Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: bYIZigMVQr6knzUftnVYE9uIEwStmXG94SUnKXcw5e4=
Subject key identifier: 18:20:D9:D3:1E:BC:AE:1A:F3:7F:F3:7E:B3:7E:3E:15:A0:B9:4B:3F
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019E2F968C2FF43B6812361E5C1A563FF6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 190B
Signing time: Sat 16 May 2026 07:00:55 +0000
Manifest this update: Sat 16 May 2026 07:00:55 +0000
Manifest next update: Sun 17 May 2026 07:00:55 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: X3C6yJ3PXlO3TZlAZptGsDGt6FI8Rikb/ExsjMPD7Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:8c:2f:f4:3b:68:12:36:1e:5c:1a:56:3f:f6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: May 16 07:00:55 2026 GMT
Not After : May 17 07:00:55 2026 GMT
Subject: CN=1820d9d31ebcae1af37ff37eb37e3e15a0b94b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:4e:f3:f9:b5:5d:b5:aa:43:d4:2f:b3:ee:
fd:6a:f4:cd:50:a9:4c:c3:1b:c0:ce:f0:a6:eb:a6:
c5:71:11:8a:b0:a9:f4:13:e8:78:80:69:14:d3:cd:
d8:b3:49:4f:d7:ac:d6:af:ee:b9:09:bf:e8:ce:e2:
09:86:0c:03:bd:26:86:87:4c:91:eb:a2:c1:ec:ba:
0f:e6:6c:d1:d0:dd:f4:68:e1:dc:32:e4:5f:9f:a2:
61:c7:62:6b:85:24:63:ca:4d:80:96:ad:36:a0:9f:
2b:ce:99:05:6a:36:d1:75:98:9a:a6:38:01:57:35:
c0:5d:d4:fd:fd:ec:6d:19:85:0a:b4:30:a4:51:9a:
5d:fa:95:bd:17:1c:c1:73:34:ea:98:80:8d:e7:d2:
00:06:f8:b6:80:95:3b:0e:82:a8:10:e7:4b:1f:ee:
04:b7:6a:8e:49:66:8b:87:2d:6e:c7:0d:56:5f:3b:
e9:0e:db:bc:aa:7c:52:62:1a:4b:d5:23:71:12:43:
36:0f:65:e7:c5:b3:6d:a7:18:4e:97:51:1f:7f:24:
74:34:59:97:52:02:08:32:54:cb:1f:1d:fc:bb:13:
7f:77:eb:a4:51:54:9f:f0:28:1a:d8:02:75:6f:fc:
06:14:08:42:b5:b9:21:25:9f:99:8b:59:14:c1:2e:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:D9:D3:1E:BC:AE:1A:F3:7F:F3:7E:B3:7E:3E:15:A0:B9:4B:3F
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:82:24:9f:84:fb:ad:73:c5:c1:29:0c:fe:1e:da:86:c9:6c:
f1:44:c3:9f:40:59:c2:00:99:36:18:ab:7e:c1:ee:6b:fc:e3:
b0:03:57:34:54:b0:c3:f8:40:26:de:4e:66:ba:af:7a:73:7d:
a1:66:9b:13:3f:9a:fd:56:67:50:9c:bf:a6:57:95:b7:ee:52:
21:2a:f6:72:02:a5:f7:54:1e:9b:c9:d2:ea:ab:95:81:84:82:
71:c8:e4:1d:a2:e1:33:98:26:ff:d0:b7:29:0c:8b:ce:d9:db:
e6:c9:c4:16:0e:9b:7f:46:9c:e8:e4:47:cc:af:6f:37:53:2d:
eb:73:2f:2a:12:c8:d6:af:5d:54:b4:c9:09:19:43:43:71:7f:
dd:9a:9c:c5:6c:47:78:d7:11:b3:ca:66:72:1d:35:81:49:da:
74:8a:da:a7:77:ab:47:19:b0:95:80:49:33:72:0d:5f:f3:11:
96:cb:3b:3c:ec:af:06:df:d2:59:b5:59:9a:87:0d:ea:d7:bf:
64:3c:4c:b0:39:b8:c3:65:d3:c1:a3:0e:54:53:51:ab:10:22:
b6:f0:76:76:dc:71:fa:97:02:e9:5c:bd:92:b2:36:21:0d:ba:
b8:32:d4:0b:ef:51:6c:da:a4:2f:60:61:31:b6:5c:d5:69:53:
ec:f0:44:15
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4vlowv9DtoEjYeXBpWP/byMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDBlY2Y2MzVkZDNlOWQxNmIzNjFmOGUzZTBmNTA1MzFi
MWZiNGUwHhcNMjYwNTE2MDcwMDU1WhcNMjYwNTE3MDcwMDU1WjAzMTEwLwYDVQQD
EygxODIwZDlkMzFlYmNhZTFhZjM3ZmYzN2ViMzdlM2UxNWEwYjk0YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eVO8/m1XbWqQ9Qvs+79avTNUKlM
wxvAzvCm66bFcRGKsKn0E+h4gGkU083Ys0lP16zWr+65Cb/ozuIJhgwDvSaGh0yR
66LB7LoP5mzR0N30aOHcMuRfn6Jhx2JrhSRjyk2Alq02oJ8rzpkFajbRdZiapjgB
VzXAXdT9/extGYUKtDCkUZpd+pW9FxzBczTqmICN59IABvi2gJU7DoKoEOdLH+4E
t2qOSWaLhy1uxw1WXzvpDtu8qnxSYhpL1SNxEkM2D2XnxbNtpxhOl1EffyR0NFmX
UgIIMlTLHx38uxN/d+ukUVSf8Cga2AJ1b/wGFAhCtbkhJZ+Zi1kUwS5SZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBgg2dMevK4a83/zfrN+PhWguUs/MB8GA1UdIwQY
MBaAFPvQ7PY13T6dFrNh+OPg9QUxsftOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RHM5alhkUHAwV3MySDQ0LUQxQlRHeC0wNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYWJjZjcyLWYzMGEtNGViMi1hYzMy
LTQxNDNhODg4NGEyZS8xLzEtOURzOWpYZFBwMFdzMkg0NC1EMUJUR3gtMDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2FiY2Y3Mi1mMzBhLTRlYjItYWMzMi00MTQzYTg4ODRh
MmUvMS8xLTlEczlqWGRQcDBXczJINDQtRDFCVEd4LTA0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIIk
n4T7rXPFwSkM/h7ahsls8UTDn0BZwgCZNhirfsHua/zjsANXNFSww/hAJt5OZrqv
enN9oWabEz+a/VZnUJy/pleVt+5SISr2cgKl91Qem8nS6quVgYSCccjkHaLhM5gm
/9C3KQyLztnb5snEFg6bf0ac6ORHzK9vN1Mt63MvKhLI1q9dVLTJCRlDQ3F/3Zqc
xWxHeNcRs8pmch01gUnadIrap3erRxmwlYBJM3INX/MRlss7POyvBt/SWbVZmocN
6te/ZDxMsDm4w2XTwaMOVFNRqxAitvB2dtxx+pcC6Vy9krI2IQ26uDLUC+9RbNqk
L2BhMbZc1WlT7PBEFQ==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:45 2026 by rpki-client