Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: f65nXOcbI+ziSO+zE+w/TFN9uJcw/bF9B33mblwmDIU=
Subject key identifier: FE:FB:6F:E2:FF:BE:B3:AA:77:EA:99:89:C8:83:12:07:CC:7F:4A:19
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019D3A1CE07472451E12CD99D28362014C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0FB9
Signing time: Sun 29 Mar 2026 15:01:04 +0000
Manifest this update: Sun 29 Mar 2026 15:01:04 +0000
Manifest next update: Mon 30 Mar 2026 15:01:04 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: yN3kwh3MKA9H6KVR8k80Bbq/L9qjIgsejBWD7WRwPOA=)
2: oRIsfmte-X2jgFEWjQtLvblexNM.roa (hash: MABvxM4XCQeB057f0MMoN4gprPL+JKjwKeyBUI1E5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e0:74:72:45:1e:12:cd:99:d2:83:62:01:4c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Mar 29 15:01:04 2026 GMT
Not After : Mar 30 15:01:04 2026 GMT
Subject: CN=fefb6fe2ffbeb3aa77ea9989c8831207cc7f4a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:0e:38:38:25:f1:6f:c8:5c:2e:31:c4:9e:
3f:c0:48:ca:79:36:22:32:b3:9e:ec:c2:45:0a:1f:
1d:e4:00:69:13:2d:5f:e7:df:0c:94:b4:a2:5c:4f:
83:e4:0e:78:84:2e:30:5d:74:12:1d:32:fc:30:8c:
82:81:8b:fa:ba:d2:d5:60:09:6b:02:8c:e0:d3:b0:
9e:70:5a:e2:bd:7d:a0:8b:8d:88:72:fd:dc:44:c0:
81:37:42:49:1a:00:75:80:3e:e6:57:1d:06:e2:8d:
fb:7a:1d:c2:81:3e:5b:f7:a5:47:fd:ef:c9:a6:0e:
7d:70:b0:4b:60:52:ae:f9:8d:20:68:d3:6e:60:b8:
06:97:35:f7:a1:83:63:e6:3e:28:27:aa:3e:f2:4b:
2f:d0:a3:85:88:d1:6f:d9:f2:5c:d7:6e:db:24:3a:
77:11:9e:62:25:af:2a:51:bd:66:7b:87:e4:9d:a3:
be:26:ce:cc:92:b6:85:0c:c7:4e:7f:fb:eb:34:43:
72:f8:80:d1:5f:3f:b4:a1:2b:45:c7:99:79:f9:57:
a7:ae:77:31:35:d5:25:ca:88:62:64:0a:64:24:1a:
3a:4c:9d:40:fe:e7:44:5a:1c:92:b3:d8:6b:c0:0f:
2d:1c:07:42:69:41:21:3a:e7:88:36:84:46:80:56:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:6F:E2:FF:BE:B3:AA:77:EA:99:89:C8:83:12:07:CC:7F:4A:19
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6c:da:0c:78:64:dd:83:d6:82:29:50:59:6e:e5:93:82:13:
4f:00:5e:7c:e9:c0:33:f0:eb:65:08:c2:2e:29:c7:6b:fb:99:
0a:fe:43:4b:3e:8b:89:49:99:b6:f3:a0:fa:42:16:15:61:4f:
52:ad:d2:fc:d3:19:78:30:ad:53:24:c3:67:98:10:2c:4d:9d:
80:ac:b5:5f:ce:0b:28:41:6f:c3:46:54:dc:f7:d7:a8:40:b0:
e9:3d:69:f3:48:cb:e7:af:f8:3c:19:43:89:a3:0e:2d:c8:02:
95:ed:36:3a:26:5b:c5:b1:40:42:12:81:07:80:7d:62:b7:6a:
1c:21:e3:39:3c:a0:89:63:64:bc:5b:29:fa:5b:5c:2e:74:78:
7e:b4:2e:5b:72:62:aa:0b:40:13:07:3a:d3:5f:a4:c8:88:05:
0c:6d:1b:e3:7b:08:2e:2a:77:53:5c:87:0a:c0:c8:f3:ae:6f:
f5:a0:17:f2:3c:0e:07:15:da:8a:64:30:50:e2:60:af:25:bd:
a1:3a:74:95:4e:6d:76:82:1f:5c:04:11:f9:3f:78:e5:2e:fd:
50:d6:02:16:ae:4b:b8:4b:fa:ef:d6:e4:a4:44:34:96:9b:79:
63:cb:c9:63:a7:06:57:46:9c:13:96:9c:32:a0:25:13:06:bb:
4c:97:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:57 2026 by rpki-client