Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: 1SIZaEdNt+fjdl3OAFwuSxdiBD2ozsO1zAys1B6DiKU=
Subject key identifier: 70:D3:60:98:FB:74:50:C1:C7:C4:21:A9:A0:18:D4:C1:5D:F5:48:85
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019F90FEFB93DCF575D6AAE662D28FA5AE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0E94
Signing time: Thu 23 Jul 2026 22:00:57 +0000
Manifest this update: Thu 23 Jul 2026 22:00:57 +0000
Manifest next update: Fri 24 Jul 2026 22:00:57 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: Jt6cq22c7Upk/YV1hBnAGKfQgtBH7ejonLqsMFRcT+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:fb:93:dc:f5:75:d6:aa:e6:62:d2:8f:a5:ae:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Jul 23 22:00:57 2026 GMT
Not After : Jul 24 22:00:57 2026 GMT
Subject: CN=70d36098fb7450c1c7c421a9a018d4c15df54885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a1:88:0f:3f:bd:ea:77:84:e9:5d:d5:f8:d0:
fc:a6:82:2f:92:63:d9:79:07:6b:c7:db:39:14:b4:
90:02:d5:96:a6:c1:8a:4e:55:45:3f:38:01:17:16:
e6:fc:07:2e:36:1e:8d:c8:f5:b9:79:18:d0:88:76:
7a:16:10:f6:e1:5f:1d:2e:bb:87:63:30:b5:b5:37:
7b:ca:1f:c8:8c:49:fd:c9:cd:6d:5e:68:b5:94:c1:
ea:ec:19:8d:79:ed:d3:82:4d:88:f9:0f:fb:7d:f1:
5f:85:7e:0a:48:48:8c:11:00:db:a6:2d:a2:9c:5a:
51:25:54:93:f2:05:a3:8f:08:fa:b3:81:9b:fe:85:
e5:31:c9:13:77:94:51:50:e3:fc:45:f1:14:8b:a9:
41:a6:86:7f:e9:bc:e3:aa:28:c6:8e:3d:3b:80:c5:
62:3c:9c:18:7a:a1:85:b4:f5:4b:68:0c:a9:8e:2d:
49:5b:d4:6d:55:45:2e:57:f0:24:26:d8:83:9a:7d:
6f:94:02:f4:1a:a9:dd:d6:c7:c1:31:67:08:37:87:
bf:33:29:b2:aa:0b:6c:af:17:ab:72:31:6f:df:e2:
b8:b9:80:f3:90:59:1d:66:c2:e4:67:0d:bc:1e:e6:
76:2b:84:07:5d:5a:38:3d:b5:2a:fd:3d:50:66:40:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:60:98:FB:74:50:C1:C7:C4:21:A9:A0:18:D4:C1:5D:F5:48:85
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:3e:0d:05:11:c5:69:04:eb:84:11:a8:7a:ac:70:a7:40:
4d:77:f1:f6:ce:cd:bc:dd:e2:5e:ad:ec:73:12:a8:05:91:cb:
82:c7:57:82:9d:b4:66:0e:e3:97:2d:9f:9e:77:3c:e9:ba:1b:
e5:45:f8:b8:fd:5c:27:ef:8a:22:a7:61:61:d7:e1:85:bf:b3:
52:66:98:a9:4d:f9:86:40:ca:13:c8:e2:0c:2f:91:5a:18:e3:
03:34:06:ae:cc:c3:df:96:c2:62:84:33:23:b8:36:83:39:c3:
7d:48:17:11:4a:e9:78:3d:08:55:b7:4a:46:63:90:d0:5f:f4:
8b:85:7b:3b:72:18:1c:d3:b4:b5:e4:f0:b0:1d:29:aa:b5:aa:
a8:75:80:d4:37:7b:aa:5f:dd:8a:d9:06:26:02:98:23:2a:51:
22:d9:cb:a7:ea:08:da:a8:9a:89:14:9d:bd:20:ef:aa:60:e8:
1f:26:64:c8:40:85:30:9a:dc:2e:6a:f3:95:18:f9:b6:69:97:
9b:de:e8:c7:10:7d:71:c5:ea:77:08:f3:57:33:63:33:93:18:
87:8a:f8:b2:41:f4:b6:4b:fa:1b:1e:d2:0a:de:70:7a:22:7f:
e0:0b:1e:89:30:11:13:89:85:dd:5d:29:b8:8f:da:3b:44:48:
87:ae:06:ba
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Q/vuT3PV11qrmYtKPpa4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjYwNzIzMjIwMDU3WhcNMjYwNzI0MjIwMDU3WjAzMTEwLwYDVQQD
Eyg3MGQzNjA5OGZiNzQ1MGMxYzdjNDIxYTlhMDE4ZDRjMTVkZjU0ODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aGIDz+96neE6V3V+ND8poIvkmPZ
eQdrx9s5FLSQAtWWpsGKTlVFPzgBFxbm/AcuNh6NyPW5eRjQiHZ6FhD24V8dLruH
YzC1tTd7yh/IjEn9yc1tXmi1lMHq7BmNee3Tgk2I+Q/7ffFfhX4KSEiMEQDbpi2i
nFpRJVST8gWjjwj6s4Gb/oXlMckTd5RRUOP8RfEUi6lBpoZ/6bzjqijGjj07gMVi
PJwYeqGFtPVLaAypji1JW9RtVUUuV/AkJtiDmn1vlAL0Gqnd1sfBMWcIN4e/Mymy
qgtsrxercjFv3+K4uYDzkFkdZsLkZw28HuZ2K4QHXVo4PbUq/T1QZkArxwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHDTYJj7dFDBx8QhqaAY1MFd9UiFMB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGE+
DQURxWkE64QRqHqscKdATXfx9s7NvN3iXq3scxKoBZHLgsdXgp20Zg7jly2fnnc8
6bob5UX4uP1cJ++KIqdhYdfhhb+zUmaYqU35hkDKE8jiDC+RWhjjAzQGrszD35bC
YoQzI7g2gznDfUgXEUrpeD0IVbdKRmOQ0F/0i4V7O3IYHNO0teTwsB0pqrWqqHWA
1Dd7ql/ditkGJgKYIypRItnLp+oI2qiaiRSdvSDvqmDoHyZkyECFMJrcLmrzlRj5
tmmXm97oxxB9ccXqdwjzVzNjM5MYh4r4skH0tkv6Gx7SCt5weiJ/4AseiTARE4mF
3V0puI/aO0RIh64Gug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:56 2026 by rpki-client