
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: TS4Cc5TOdbFkbxI4GYRHJeUm6QZKvwEyselLhgDGPwQ=
Subject key identifier: 2D:C5:97:CF:2B:D1:C1:4D:54:FF:1F:10:E3:7E:BD:17:AE:24:F1:0B
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 019FA9759D42A60AFA9AFE478209BE69D219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 1250
Signing time: Tue 28 Jul 2026 16:01:25 +0000
Manifest this update: Tue 28 Jul 2026 16:01:25 +0000
Manifest next update: Wed 29 Jul 2026 16:01:25 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: n3Cu2H6zjfX8omRS0q4yPIgxIHmRJu092bJY67jNM1s=)
2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:9d:42:a6:0a:fa:9a:fe:47:82:09:be:69:d2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Jul 28 16:01:25 2026 GMT
Not After : Jul 29 16:01:25 2026 GMT
Subject: CN=2dc597cf2bd1c14d54ff1f10e37ebd17ae24f10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:68:48:36:16:9f:34:9a:d0:84:3b:19:54:
12:66:5e:98:77:fe:7e:6b:37:52:ec:22:84:3d:76:
42:2c:eb:c1:06:7e:00:a1:26:be:fd:41:d1:95:43:
92:b4:a7:78:37:55:17:58:11:26:6c:d3:e1:e6:d5:
5f:f2:19:f3:cf:8f:0b:db:7d:12:bd:f2:a2:13:70:
4a:88:76:f5:09:fd:e1:e2:e3:c5:dc:87:df:8d:2f:
6f:80:d0:aa:45:74:bf:91:b1:d4:09:50:92:22:a6:
51:2f:c0:df:18:d2:02:d8:f5:a2:22:cb:d6:88:81:
16:87:0c:a9:dd:ed:19:df:d8:78:85:f3:bf:76:b1:
14:ef:e8:e2:6c:8b:b1:d5:e5:b4:c0:a4:40:4f:50:
5a:fb:1d:ea:93:c4:30:b6:95:20:10:aa:44:71:7e:
f3:e1:cd:3e:9f:26:55:25:02:a2:26:35:9e:d8:11:
51:33:5b:80:52:c6:9b:89:b0:74:26:3b:c5:fe:2f:
73:f0:1e:92:34:3d:e1:08:cc:2d:4b:87:65:45:35:
ab:24:9b:34:4a:5a:18:10:de:2b:3d:c9:96:37:b4:
08:cc:f3:e4:22:f3:e5:ba:b3:d0:96:c0:9b:f7:87:
0a:b6:41:56:d4:fa:c1:cc:a2:db:cc:6e:71:00:ef:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:97:CF:2B:D1:C1:4D:54:FF:1F:10:E3:7E:BD:17:AE:24:F1:0B
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:76:20:78:19:cf:0c:8b:56:16:44:eb:a1:6d:50:d2:24:
43:b8:81:ec:39:37:93:ab:1d:f0:e7:82:33:f1:fb:3d:46:3a:
03:13:7e:c0:1b:6d:cf:e7:28:af:b3:38:d1:08:20:e6:32:5a:
d8:63:b8:f3:eb:6b:b6:ef:11:62:9c:d7:48:e8:b8:a1:31:45:
ed:6d:6b:6c:5a:7a:fb:a7:1b:46:ed:3d:71:5a:fd:47:73:bf:
56:76:fe:6b:72:cb:12:3c:55:82:a2:06:20:46:22:48:98:fd:
97:f8:3c:30:f6:68:c0:b0:eb:b3:f6:ee:d8:80:10:86:fc:59:
1c:3d:36:aa:28:20:84:2c:77:8e:46:75:75:4a:8b:23:cf:d9:
d2:d8:63:31:8a:c5:f1:ef:52:3d:b3:cc:fc:69:25:4b:c2:29:
fd:45:d8:6e:a3:26:08:fd:58:14:44:bd:6a:3d:d3:0c:30:1e:
58:99:93:6b:23:56:02:42:bf:d6:3a:9e:7d:c4:a6:38:f3:a0:
1b:a4:aa:2c:30:7a:8c:68:aa:62:b3:0d:79:20:51:de:97:9b:
f3:0c:c6:ea:d1:8f:ee:c0:12:f8:29:97:3c:f6:d7:d0:97:0d:
16:b4:f6:b8:a2:59:cf:2b:02:39:1c:b3:23:1c:d3:97:70:70:
c1:35:16:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:27 2026 by rpki-client