Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: 4pJqCxPYVFAmyj/Yu/DQvAFnyahMEqSNEQY34xUMQCs=
Subject key identifier: B1:47:36:31:10:8D:12:88:42:EE:FD:C3:17:BD:28:55:68:F8:15:12
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019D98F429F4D2788E5C08AAA7FC9000D993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0D8F
Signing time: Fri 17 Apr 2026 01:00:31 +0000
Manifest this update: Fri 17 Apr 2026 01:00:31 +0000
Manifest next update: Sat 18 Apr 2026 01:00:31 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: vAYszvQq2SNFT0OPA4hSIKTZ0/ae9fsadx9ux/GS5V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:29:f4:d2:78:8e:5c:08:aa:a7:fc:90:00:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Apr 17 01:00:31 2026 GMT
Not After : Apr 18 01:00:31 2026 GMT
Subject: CN=b1473631108d128842eefdc317bd285568f81512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:8e:8a:72:ab:90:e7:5e:d6:51:54:61:6b:
25:f0:4e:d1:3e:84:17:48:28:3c:9d:91:6e:e3:b8:
13:83:4f:9f:58:b3:02:17:00:87:68:50:df:51:59:
f0:eb:a3:03:0c:ed:e8:28:05:12:f3:dc:d2:32:00:
4d:45:96:8e:e3:2c:c1:41:06:50:b2:5c:54:08:81:
10:86:c4:bb:b1:e3:11:a3:0f:c4:bc:f4:5a:f3:15:
99:74:c7:08:5b:4a:01:4c:39:ca:4d:69:e9:01:1e:
20:58:4c:12:70:d9:4a:40:cb:3a:c6:2d:8c:e7:7b:
83:0d:23:52:e7:e0:a9:d5:10:36:e6:3c:57:98:c1:
38:1a:16:e4:da:ec:cd:4c:18:bc:18:01:0e:46:cf:
1b:54:91:f4:85:72:47:46:b4:96:76:6d:f0:30:1c:
c4:d2:d2:05:af:61:5e:9c:6e:fb:38:1b:61:e2:bf:
16:37:5d:79:63:76:de:77:f1:33:fe:99:9e:63:8a:
54:e7:23:2e:52:c3:10:e4:af:5c:00:74:98:37:a0:
4c:fa:e5:f2:5a:c0:a8:63:9b:cb:15:35:c4:4f:e0:
89:5c:00:6a:2f:37:3f:3d:c7:2d:49:39:84:54:db:
7f:9a:f7:ed:36:02:ec:b2:ab:4b:62:01:6f:9a:87:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:36:31:10:8D:12:88:42:EE:FD:C3:17:BD:28:55:68:F8:15:12
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:37:7f:43:8d:50:a9:db:98:31:1f:e4:da:24:42:5e:6e:
03:e2:91:e8:ec:43:13:56:c6:4f:cb:0c:55:57:58:7c:16:0a:
ac:6e:21:99:fa:16:f5:25:87:eb:73:41:22:8f:dd:35:64:3c:
13:b8:3c:14:b6:db:ba:1b:32:78:53:be:12:76:44:18:47:f7:
85:2b:3e:52:5e:fc:7b:6e:7d:18:2d:bc:37:c7:f1:15:f4:98:
c9:ab:de:2b:c3:bd:5f:5a:e7:39:9a:6e:3e:b5:4c:e4:0b:c0:
ff:4d:22:a6:4b:95:78:7f:eb:76:94:ac:37:2a:30:09:f3:59:
2a:9d:8c:b4:87:85:01:e9:c8:3f:b3:98:51:f6:3e:0e:f7:80:
00:38:f2:82:fd:2a:9f:f6:ee:04:ad:6a:b8:6d:f8:24:29:e8:
84:68:1a:97:33:ee:21:69:f5:76:1e:10:57:be:27:12:b9:2b:
14:40:fb:e9:1b:33:6f:79:98:e8:2b:5a:2f:47:bb:bd:f1:d2:
a3:14:94:04:34:ac:b1:7e:8e:3f:59:02:77:13:74:f0:55:26:
f1:38:21:8c:d8:49:64:a3:ad:25:f9:ba:e4:1e:2f:b2:7b:d5:
ee:c1:de:44:70:07:72:42:e1:b1:ed:ed:ba:85:57:c7:15:19:
18:7a:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:20:20 2026 by rpki-client