Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: moW7uD2wc7JCkZafg8dm22UEfQdf7pf6tjgEaGWAoKw=
Subject key identifier: 0E:87:33:6E:E6:3C:97:D4:4E:21:86:6F:39:B0:8E:24:BF:A3:53:2E
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019F1754ADC4303729EF3EF04CC1FED1F508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 07:00:53 +0000
Manifest this update: Tue 30 Jun 2026 07:00:53 +0000
Manifest next update: Wed 01 Jul 2026 07:00:53 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: wWNECiipuWAFj2ihnbL4lV/E8PfG5nfsAlo4eblVnLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:ad:c4:30:37:29:ef:3e:f0:4c:c1:fe:d1:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Jun 30 07:00:53 2026 GMT
Not After : Jul 1 07:00:53 2026 GMT
Subject: CN=0e87336ee63c97d44e21866f39b08e24bfa3532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:24:7e:7e:fb:71:d6:4a:fe:08:fd:67:d1:
4c:f9:39:9e:9e:b4:f2:53:c2:e5:0c:fa:6a:2e:0d:
9c:69:ce:13:51:d6:b2:80:fe:01:35:c4:a8:e9:a0:
0b:49:8a:7f:73:56:f2:80:74:84:e8:36:e1:f3:7a:
10:73:0f:c4:12:ae:d3:0e:b8:df:3b:29:68:89:2e:
ec:34:0d:d3:94:b7:7c:c9:2e:17:56:6f:72:10:0c:
ba:9c:2c:6a:8c:32:4e:ee:b2:25:84:7f:57:2b:57:
0b:55:33:a2:2c:dd:e4:a8:39:c5:a1:ad:4d:ef:b8:
68:d3:05:13:fc:3d:48:9b:b8:f7:88:a8:91:50:55:
75:e1:ef:f6:25:21:b8:80:7f:07:29:97:6b:43:1d:
07:73:e7:59:68:ba:65:8e:4f:f3:a9:74:49:3e:37:
3d:97:53:aa:be:3d:82:0b:16:a8:53:2e:f8:0d:ca:
ae:d9:4e:7f:48:a9:de:4c:6a:c0:7f:d9:74:9f:07:
a9:1d:8b:f1:0a:ed:7f:0d:ba:38:85:38:86:f6:84:
f2:c7:86:82:c2:fe:9d:b9:d8:d4:37:b3:5b:49:d6:
ab:dd:ab:5e:3b:b3:ec:49:fe:07:36:2e:e0:20:43:
b5:6f:c9:64:03:60:41:1e:ae:17:65:1c:ff:82:0a:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:33:6E:E6:3C:97:D4:4E:21:86:6F:39:B0:8E:24:BF:A3:53:2E
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8a:05:1f:99:05:ce:a6:8c:58:b7:0b:0b:2b:37:f2:c8:24:
69:4e:79:31:51:91:61:00:7b:f2:01:ab:a5:d4:63:b4:d4:7b:
f0:c2:47:6d:b1:c0:25:cf:89:98:7c:58:83:42:a3:18:d2:f9:
d5:b5:2b:fc:01:f0:56:4f:41:9d:f2:19:33:28:09:30:c8:15:
aa:69:65:52:88:d9:c0:c7:7e:4f:50:83:27:1d:0e:a3:34:94:
e2:67:54:9f:1d:51:78:08:af:9e:8d:b4:ea:91:38:61:42:54:
91:21:a9:01:27:a6:19:d4:aa:ac:b3:d2:83:a5:e2:9d:78:15:
12:9a:c6:f3:1c:52:a6:6e:cf:72:1a:c7:55:11:41:aa:cc:57:
64:83:db:81:c0:67:9e:3d:36:a1:87:20:b1:0e:c8:2f:96:8d:
3e:cc:3e:49:7f:ee:bc:a8:3c:2d:5b:29:d1:c0:e9:9c:fd:04:
07:fb:d6:9f:9c:63:95:e5:68:fc:b7:8d:a9:8c:6f:b6:51:60:
c7:66:68:94:a0:bc:ed:81:88:d5:cf:d1:9f:cb:2c:04:e2:71:
52:54:b1:c7:d3:52:8e:16:2a:f2:f4:de:84:74:cd:26:60:09:
d1:a2:99:06:7c:4d:db:91:a8:a9:12:6d:fe:06:ac:e0:28:fe:
33:a9:5d:f1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8XVK3EMDcp7z7wTMH+0fUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDBlY2Y2MzVkZDNlOWQxNmIzNjFmOGUzZTBmNTA1MzFi
MWZiNGUwHhcNMjYwNjMwMDcwMDUzWhcNMjYwNzAxMDcwMDUzWjAzMTEwLwYDVQQD
EygwZTg3MzM2ZWU2M2M5N2Q0NGUyMTg2NmYzOWIwOGUyNGJmYTM1MzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ0kfn77cdZK/gj9Z9FM+TmenrTy
U8LlDPpqLg2cac4TUdaygP4BNcSo6aALSYp/c1bygHSE6Dbh83oQcw/EEq7TDrjf
OyloiS7sNA3TlLd8yS4XVm9yEAy6nCxqjDJO7rIlhH9XK1cLVTOiLN3kqDnFoa1N
77ho0wUT/D1Im7j3iKiRUFV14e/2JSG4gH8HKZdrQx0Hc+dZaLpljk/zqXRJPjc9
l1Oqvj2CCxaoUy74Dcqu2U5/SKneTGrAf9l0nwepHYvxCu1/Dbo4hTiG9oTyx4aC
wv6dudjUN7NbSdar3ateO7PsSf4HNi7gIEO1b8lkA2BBHq4XZRz/ggpEowIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA6HM27mPJfUTiGGbzmwjiS/o1MuMB8GA1UdIwQY
MBaAFPvQ7PY13T6dFrNh+OPg9QUxsftOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RHM5alhkUHAwV3MySDQ0LUQxQlRHeC0wNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYWJjZjcyLWYzMGEtNGViMi1hYzMy
LTQxNDNhODg4NGEyZS8xLzEtOURzOWpYZFBwMFdzMkg0NC1EMUJUR3gtMDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2FiY2Y3Mi1mMzBhLTRlYjItYWMzMi00MTQzYTg4ODRh
MmUvMS8xLTlEczlqWGRQcDBXczJINDQtRDFCVEd4LTA0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIoF
H5kFzqaMWLcLCys38sgkaU55MVGRYQB78gGrpdRjtNR78MJHbbHAJc+JmHxYg0Kj
GNL51bUr/AHwVk9BnfIZMygJMMgVqmllUojZwMd+T1CDJx0OozSU4mdUnx1ReAiv
no206pE4YUJUkSGpASemGdSqrLPSg6XinXgVEprG8xxSpm7PchrHVRFBqsxXZIPb
gcBnnj02oYcgsQ7IL5aNPsw+SX/uvKg8LVsp0cDpnP0EB/vWn5xjleVo/LeNqYxv
tlFgx2ZolKC87YGI1c/Rn8ssBOJxUlSxx9NSjhYq8vTehHTNJmAJ0aKZBnxN25Go
qRJt/gas4Cj+M6ld8Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:28 2026 by rpki-client