Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: ftehzv2llOyQxp0InHRCYBph44L9WRQcI3hofyYqbG8=
Subject key identifier: FA:AA:91:C3:94:36:51:18:60:3B:CC:EA:39:43:90:29:84:14:BA:A3
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019D2704C6C8F2F8E883E45F546F87283315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0D54
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: wlHka8uvoGJyVsY88Tj4KccgNs5pXasqBU4Xy90kQ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c6:c8:f2:f8:e8:83:e4:5f:54:6f:87:28:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=faaa91c394365118603bccea394390298414baa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:97:6e:5a:82:a9:94:23:b3:f6:d3:04:71:
2a:6e:94:5b:8b:05:fe:43:75:63:98:87:c9:a9:80:
3b:c3:5d:3e:62:e9:bd:58:fb:38:67:c8:ad:ce:c5:
9e:a7:87:fd:c4:23:6e:14:9c:27:2e:b4:9d:b6:c6:
ed:ae:f5:64:c3:c3:94:db:6c:9a:09:b5:f6:fb:bc:
3c:46:77:75:f2:68:59:bf:11:5f:ab:2b:ec:69:26:
ce:55:be:22:a7:2e:01:f9:4f:87:d6:61:c8:cf:cc:
aa:bb:4d:31:eb:80:e5:40:54:fe:d3:7c:07:79:b9:
01:4e:fb:0e:69:b1:4c:96:49:44:f0:58:08:db:20:
2a:ff:cb:c6:78:0b:8d:fd:e3:e6:db:38:3e:7c:f3:
5b:3f:ec:1b:24:19:41:0d:c6:c0:0c:66:f7:c1:d9:
b3:fa:21:44:86:f5:e4:1b:5c:7d:84:c2:b7:42:e9:
12:ca:e1:d8:dd:63:49:ca:cf:af:93:04:97:b1:d0:
79:b4:49:8a:1c:cb:b4:2a:de:89:34:54:1b:5d:3a:
08:d7:a8:57:18:09:76:aa:8a:ff:5c:f4:a4:ea:8d:
1b:78:1f:8f:4b:25:e3:b5:f5:c8:15:8b:7c:7a:aa:
c3:a9:92:64:96:9b:14:44:36:e3:b1:d8:9b:26:30:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:91:C3:94:36:51:18:60:3B:CC:EA:39:43:90:29:84:14:BA:A3
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d0:f8:19:88:58:7d:06:da:ca:d2:a1:48:bf:ea:38:14:b0:
ca:e6:36:7c:a7:58:9f:86:48:a1:ba:0e:79:ea:6f:ed:ad:2f:
6e:6a:e7:d4:f5:c7:4c:45:e8:9e:aa:81:3d:39:d5:44:52:ec:
9b:00:44:4a:c6:dc:4e:0a:43:a5:21:9d:53:41:dd:ba:9b:15:
b5:cd:1a:5b:bf:37:d4:ff:f7:52:9d:b1:a8:40:4c:1a:f0:bc:
5b:77:cf:ef:aa:ee:fa:62:5e:77:10:e0:4f:ca:d7:32:98:64:
88:ca:89:82:46:1a:83:35:e8:3f:50:fb:48:cf:7a:06:cb:bd:
2c:1c:46:9d:bd:ac:bd:c8:87:b8:0d:c8:2a:51:78:23:09:cd:
20:8b:a0:27:bd:fb:32:4d:61:f7:a8:aa:74:b2:69:d3:6e:a1:
9d:03:bb:1e:e7:4c:86:9b:2d:ad:76:80:4e:3b:41:c9:4d:34:
a8:99:24:bd:09:6e:2e:64:cc:ec:7e:a8:84:aa:fc:d9:d2:33:
7e:cd:78:e6:ed:f5:59:43:87:d4:24:40:0d:d7:a8:d6:56:96:
e4:f1:fc:a9:b5:6f:cd:ee:cf:be:3e:78:79:7d:49:98:15:b5:
12:58:c8:cb:91:ee:e3:23:8e:84:1b:2b:c1:e1:bd:29:73:0e:
db:a7:14:93
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nBMbI8vjog+RfVG+HKDMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjYwMzI1MjIwMTU3WhcNMjYwMzI2MjIwMTU3WjAzMTEwLwYDVQQD
EyhmYWFhOTFjMzk0MzY1MTE4NjAzYmNjZWEzOTQzOTAyOTg0MTRiYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+OXblqCqZQjs/bTBHEqbpRbiwX+
Q3VjmIfJqYA7w10+Yum9WPs4Z8itzsWep4f9xCNuFJwnLrSdtsbtrvVkw8OU22ya
CbX2+7w8Rnd18mhZvxFfqyvsaSbOVb4ipy4B+U+H1mHIz8yqu00x64DlQFT+03wH
ebkBTvsOabFMlklE8FgI2yAq/8vGeAuN/ePm2zg+fPNbP+wbJBlBDcbADGb3wdmz
+iFEhvXkG1x9hMK3QukSyuHY3WNJys+vkwSXsdB5tEmKHMu0Kt6JNFQbXToI16hX
GAl2qor/XPSk6o0beB+PSyXjtfXIFYt8eqrDqZJklpsURDbjsdibJjDqVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPqqkcOUNlEYYDvM6jlDkCmEFLqjMB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9D4
GYhYfQbaytKhSL/qOBSwyuY2fKdYn4ZIoboOeepv7a0vbmrn1PXHTEXonqqBPTnV
RFLsmwBESsbcTgpDpSGdU0HdupsVtc0aW7831P/3Up2xqEBMGvC8W3fP76ru+mJe
dxDgT8rXMphkiMqJgkYagzXoP1D7SM96Bsu9LBxGnb2svciHuA3IKlF4IwnNIIug
J737Mk1h96iqdLJp026hnQO7HudMhpstrXaATjtByU00qJkkvQluLmTM7H6ohKr8
2dIzfs145u31WUOH1CRADdeo1laW5PH8qbVvze7Pvj54eX1JmBW1EljIy5Hu4yOO
hBsrweG9KXMO26cUkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:49 2026 by rpki-client