Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: B9H3SsgsrPfexIChKDVCkMrgIXfRLxNW1uQYkzl1OEw=
Subject key identifier: 35:2E:73:AB:0F:67:0C:0B:20:AE:0D:2A:49:AC:1C:E0:60:86:B4:F9
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019E2F978128312FFD910502145BB0C2AEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0DDD
Signing time: Sat 16 May 2026 07:01:58 +0000
Manifest this update: Sat 16 May 2026 07:01:58 +0000
Manifest next update: Sun 17 May 2026 07:01:58 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: 3KKvL8bxAW82wy5SPG6VZbgJl4lWCMEG//aHi20/aDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:81:28:31:2f:fd:91:05:02:14:5b:b0:c2:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: May 16 07:01:58 2026 GMT
Not After : May 17 07:01:58 2026 GMT
Subject: CN=352e73ab0f670c0b20ae0d2a49ac1ce06086b4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:fb:b1:bf:39:e0:18:17:cf:b0:b9:a2:8a:
b2:7c:8a:12:06:8e:ec:22:ab:c7:f0:c7:07:7b:09:
22:84:ff:47:f5:bf:af:69:8e:b2:1e:0f:d0:d0:fb:
32:03:cb:31:f3:e1:11:5b:1b:0c:fd:3c:91:d9:01:
14:b4:9e:19:a5:37:40:9c:fe:f4:9b:41:80:6e:93:
0f:fe:23:a3:0f:6b:1d:c4:0f:1b:84:b5:45:fb:f7:
bd:e2:fd:45:d2:f8:99:54:9a:b7:01:40:c9:00:2a:
fc:8f:10:a6:60:70:49:98:ee:03:45:f0:06:9b:23:
4d:18:5f:2c:59:74:f6:e4:46:bd:e4:2b:0a:e4:26:
87:3b:6c:d0:5a:30:88:32:32:63:f1:d3:49:05:a4:
a6:60:43:0e:6c:ab:e9:65:f1:d8:e7:bc:ec:9e:4a:
b7:af:ee:53:2c:f5:2d:59:56:50:15:cd:33:57:a1:
50:3c:0c:af:4b:f1:bb:b9:2d:aa:06:af:54:18:55:
ff:d0:b2:99:26:98:d1:ed:9a:fb:45:1f:fe:d5:3a:
cb:b0:34:fa:26:f8:92:5c:69:da:76:81:f4:96:e5:
8f:b9:54:90:03:fc:13:ae:67:83:4a:fd:4a:16:1b:
de:3d:3b:82:21:a1:0d:1e:9d:36:41:c4:c6:d1:de:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:73:AB:0F:67:0C:0B:20:AE:0D:2A:49:AC:1C:E0:60:86:B4:F9
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:67:b4:dc:fb:ec:d9:73:29:8c:bb:2d:de:5b:75:d8:83:14:
2b:28:34:ae:cf:68:bb:89:2e:d3:e9:26:02:b5:cd:4a:4e:42:
72:78:3d:d9:30:ef:a4:47:32:95:f2:24:07:f1:5b:5d:f0:1f:
f5:cd:6a:59:f9:d6:69:c8:df:8c:6c:ae:9d:cd:0a:61:66:27:
a6:7d:3f:8c:51:41:2d:81:ba:4f:7c:92:41:e5:74:c7:40:a7:
41:66:85:64:a6:36:a2:50:b0:9a:56:3e:cc:69:af:df:30:2c:
b9:39:44:55:7b:47:e9:13:d1:cd:45:2f:84:43:c0:e8:6b:9f:
a4:70:ce:b2:09:24:3c:87:52:f0:d6:37:d6:f2:ea:04:5e:62:
9c:03:0e:d4:a7:70:ff:4f:90:9c:7d:92:d3:22:ab:7d:da:c0:
42:02:27:0b:c2:27:be:76:3f:ed:81:e3:5f:40:1e:c6:70:0c:
5a:2a:3d:c2:83:12:ed:17:f2:62:c9:2c:08:da:74:20:f6:d4:
1b:79:5e:c4:0b:5a:a8:c4:7a:9c:9d:88:71:72:54:c5:2d:d9:
61:ca:54:80:29:4c:0e:3a:c8:72:b9:2a:06:21:9a:d0:49:d0:
a0:fd:52:95:a7:8a:d8:6c:5d:34:58:09:9d:e7:03:4a:f4:a7:
43:cb:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:18 2026 by rpki-client