Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: howsKzNcnA8qydRdM1iW3/Azlyk4iaB+RUJ3YztQNO0=
Subject key identifier: 81:5F:F7:83:6B:EA:BA:D3:10:16:08:52:85:EB:C8:C2:86:97:B0:2F
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 01A1C442307F4E1651DEE4E3561D9675386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 1367
Signing time: Tue 10 Nov 2026 07:00:34 +0000
Manifest this update: Tue 10 Nov 2026 07:00:34 +0000
Manifest next update: Wed 11 Nov 2026 07:00:34 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: JtPbT1yj/ELrXyjGZhCM6yL+aifX7ZktnKGKXNH0KX4=)
2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:30:7f:4e:16:51:de:e4:e3:56:1d:96:75:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Nov 10 07:00:34 2026 GMT
Not After : Nov 11 07:00:34 2026 GMT
Subject: CN=815ff7836beabad31016085285ebc8c28697b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:b5:b9:ad:86:c4:9d:ab:33:ac:c5:8c:8c:
ef:27:4a:18:b7:a9:b0:61:08:9a:36:6d:b7:f2:7c:
15:c9:01:25:46:f2:91:71:4f:df:14:28:a1:b6:c9:
13:15:ec:73:d5:0f:6e:d3:c5:37:70:10:b2:e1:dd:
6e:8b:3f:26:c7:9f:3c:83:6d:69:c9:90:ab:0e:7e:
fb:f1:3a:43:d6:ea:ba:c1:d4:fe:1e:74:49:41:d7:
03:d0:72:02:1b:71:33:14:52:82:aa:82:c2:04:38:
ec:05:f0:b9:ab:e6:f3:18:20:ef:1f:71:29:32:82:
17:e0:d3:a5:37:72:72:ba:3f:14:cc:eb:ed:1d:d9:
1a:fb:a5:9b:4f:77:9a:db:bc:f1:e6:f4:cb:5d:03:
67:ce:99:4f:ca:0e:19:cb:1e:cd:33:2a:f6:ed:18:
23:e1:21:bf:6f:99:d0:c3:d4:82:f5:54:fa:4c:86:
ed:09:65:ab:ed:82:97:d7:89:47:68:f9:d7:49:d1:
84:1c:d3:6d:1b:41:17:bb:e0:dc:9b:48:0f:9e:30:
6f:c6:f2:ff:e8:c6:8f:b6:a6:9a:4e:97:2c:ef:70:
30:45:60:a2:ce:4f:9e:14:13:01:4c:44:18:27:7c:
1c:2c:43:c4:c0:cd:c0:a9:d0:e7:20:cb:95:2d:85:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:F7:83:6B:EA:BA:D3:10:16:08:52:85:EB:C8:C2:86:97:B0:2F
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:ab:5e:b5:23:50:8e:33:34:ed:0b:c9:c5:10:3b:70:39:
34:27:46:a0:fa:c9:83:df:e5:41:2d:07:c2:e9:e0:9a:60:7d:
ed:71:29:e8:fa:4e:25:ab:39:7b:c5:52:08:5e:ae:fd:59:67:
2b:45:5a:8d:46:77:59:1f:7d:d3:ae:14:f4:34:49:c2:fb:ae:
b5:a1:f3:0e:65:d5:62:6e:a5:90:a7:5a:a6:d7:7c:f3:dd:c4:
df:d9:b8:c3:5f:eb:e9:07:e6:0e:f9:4c:7a:7e:53:a8:a2:29:
1d:76:65:b6:fd:be:79:b4:a5:92:6e:cc:7e:8e:b5:4d:26:a3:
cb:3a:15:4d:47:ad:af:91:74:f6:93:64:59:ac:f8:45:68:e7:
be:e3:77:09:45:cf:23:19:57:6f:19:f9:b6:1e:3a:35:a0:53:
d2:cd:4a:90:73:05:73:88:6c:8d:72:7f:d6:7b:b5:3a:fd:13:
bd:7b:c6:3e:36:b0:ad:4c:25:86:6f:ff:00:fa:9c:9a:8b:0f:
e8:59:cb:19:d2:d2:71:9e:7a:2c:49:c6:29:fc:7a:d9:fb:89:
c8:08:5f:b5:63:7c:67:cd:09:80:3a:86:ff:a3:ae:61:f8:8f:
68:d6:29:4d:20:19:59:40:82:89:29:63:2b:3c:b8:94:f8:9d:
f9:01:0d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEQjB/ThZR3uTjVh2WdThuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk
MWExOWIwHhcNMjYxMTEwMDcwMDM0WhcNMjYxMTExMDcwMDM0WjAzMTEwLwYDVQQD
Eyg4MTVmZjc4MzZiZWFiYWQzMTAxNjA4NTI4NWViYzhjMjg2OTdiMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfK1ua2GxJ2rM6zFjIzvJ0oYt6mw
YQiaNm238nwVyQElRvKRcU/fFCihtskTFexz1Q9u08U3cBCy4d1uiz8mx588g21p
yZCrDn778TpD1uq6wdT+HnRJQdcD0HICG3EzFFKCqoLCBDjsBfC5q+bzGCDvH3Ep
MoIX4NOlN3Jyuj8UzOvtHdka+6WbT3ea27zx5vTLXQNnzplPyg4Zyx7NMyr27Rgj
4SG/b5nQw9SC9VT6TIbtCWWr7YKX14lHaPnXSdGEHNNtG0EXu+Dcm0gPnjBvxvL/
6MaPtqaaTpcs73AwRWCizk+eFBMBTEQYJ3wcLEPEwM3AqdDnIMuVLYUO6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFf94Nr6rrTEBYIUoXryMKGl7AvMB8GA1UdIwQY
MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct
YzA5NTZhODAxMzJkLzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk
LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl2rXrUj
UI4zNO0LycUQO3A5NCdGoPrJg9/lQS0HwungmmB97XEp6PpOJas5e8VSCF6u/Vln
K0VajUZ3WR99064U9DRJwvuutaHzDmXVYm6lkKdaptd8893E39m4w1/r6QfmDvlM
en5TqKIpHXZltv2+ebSlkm7Mfo61TSajyzoVTUetr5F09pNkWaz4RWjnvuN3CUXP
IxlXbxn5th46NaBT0s1KkHMFc4hsjXJ/1nu1Ov0TvXvGPjawrUwlhm//APqcmosP
6FnLGdLScZ56LEnGKfx62fuJyAhftWN8Z80JgDqG/6OuYfiPaNYpTSAZWUCCiSlj
Kzy4lPid+QENiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 12:00:51 2026 by rpki-client