
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: Ly6XVH7k5wZd+m3oHjiXCmIjiS1H5cV/9PupwPIz7Og=
Subject key identifier: 73:3D:3B:C2:38:DC:4A:1B:92:7D:B7:74:29:9A:1A:50:D0:51:1A:06
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 01A0CC35E91405C7D94A9331BBC7D452A82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0B3B
Signing time: Wed 23 Sep 2026 03:01:20 +0000
Manifest this update: Wed 23 Sep 2026 03:01:20 +0000
Manifest next update: Thu 24 Sep 2026 03:01:20 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: LfaIOGcUhaWzr0t1YcmVO7WlK0Z7qS1Z+teecQ+znM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:e9:14:05:c7:d9:4a:93:31:bb:c7:d4:52:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Sep 23 03:01:20 2026 GMT
Not After : Sep 24 03:01:20 2026 GMT
Subject: CN=733d3bc238dc4a1b927db774299a1a50d0511a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:8f:43:b2:05:21:22:0d:25:d9:18:37:ea:
b8:c1:52:ba:a3:c1:12:99:a3:a9:f5:dc:aa:45:2a:
ac:b7:41:b5:6a:d3:5f:e1:0d:95:bf:18:91:c4:22:
1f:de:16:df:81:d9:1a:f3:26:40:de:a7:c7:60:7a:
d6:42:80:4f:c8:c5:f9:d4:a3:c0:1f:87:3c:ce:49:
df:72:d5:55:a0:98:1f:d1:4e:15:55:c7:9b:a2:cd:
b1:4b:f5:e7:91:1f:9f:a3:c4:80:69:ba:d9:bc:70:
b7:f1:1a:79:07:73:b4:b8:16:f3:cb:9f:7a:78:b1:
e8:6f:ef:e2:95:d9:90:aa:dd:a6:d3:c9:a7:e0:34:
6f:d0:88:b9:4d:1a:9f:57:96:be:f0:49:90:d2:f8:
c7:be:40:be:8f:2b:0f:d6:70:4f:84:af:5d:7c:f3:
a6:24:84:6d:73:19:74:5a:77:de:d0:47:40:49:b6:
9c:cc:0c:ef:09:10:76:2e:ec:4a:24:35:7e:e0:d7:
62:aa:3b:82:aa:20:e0:af:54:ef:8b:55:06:6e:fc:
05:5e:0c:04:ca:a3:f2:74:4e:8a:8d:ea:7d:fa:05:
c3:fe:b9:28:90:62:79:40:14:21:28:12:a3:c4:91:
44:a5:0d:48:5e:99:85:4a:98:c0:b5:25:7c:ac:60:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:3B:C2:38:DC:4A:1B:92:7D:B7:74:29:9A:1A:50:D0:51:1A:06
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7c:9d:09:74:00:26:bc:cc:60:68:da:be:22:75:12:99:10:
25:ce:59:af:90:f2:59:70:15:75:e0:84:41:78:71:b1:92:7a:
aa:99:44:3a:ec:1f:40:89:e8:29:8d:0f:fa:aa:ea:b0:cd:68:
39:32:48:69:68:c8:18:c2:a5:46:bd:ca:05:89:64:89:dd:09:
ba:7d:a8:46:83:65:34:e0:7b:c7:ee:b1:88:9c:09:c6:3b:f3:
3e:66:cc:9e:ac:2e:2b:01:22:37:cd:04:5e:4e:ed:f9:54:34:
83:ca:95:b8:51:52:bb:cb:9c:b4:79:d3:4c:c9:cd:5e:ae:24:
3d:e7:e1:40:c8:ff:eb:bd:3d:36:4b:dd:b9:66:1e:69:d1:56:
04:85:26:77:34:42:84:b0:31:09:30:55:c9:a5:5c:89:c7:13:
84:f0:3e:fa:ad:7e:02:8e:26:b3:cc:08:30:7a:64:5e:ea:f1:
c3:08:61:45:11:82:aa:90:0f:de:e3:8f:77:0a:b3:20:1d:4f:
fe:92:33:f0:6a:53:63:b5:bd:8f:4e:36:b9:8c:19:68:4a:b8:
dd:c8:1f:a5:c2:16:1a:9f:a8:13:a0:1b:99:b2:33:d0:84:a4:
57:be:3d:58:1c:c6:94:2b:36:cc:fd:1c:27:63:79:41:84:4f:
59:9b:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:04 2026 by rpki-client