Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: BRlCY81xSxId4vdumV71Ho8JF6kMMXmlQ4/TNYYi4Qk=
Subject key identifier: E3:6F:36:2A:16:2B:89:03:98:40:80:2B:F8:34:8F:05:92:20:0C:DF
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019D3866372E4AE7A2B9C45518C021E81DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: LEmDQ2zwAczGeR6bMkW0e5iOonUzJt1z+KFzDZdGIxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:37:2e:4a:e7:a2:b9:c4:55:18:c0:21:e8:1d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=e36f362a162b89039840802bf8348f0592200cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:3d:71:e8:34:a2:7e:6a:76:ff:45:95:9b:
58:3d:6d:61:7f:1b:25:7f:dd:08:ff:b4:8c:b4:2b:
91:56:97:6e:ef:9f:bf:63:2d:14:90:81:b6:16:8d:
9d:b7:48:f5:6b:ee:3f:af:6e:f6:33:03:8b:d2:98:
12:be:c0:ea:e9:a6:ce:56:2f:f3:8d:d3:75:13:63:
63:c0:65:83:b1:d5:56:39:1a:dc:0a:19:db:80:38:
90:7a:c0:a0:81:ad:a2:ae:d3:6f:f7:b5:05:fd:86:
87:e7:97:da:f7:38:f1:da:ab:7e:ca:8c:66:bc:4a:
1b:fe:89:b7:30:a9:40:d4:de:71:1a:e0:7b:0b:db:
d6:92:f8:39:bc:a6:b7:e6:4e:56:72:25:dc:d7:71:
eb:38:74:c4:6a:c8:b4:b9:ed:53:6e:79:ce:b9:20:
e3:75:3c:94:6a:5f:3b:3f:64:eb:51:8c:2c:d0:54:
1c:42:49:d7:2e:ac:03:2c:d8:46:fe:d6:f2:cf:51:
6e:22:db:6c:af:69:6f:3d:7c:09:97:19:36:7a:42:
68:0b:82:ce:16:e9:0b:cc:29:96:ad:8f:c5:9b:e2:
e9:24:ff:a5:7d:e0:9c:16:80:cd:5c:3a:fa:40:0c:
eb:ab:9c:1c:95:87:66:bb:96:9e:e8:39:30:2c:0e:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:36:2A:16:2B:89:03:98:40:80:2B:F8:34:8F:05:92:20:0C:DF
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:c3:4a:16:6f:5d:16:af:88:99:ff:83:d1:aa:07:90:d8:
41:07:e7:28:38:38:f8:0c:89:63:2c:8f:d4:08:9b:20:4b:20:
e4:51:fd:14:b7:db:3e:be:36:a0:1c:3e:93:e2:4d:d0:e2:e9:
10:a0:24:85:cf:21:ed:30:f4:45:ba:e1:61:5a:7a:f4:99:67:
20:fa:7a:00:48:7a:f3:91:56:8e:67:07:dc:5b:1b:ea:1b:a0:
05:4b:87:e2:cf:1d:f4:c5:6c:d3:da:40:a8:c2:7a:24:75:3b:
22:be:01:1b:e8:81:37:b0:6d:49:cc:34:04:6a:5f:17:37:c8:
10:24:be:d2:f1:4f:b9:d3:ee:2d:1e:b0:81:b2:b8:67:7b:ed:
0d:3e:20:68:d8:9b:1b:06:94:b3:ad:4c:7c:02:11:bc:bb:0f:
da:09:e2:0e:f5:65:62:be:2a:71:ad:93:0a:82:46:1b:0f:47:
6c:79:65:b9:49:bf:57:a7:4e:0d:15:3b:24:75:b4:02:ab:96:
18:20:fa:ce:96:34:75:d0:68:41:6f:f2:0e:96:61:99:b1:50:
df:9d:e8:7f:29:ea:08:66:af:eb:7b:1c:27:42:e2:69:c3:aa:
9e:9c:b1:e9:08:09:78:5f:3d:a5:c7:cb:9d:f2:d9:10:61:d0:
89:3c:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:58 2026 by rpki-client