Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: u84Zud0RYV1dq2zcE0HN40ptqZE1umnJ4yEt6efgJG8=
Subject key identifier: 06:FC:C7:E7:79:2F:DE:55:01:36:42:9D:A1:78:0E:04:3A:AE:D9:9C
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 01A13DB8BC355AB24E5401700AA6EC76ED45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 04:01:18 +0000
Manifest this update: Thu 15 Oct 2026 04:01:18 +0000
Manifest next update: Fri 16 Oct 2026 04:01:18 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: Djsqd7RYI2DRkpJyWJ9SvwQdwHG/yxdwwfbTlptqbtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:bc:35:5a:b2:4e:54:01:70:0a:a6:ec:76:ed:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Oct 15 04:01:18 2026 GMT
Not After : Oct 16 04:01:18 2026 GMT
Subject: CN=06fcc7e7792fde550136429da1780e043aaed99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:5b:2d:0c:3d:23:6d:67:bf:5e:e6:dd:54:
ac:4b:8d:91:1f:58:66:10:55:0d:a3:be:51:89:c7:
41:05:fb:00:ca:1d:5d:00:b0:cb:28:fd:9e:bf:36:
57:36:fa:0d:6d:62:83:eb:ad:2a:28:99:1a:3c:53:
3d:16:3f:52:7b:5e:6f:62:f7:c1:7c:9f:d3:0f:ad:
13:d9:e3:0e:65:67:bd:da:75:4a:37:a7:44:b8:b4:
9a:2e:1e:81:71:f5:e3:33:74:5e:ba:79:63:a9:6e:
2c:92:85:9d:5d:9d:14:41:a9:f3:b0:72:74:fb:79:
f6:b9:59:ab:ac:63:0e:03:b9:15:9b:4b:6c:75:dc:
75:7e:42:99:b7:ef:cc:f8:3a:fb:cb:2f:7b:aa:ab:
9c:3b:66:fb:40:97:40:a7:ce:b4:7f:9f:76:25:f3:
d0:3d:65:72:eb:ed:35:03:7c:b7:53:62:03:e6:f2:
15:72:3d:ff:aa:2b:2e:3b:cc:ab:d1:0c:8b:4c:8e:
2c:eb:af:14:c9:24:60:5d:e0:71:a5:ba:05:f6:c8:
e4:25:a4:4e:30:14:9c:58:a6:ad:33:4f:96:c0:f3:
29:6c:dd:06:7b:9f:72:ab:91:9f:fe:98:77:2c:60:
07:ee:64:39:eb:fc:dc:ef:ea:ac:17:68:cf:32:e6:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:C7:E7:79:2F:DE:55:01:36:42:9D:A1:78:0E:04:3A:AE:D9:9C
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:2b:12:27:81:3f:83:12:00:d7:8d:fb:98:a3:4d:cb:40:
54:85:5d:05:3c:6e:cf:e7:44:14:d8:17:9a:a4:f5:7a:65:96:
98:82:bb:28:84:1d:2c:bd:4d:0e:ac:0a:96:23:0a:30:7c:ed:
f8:0c:2e:45:22:31:35:32:6e:50:35:42:cc:37:ec:88:a6:12:
88:a8:a8:77:7a:0e:1d:8b:d9:0e:3f:28:0a:ac:60:26:1e:5d:
e3:a4:e4:67:33:a4:bc:f7:3c:b3:b4:34:b3:df:01:e2:ca:d5:
39:4c:66:ef:c1:98:b7:b0:fa:36:88:83:98:85:33:00:3e:56:
ad:81:15:3e:a4:9c:a7:2a:c8:bd:e7:b8:f6:1c:fe:ba:7b:0b:
f4:2b:0a:52:64:d7:fa:f0:c2:c3:f8:6e:0b:49:ad:30:72:b0:
c6:b6:e6:67:35:cc:5d:d2:59:51:13:f4:cb:40:26:62:8b:c5:
d8:85:a2:a8:4e:b4:c7:13:ac:d7:00:11:6b:66:7d:12:5f:ee:
42:47:03:96:9a:94:fe:a2:6c:9c:e7:75:7f:2e:e6:11:07:09:
2e:2b:fb:47:f0:d8:e0:0a:11:39:15:d9:1f:6d:bf:1d:74:8e:
cd:31:f1:81:e1:de:ff:bc:eb:34:72:9a:8a:77:df:94:98:b6:
ed:cb:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:08 2026 by rpki-client