
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: kwL/zZrlS5MJaFNWqtNSsbzybtDITgyGa4M193eZAN4=
Subject key identifier: 0D:23:15:65:1E:27:74:84:C2:87:B7:7F:D7:4D:89:E8:31:C1:C2:3C
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 01A0C21FB57C86894223DE948237A762EF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0F32
Signing time: Mon 21 Sep 2026 04:00:52 +0000
Manifest this update: Mon 21 Sep 2026 04:00:52 +0000
Manifest next update: Tue 22 Sep 2026 04:00:52 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: i7FAMJX8Qa9fCoVwfrOAjaGHjaCEu51gZwDnZIsa2zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:b5:7c:86:89:42:23:de:94:82:37:a7:62:ef:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Sep 21 04:00:52 2026 GMT
Not After : Sep 22 04:00:52 2026 GMT
Subject: CN=0d2315651e277484c287b77fd74d89e831c1c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:4d:d6:82:fd:f9:88:a2:9f:3a:3b:51:d6:
db:0b:cf:bc:ae:1d:50:32:5d:0c:9a:44:09:7d:4f:
20:74:19:2e:2a:20:32:79:0e:22:0d:17:ac:71:00:
c3:d5:76:f3:bf:73:aa:ea:dd:44:21:89:ec:8c:09:
2d:eb:6b:e5:46:65:25:e6:e8:0c:5e:23:5c:8c:00:
34:11:56:45:c3:30:8b:a2:eb:40:53:a4:72:27:44:
82:3d:e8:9c:b3:22:cf:b7:84:b3:1e:0a:07:5a:1a:
0d:c2:b0:79:25:64:d5:0e:70:f0:29:05:77:fa:ab:
b6:13:92:60:ba:d5:35:ca:a0:b1:58:75:62:0a:f9:
15:28:30:5f:9f:d9:04:6c:94:ac:5d:91:2e:77:68:
b4:bd:2d:8d:ec:9d:2d:73:d6:9e:68:81:c6:d1:ef:
21:48:65:5f:a4:4c:20:b0:99:2d:0d:2d:fd:12:77:
f0:cc:e2:be:5b:b7:dd:65:8e:5a:32:2f:db:e7:8a:
c4:9d:16:94:46:ae:e6:14:09:99:a9:5d:30:76:b3:
3b:65:53:96:d1:67:ad:7d:9b:1d:32:07:bc:7d:31:
fd:33:8a:eb:7f:f8:28:40:62:2c:99:7d:cb:8c:4a:
0b:f3:3e:2f:cf:24:bb:a9:ab:ee:26:ea:63:6b:ac:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:15:65:1E:27:74:84:C2:87:B7:7F:D7:4D:89:E8:31:C1:C2:3C
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:1f:7e:94:0c:35:fa:29:e5:90:b1:fb:6e:7e:81:4b:21:
55:11:87:1e:e2:3a:9d:85:c1:7d:96:5d:09:97:5f:3b:66:89:
98:f0:17:8d:c2:06:34:3f:16:3e:e9:b6:25:22:83:38:aa:1c:
8a:c4:82:7b:e8:66:d2:ea:1d:ac:df:b0:65:fb:36:03:65:40:
f2:90:f2:44:24:6a:1f:ce:a4:a5:c9:ef:15:87:f7:7d:4b:1f:
0f:9d:72:b6:26:f0:d0:27:04:18:e0:b5:b5:14:65:15:a3:98:
24:90:8a:80:e2:88:6d:c1:93:91:db:ce:b6:7d:2c:51:e6:93:
cf:62:c2:a8:94:28:94:f3:38:4a:97:9e:26:cd:d6:f5:f3:e0:
6e:c6:cc:e0:76:95:3b:9a:d8:b5:73:0d:98:a6:f5:0c:a7:c6:
cc:d8:f0:bf:2c:7e:b0:07:85:90:c0:b8:2b:f0:1e:5a:a0:e4:
ec:42:dd:b9:a2:bd:7a:99:77:08:77:40:50:9f:29:0c:04:b6:
cb:3e:0a:0b:3d:78:69:db:65:7e:2d:09:c9:3f:85:10:68:8a:
e8:df:dc:8a:25:1c:1b:ec:74:0d:16:20:5f:a1:ac:fb:a3:58:
81:50:04:71:68:e8:75:07:6e:24:21:c6:eb:92:43:3e:d3:25:
78:fb:14:45
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDCH7V8holCI96UgjenYu96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjYwOTIxMDQwMDUyWhcNMjYwOTIyMDQwMDUyWjAzMTEwLwYDVQQD
EygwZDIzMTU2NTFlMjc3NDg0YzI4N2I3N2ZkNzRkODllODMxYzFjMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOBN1oL9+Yiinzo7UdbbC8+8rh1Q
Ml0MmkQJfU8gdBkuKiAyeQ4iDRescQDD1Xbzv3Oq6t1EIYnsjAkt62vlRmUl5ugM
XiNcjAA0EVZFwzCLoutAU6RyJ0SCPeicsyLPt4SzHgoHWhoNwrB5JWTVDnDwKQV3
+qu2E5JgutU1yqCxWHViCvkVKDBfn9kEbJSsXZEud2i0vS2N7J0tc9aeaIHG0e8h
SGVfpEwgsJktDS39EnfwzOK+W7fdZY5aMi/b54rEnRaURq7mFAmZqV0wdrM7ZVOW
0WetfZsdMge8fTH9M4rrf/goQGIsmX3LjEoL8z4vzyS7qavuJupja6yfUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA0jFWUeJ3SEwoe3f9dNiegxwcI8MB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4Uf
fpQMNfop5ZCx+25+gUshVRGHHuI6nYXBfZZdCZdfO2aJmPAXjcIGND8WPum2JSKD
OKocisSCe+hm0uodrN+wZfs2A2VA8pDyRCRqH86kpcnvFYf3fUsfD51ytibw0CcE
GOC1tRRlFaOYJJCKgOKIbcGTkdvOtn0sUeaTz2LCqJQolPM4SpeeJs3W9fPgbsbM
4HaVO5rYtXMNmKb1DKfGzNjwvyx+sAeFkMC4K/AeWqDk7ELduaK9epl3CHdAUJ8p
DAS2yz4KCz14adtlfi0JyT+FEGiK6N/ciiUcG+x0DRYgX6Gs+6NYgVAEcWjodQdu
JCHG65JDPtMlePsURQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:25:28 2026 by rpki-client