c:73:9c:
f2:67:55:92:9c:7d:cf:db:c4:5d:03:0a:94:43:bc:25:ed:d8:
82:c6:71:c2:67:d7:dd:85:57:bf:b1:d3:1e:30:b9:d0:52:3c:
b7:db:1d:e4:7f:6a:9b:aa:50:c4:83:d0:fe:1e:c5:48:52:93:
f9:fe:c0:6a:cd:2e:12:7f:f3:b4:d3:01:a6:73:fc:9d:55:3f:
39:6d:ff:b7:c4:25:7e:67:e7:d8:06:a5:ce:45:ea:6f:8e:72:
98:4e:e6:08:04:6a:76:98:10:f2:0e:5c:2b:e2:34:a3:12:79:
a9:53:e8:ff:7d:28:bc:3f:fd:49:72:5f:58:80:ef:3e:8c:26:
04:1e:15:09:b9:e3:3b:93:ce:ea:ca:d3:39:04:72:81:52:7e:
0d:cc:ce:c3:97:2b:44:06:6c:68:3f:e4:27:c4:b1:14:8c:f7:
5b:75:85:3a:76:b6:50:99:d1:bb:31:f8:cb:96:b3:b4:2c:06:
23:2f:9e:e4:db:db:1d:3b:ef:3d:6e:98:9e:7d:51:cf:df:51:
ba:9e:6c:b9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ1Aw61naJK01TzMVVub0UkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm
NWZjYjIwHhcNMjYwMzMwMjIwMDU4WhcNMjYwMzMxMjIwMDU4WjAzMTEwLwYDVQQD
Eyg4NDg3NTA0OWU2MDUwZmNkZTc4NDJjN2I1YTM1NTcwMjdkMDg0OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL4HnI3+9j7dQKMMydWpnoQmcuei
G2IdC0wn6U2dDYNOFvp1DwJg7HKfg47E0GEy3DroeoBmHRCso82OF9l2EMjlt0vP
kxNkdoPFgp0XdvU/nW6sxQHiTQmlxZ1OuNRdFz9oSVZMSrpH6AWbcSuLPxTM2qIJ
lfJOvquoevhVCeK4ToBahpYnUsjymwt0DVkIE6XR8nWs3sTuA6oDKEQCbzmxNYZN
ADi3CPlwGqSfLV8jqc/mABuMPbJrFHSBlmizjA+1s7uyNA2yaH4PLI/eUWFnDQaf
qly/E1U7tdJRIp5TeoMhgBEcdYh2b3+ZQff30xGVTMEbd2DlC8jGFxj2VQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFISHUEnmBQ/N54Qse1o1VwJ9CEmgMB8GA1UdIwQY
MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2
LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk
ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJUJ
62WXdwbubVaSBfRKa1D+bLe1zYBNYssTcjIPKtrmAkUHcnaroZw+TGoRZQa390+m
HHOc8mdVkpx9z9vEXQMKlEO8Je3YgsZxwmfX3YVXv7HTHjC50FI8t9sd5H9qm6pQ
xIPQ/h7FSFKT+f7Aas0uEn/ztNMBpnP8nVU/OW3/t8Qlfmfn2AalzkXqb45ymE7m
CARqdpgQ8g5cK+I0oxJ5qVPo/30ovD/9SXJfWIDvPowmBB4VCbnjO5PO6srTOQRy
gVJ+DczOw5crRAZsaD/kJ8SxFIz3W3WFOna2UJnRuzH4y5aztCwGIy+e5NvbHTvv
PW6Ynn1Rz99Rup5suQ==
-----END CERTIFICATE-----
Generated at Tue Mar 31 08:03:35 2026 by rpki-client