Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: n28alNO3FebuqPcJV7xT4uSoh3h64lUUFS6fdQ4Ey60=
Subject key identifier: A7:C8:6A:F7:EC:38:29:40:68:C8:EC:4B:05:B6:8B:C0:48:88:7B:64
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 01A0CEFFC93B62063A92E33F0135FF18BF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 12E8
Signing time: Wed 23 Sep 2026 16:01:04 +0000
Manifest this update: Wed 23 Sep 2026 16:01:04 +0000
Manifest next update: Thu 24 Sep 2026 16:01:04 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: OKfZIToPrYN39hFKYjlmzel4h82vpIWgcp4TKcGImgs=)
2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:c9:3b:62:06:3a:92:e3:3f:01:35:ff:18:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Sep 23 16:01:04 2026 GMT
Not After : Sep 24 16:01:04 2026 GMT
Subject: CN=a7c86af7ec38294068c8ec4b05b68bc048887b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:5e:e8:a1:41:02:a8:7d:e3:2c:9c:33:ef:
be:a2:d5:ab:ac:09:93:cc:fc:61:05:b9:92:7c:04:
62:1e:9b:b8:da:cb:f5:b1:5b:c8:0c:81:2d:e9:fb:
52:1f:df:9d:47:88:81:96:52:fe:7b:95:12:ee:b0:
1d:d7:d4:81:5d:e1:c2:fa:09:98:12:d7:06:8c:81:
e9:ec:bd:f3:87:ae:32:f4:58:25:e6:b2:6c:e4:30:
2e:f3:36:bf:40:93:c6:61:b3:9f:8b:f4:38:ae:02:
68:21:30:39:3b:c0:8f:1a:f9:21:35:59:69:66:ea:
82:c5:2e:d6:76:0b:bf:fe:83:2a:3b:fc:9d:b1:da:
72:34:0f:75:e1:b9:c7:04:71:a4:79:95:2c:e2:aa:
7b:74:6e:3e:58:fd:7e:09:41:34:4d:88:92:a1:75:
61:98:dc:62:5a:24:79:e6:c6:9d:57:ae:16:26:94:
91:79:83:36:36:8f:cc:cc:2e:76:30:c9:e2:d8:3e:
8d:cf:90:0a:75:ef:af:6d:6b:20:95:69:9b:2e:93:
c9:5b:d0:20:77:3c:2a:21:d6:4d:f1:c5:01:d6:2b:
64:46:ab:e3:e4:ea:9b:a9:38:04:76:37:e4:1b:9b:
9c:2d:ac:c7:48:37:c5:60:ad:15:c8:f2:20:1d:50:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:6A:F7:EC:38:29:40:68:C8:EC:4B:05:B6:8B:C0:48:88:7B:64
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:7d:85:d6:56:56:92:b1:97:0f:b5:9e:0c:01:95:3f:b7:
32:47:50:58:97:b5:18:81:29:3d:2e:dc:09:29:0d:45:ce:98:
61:c5:97:d6:4f:8e:05:50:c3:1a:99:a2:a1:38:b5:bf:ec:1b:
fd:62:58:d0:76:c6:18:a2:f6:d8:41:d7:92:3a:42:34:3b:c0:
4f:e8:0d:ac:a5:ed:6e:87:78:63:76:be:5e:34:68:a5:89:ef:
91:21:03:91:5c:89:86:55:4e:db:2d:a6:8f:bf:c2:92:cd:1c:
65:5a:f1:b3:2c:3f:36:2e:4d:0d:50:3a:6e:b4:6a:a7:fe:15:
24:1d:0c:6a:b1:41:51:4e:3e:9c:da:77:08:06:94:ca:d1:5f:
41:30:ce:4b:51:e6:5b:c3:2e:3c:6c:aa:ad:12:9f:86:95:e4:
a1:4d:33:c7:09:3a:28:40:81:bf:5a:9e:15:b0:21:73:c4:01:
2c:ee:32:ef:c7:87:b8:e3:e1:01:a9:84:90:a4:cc:4e:33:23:
d4:83:68:5d:bc:d0:87:f7:ce:8a:30:ac:4d:e1:1b:e1:fc:be:
4f:0a:27:43:d0:ad:8e:0d:53:85:7e:c6:dd:d2:17:ec:b8:6c:
75:4f:ef:d0:b6:2e:2a:cd:b5:ba:5b:f6:c3:eb:32:44:36:f2:
5b:6a:25:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/8k7YgY6kuM/ATX/GL8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk
MWExOWIwHhcNMjYwOTIzMTYwMTA0WhcNMjYwOTI0MTYwMTA0WjAzMTEwLwYDVQQD
EyhhN2M4NmFmN2VjMzgyOTQwNjhjOGVjNGIwNWI2OGJjMDQ4ODg3YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvhe6KFBAqh94yycM+++otWrrAmT
zPxhBbmSfARiHpu42sv1sVvIDIEt6ftSH9+dR4iBllL+e5US7rAd19SBXeHC+gmY
EtcGjIHp7L3zh64y9Fgl5rJs5DAu8za/QJPGYbOfi/Q4rgJoITA5O8CPGvkhNVlp
ZuqCxS7Wdgu//oMqO/ydsdpyNA914bnHBHGkeZUs4qp7dG4+WP1+CUE0TYiSoXVh
mNxiWiR55sadV64WJpSReYM2No/MzC52MMni2D6Nz5AKde+vbWsglWmbLpPJW9Ag
dzwqIdZN8cUB1itkRqvj5OqbqTgEdjfkG5ucLazHSDfFYK0VyPIgHVCknwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfIavfsOClAaMjsSwW2i8BIiHtkMB8GA1UdIwQY
MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct
YzA5NTZhODAxMzJkLzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk
LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9R9hdZW
VpKxlw+1ngwBlT+3MkdQWJe1GIEpPS7cCSkNRc6YYcWX1k+OBVDDGpmioTi1v+wb
/WJY0HbGGKL22EHXkjpCNDvAT+gNrKXtbod4Y3a+XjRopYnvkSEDkVyJhlVO2y2m
j7/Cks0cZVrxsyw/Ni5NDVA6brRqp/4VJB0MarFBUU4+nNp3CAaUytFfQTDOS1Hm
W8MuPGyqrRKfhpXkoU0zxwk6KECBv1qeFbAhc8QBLO4y78eHuOPhAamEkKTMTjMj
1INoXbzQh/fOijCsTeEb4fy+TwonQ9Ctjg1ThX7G3dIX7LhsdU/v0LYuKs21ulv2
w+syRDbyW2ol7Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:34:27 2026 by rpki-client