Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: pGFUILAvptUMm6ZyOGzQZVTLJGSNjkmLXVs6X0OiF4E=
Subject key identifier: 02:A9:EA:3E:B4:60:25:C3:AC:69:F6:CA:E0:B0:B0:7C:97:7B:E7:8A
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019D39777B4D46EC7C38590C82C35C063DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 091A
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: GlLcsCNQBHCZ6fBTEpaWU3X20oCvuo51j+6MVdJcwYE=)
2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7b:4d:46:ec:7c:38:59:0c:82:c3:5c:06:3d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=02a9ea3eb46025c3ac69f6cae0b0b07c977be78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:72:aa:5f:6f:6e:49:bf:65:2e:7c:78:7c:
e4:6d:f1:5c:9d:cd:ba:6e:d6:5d:6c:01:f0:84:c9:
a4:02:37:d8:8b:1a:da:73:72:f7:e9:e3:94:f4:22:
41:eb:98:39:0e:af:35:76:37:a4:70:8d:be:1a:e7:
0b:94:b1:a2:cb:fe:53:d1:be:63:dc:d4:a8:1c:1b:
ab:21:93:32:6a:1c:d4:6e:c7:b2:dc:66:6f:8f:66:
fc:95:d4:7f:69:68:08:23:05:a4:36:3d:3d:5c:f5:
f2:5e:e2:e0:ed:59:05:98:63:ab:ec:90:dc:d2:88:
70:1b:e8:4a:81:54:37:63:3a:87:5b:45:bc:24:90:
71:bf:f1:ff:ef:0a:9b:85:67:58:ae:ea:bd:a6:48:
af:30:64:84:26:0e:63:8a:b8:c6:07:82:23:ac:3e:
26:c3:f4:ba:9c:38:c1:1e:39:c0:e2:11:7f:6f:5e:
6d:89:f2:21:db:70:2b:e7:da:07:68:18:a4:73:47:
93:71:5e:dd:e7:df:17:f0:c3:80:15:aa:7b:45:ee:
dd:50:22:3e:d2:3a:c3:23:bd:35:3c:28:2e:ba:e4:
ca:99:4f:75:6b:02:d1:ef:4b:26:4f:ab:f9:47:80:
73:ad:05:11:2f:e1:f8:8e:88:3d:df:55:d7:76:14:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:EA:3E:B4:60:25:C3:AC:69:F6:CA:E0:B0:B0:7C:97:7B:E7:8A
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:34:3b:62:49:4b:25:9c:03:24:42:a4:e2:27:32:08:c8:
f2:37:cd:37:10:51:ca:5e:ed:fe:29:81:0a:0a:80:13:4f:f2:
fd:06:0e:42:82:31:1d:86:89:a1:71:a9:4c:ed:0d:a0:bc:e6:
77:98:14:30:9e:ee:a1:39:b7:78:e0:02:a4:43:3d:3f:5f:26:
4f:f6:a6:7e:77:94:30:16:4a:9a:1d:09:60:5b:65:f6:81:3a:
a2:64:e3:5d:4e:26:dc:35:c3:24:14:bd:f3:5c:08:9f:cc:bb:
5f:ec:e3:ba:f1:15:59:a1:fc:fb:66:b3:a9:ed:d0:aa:6d:ea:
1c:54:bc:c7:73:7d:3f:66:13:0b:67:5e:a6:ae:8b:60:af:9f:
05:8a:5b:09:09:9b:25:65:8d:52:38:47:f2:ef:2a:a3:90:07:
10:97:06:f6:36:59:51:3d:9c:b5:56:58:b2:86:8f:7d:10:57:
2e:36:c5:a2:9e:8f:04:2f:9e:3b:56:ac:a1:52:aa:b5:cd:90:
d8:7e:2f:11:59:dd:99:3a:3c:bd:7d:55:e6:b3:b1:87:19:76:
cd:b4:b2:74:e6:ba:4a:ec:b3:70:3e:4e:b0:26:fb:5c:c7:d0:
83:7f:a5:dd:a6:48:14:d3:ce:9f:8d:7a:e3:b2:4b:bd:07:6e:
41:b8:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:00 2026 by rpki-client