Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: QGuQd0AFumcPRdSybxUYzuv8iLUXwRLpJ7O/lURKmN4=
Subject key identifier: 42:8D:C1:6C:51:77:3B:E6:3A:AD:B6:2A:9A:C6:24:5F:47:C1:B3:5E
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019CAB6BC5D07D67BBAB95F6C4ADBDB09FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0D14
Signing time: Sun 01 Mar 2026 22:01:32 +0000
Manifest this update: Sun 01 Mar 2026 22:01:32 +0000
Manifest next update: Mon 02 Mar 2026 22:01:32 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: TmvtUSgWgJJ+YsoqGrq+wZUJM+4uEtegoLE+I3ttE6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c5:d0:7d:67:bb:ab:95:f6:c4:ad:bd:b0:9f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Mar 1 22:01:32 2026 GMT
Not After : Mar 2 22:01:32 2026 GMT
Subject: CN=428dc16c51773be63aadb62a9ac6245f47c1b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:5e:64:0a:8f:1c:b6:da:e2:cb:a4:39:94:
dc:b8:5a:2f:cd:af:60:63:05:43:f7:17:73:f0:d2:
ab:54:70:ce:3b:ff:d3:03:42:c9:63:33:ad:b8:a1:
15:a7:9c:af:eb:37:21:47:32:c4:73:26:6d:c4:0e:
14:52:81:ba:fd:cc:03:df:d9:0a:e1:0c:59:6b:51:
56:24:5b:9a:60:89:32:f2:8c:f3:4f:ca:58:f7:66:
b3:82:09:5b:28:6a:2d:46:53:4c:85:11:f3:1e:85:
a1:0a:11:ab:b6:01:e9:22:aa:c4:01:f0:e1:15:46:
7e:07:09:d4:ed:83:e9:87:72:72:0e:d8:50:a5:5f:
d2:3a:5c:2e:3f:d2:66:94:71:cb:07:df:03:72:d7:
05:9d:76:12:77:7a:54:4b:ee:bb:ed:4b:7a:85:41:
bb:55:21:10:50:ef:61:33:09:aa:13:98:60:77:c1:
e6:b9:b2:13:9b:ff:ff:c2:f5:fc:1e:79:ba:db:d1:
34:18:9e:38:7f:7b:b4:ad:96:8b:e2:e5:7c:b7:55:
a3:62:6c:3e:9e:74:0a:08:20:e1:64:24:e6:bf:07:
1c:68:df:f8:a9:58:36:c7:35:11:f2:f3:5c:d9:4f:
c5:81:23:76:36:f3:dc:54:e2:55:7d:cc:c8:4e:42:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:C1:6C:51:77:3B:E6:3A:AD:B6:2A:9A:C6:24:5F:47:C1:B3:5E
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0a:f8:ae:54:98:66:5a:72:47:e0:9b:11:61:07:0f:bb:98:
f4:9f:c4:5b:b3:2b:98:92:30:7e:1d:e5:bb:11:77:32:7c:b6:
4f:6b:8d:43:aa:d4:54:bb:57:bb:da:32:d9:48:35:51:a9:74:
ee:d7:d9:f9:f5:8c:ab:b9:e0:37:b9:69:0f:9f:3b:c9:09:a5:
81:6d:94:e3:3b:ee:2b:e2:d7:dc:c6:95:10:45:90:cd:0e:be:
3d:1e:1a:2a:9f:32:ba:a2:6e:4b:30:67:1a:4a:a9:96:bd:7e:
ce:40:14:8d:7e:dc:d5:0a:dc:42:0c:fe:db:cb:db:7c:55:a0:
ba:84:c6:c7:bb:71:b7:28:56:fd:9f:cd:5a:1c:aa:f1:06:23:
3d:97:04:95:12:76:99:08:dd:97:54:18:4f:a7:cd:a5:eb:0a:
74:c7:ae:46:56:8c:27:0b:89:4d:08:bd:b1:5b:30:1e:b7:8a:
2c:07:80:5e:44:76:c5:c5:f5:df:5a:22:45:d8:e4:9f:1f:6a:
4f:2c:4e:12:db:fa:9e:a2:45:b6:7c:f3:d4:12:11:57:01:75:
36:89:89:56:e0:3a:f1:60:e4:6f:03:47:d0:6e:f1:3e:94:d9:
cf:a6:d5:f6:72:c9:78:af:0d:54:f7:6a:2f:76:6b:c1:66:cd:
fc:4d:bd:d4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyra8XQfWe7q5X2xK29sJ/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjYwMzAxMjIwMTMyWhcNMjYwMzAyMjIwMTMyWjAzMTEwLwYDVQQD
Eyg0MjhkYzE2YzUxNzczYmU2M2FhZGI2MmE5YWM2MjQ1ZjQ3YzFiMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdheZAqPHLba4sukOZTcuFovza9g
YwVD9xdz8NKrVHDOO//TA0LJYzOtuKEVp5yv6zchRzLEcyZtxA4UUoG6/cwD39kK
4QxZa1FWJFuaYIky8ozzT8pY92azgglbKGotRlNMhRHzHoWhChGrtgHpIqrEAfDh
FUZ+BwnU7YPph3JyDthQpV/SOlwuP9JmlHHLB98DctcFnXYSd3pUS+677Ut6hUG7
VSEQUO9hMwmqE5hgd8HmubITm///wvX8Hnm629E0GJ44f3u0rZaL4uV8t1WjYmw+
nnQKCCDhZCTmvwccaN/4qVg2xzUR8vNc2U/FgSN2NvPcVOJVfczITkLW9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEKNwWxRdzvmOq22KprGJF9HwbNeMB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwr4
rlSYZlpyR+CbEWEHD7uY9J/EW7MrmJIwfh3luxF3Mny2T2uNQ6rUVLtXu9oy2Ug1
Ual07tfZ+fWMq7ngN7lpD587yQmlgW2U4zvuK+LX3MaVEEWQzQ6+PR4aKp8yuqJu
SzBnGkqplr1+zkAUjX7c1QrcQgz+28vbfFWguoTGx7txtyhW/Z/NWhyq8QYjPZcE
lRJ2mQjdl1QYT6fNpesKdMeuRlaMJwuJTQi9sVswHreKLAeAXkR2xcX131oiRdjk
nx9qTyxOEtv6nqJFtnzz1BIRVwF1NomJVuA68WDkbwNH0G7xPpTZz6bV9nLJeK8N
VPdqL3ZrwWbN/E291A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:11 2026 by rpki-client