Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: IwZeDyepyqIb6rgBV51zhpfRtvr4m9yqNLEAm4AihDo=
Subject key identifier: B2:2D:D0:F1:0A:E4:54:08:D2:58:86:32:E6:FE:5A:84:23:89:5C:83
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 01A0C17AE62B264C02E5A9D32AD78B61FA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 12E1
Signing time: Mon 21 Sep 2026 01:00:52 +0000
Manifest this update: Mon 21 Sep 2026 01:00:52 +0000
Manifest next update: Tue 22 Sep 2026 01:00:52 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: TevfBNUgAUYclaDzBcIO8YhwoLEPhNLS0vqxJnYdSvo=)
2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:e6:2b:26:4c:02:e5:a9:d3:2a:d7:8b:61:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Sep 21 01:00:52 2026 GMT
Not After : Sep 22 01:00:52 2026 GMT
Subject: CN=b22dd0f10ae45408d2588632e6fe5a8423895c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:85:4e:6f:86:4a:bd:e5:26:2e:32:6a:9a:
c7:bc:83:8a:58:19:1c:11:6f:52:d8:68:fb:a1:75:
44:bb:84:9a:4c:8a:28:e9:eb:2f:06:af:ee:1f:0f:
b5:28:49:78:39:a1:bb:1d:d9:e7:1a:3f:3b:c3:23:
a4:18:dd:fe:62:1a:e6:71:6b:93:92:89:d2:0a:c2:
56:c5:47:15:0c:d2:0d:4f:d0:13:43:ae:26:68:f8:
9b:f2:65:be:e2:9e:a4:a4:18:33:28:91:74:9d:7b:
08:d0:45:87:77:bd:4d:5d:6e:d5:74:38:f8:16:10:
9a:7e:b1:4b:39:49:2a:d9:ca:f5:6b:93:b0:37:c5:
ac:9d:51:4f:42:6f:0a:c6:9c:3c:55:d0:c3:cb:de:
de:51:8a:82:d0:9c:9f:47:af:f9:6c:09:9b:80:6c:
13:81:bc:04:70:7c:47:b8:b5:ab:40:60:ea:8f:88:
25:19:96:2d:b1:f6:3b:c2:2a:20:4d:cf:0e:02:54:
47:fb:0f:7a:58:58:81:0c:b7:c8:b0:7b:c5:a3:37:
d1:47:05:82:6f:14:ab:c0:4c:7d:ae:71:19:21:92:
ba:cc:63:ed:a4:cd:b8:37:9c:54:9e:b4:b8:45:a8:
e9:54:24:f2:3a:6d:4e:c0:6e:ae:44:ff:06:19:2f:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:D0:F1:0A:E4:54:08:D2:58:86:32:E6:FE:5A:84:23:89:5C:83
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:bc:30:b9:7a:44:ba:7b:a1:d0:9f:d2:a3:cc:46:e7:97:
3a:05:15:2c:eb:2c:f5:eb:7b:f3:b0:6e:12:0d:ae:23:e7:76:
c5:f3:d2:59:d0:24:d3:32:8d:54:d3:67:bd:1a:02:d9:3e:9a:
5f:42:70:14:d6:fc:60:e9:b2:5f:52:40:13:3a:4a:52:59:1d:
91:22:8e:fa:33:97:71:c9:8a:57:5e:c2:ff:cf:19:4f:71:bf:
c8:17:7c:19:09:53:74:60:c7:8a:8e:ea:e0:c0:be:c2:da:3e:
88:b7:21:70:69:3b:e6:ea:44:11:18:74:22:db:19:65:a2:25:
5a:1c:2f:bb:a0:de:62:84:e6:d5:80:13:4a:52:ae:06:37:72:
f1:10:b3:9a:12:63:ec:4f:a6:2b:cf:2c:66:9b:c6:3f:1c:a6:
c8:b8:11:9b:3e:19:52:2c:f1:05:2e:df:28:df:83:45:3c:0f:
6c:03:82:48:56:f5:3c:67:c8:9b:fd:67:fa:d5:86:1e:92:03:
71:b2:3f:31:1c:43:ab:16:2b:5e:5b:ed:81:9a:52:21:4a:a3:
83:5b:6b:d3:7a:da:b0:24:fc:23:87:2f:1f:01:65:a6:68:b4:
f7:b9:3a:2c:c1:ec:b1:69:93:1a:53:e3:42:ef:be:87:ca:20:
1a:f9:18:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBeuYrJkwC5anTKteLYfpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk
MWExOWIwHhcNMjYwOTIxMDEwMDUyWhcNMjYwOTIyMDEwMDUyWjAzMTEwLwYDVQQD
EyhiMjJkZDBmMTBhZTQ1NDA4ZDI1ODg2MzJlNmZlNWE4NDIzODk1YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA362FTm+GSr3lJi4yaprHvIOKWBkc
EW9S2Gj7oXVEu4SaTIoo6esvBq/uHw+1KEl4OaG7HdnnGj87wyOkGN3+YhrmcWuT
konSCsJWxUcVDNINT9ATQ64maPib8mW+4p6kpBgzKJF0nXsI0EWHd71NXW7VdDj4
FhCafrFLOUkq2cr1a5OwN8WsnVFPQm8Kxpw8VdDDy97eUYqC0JyfR6/5bAmbgGwT
gbwEcHxHuLWrQGDqj4glGZYtsfY7wiogTc8OAlRH+w96WFiBDLfIsHvFozfRRwWC
bxSrwEx9rnEZIZK6zGPtpM24N5xUnrS4RajpVCTyOm1OwG6uRP8GGS9hXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIt0PEK5FQI0liGMub+WoQjiVyDMB8GA1UdIwQY
MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct
YzA5NTZhODAxMzJkLzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk
LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwS8MLl6
RLp7odCf0qPMRueXOgUVLOss9et787BuEg2uI+d2xfPSWdAk0zKNVNNnvRoC2T6a
X0JwFNb8YOmyX1JAEzpKUlkdkSKO+jOXccmKV17C/88ZT3G/yBd8GQlTdGDHio7q
4MC+wto+iLchcGk75upEERh0ItsZZaIlWhwvu6DeYoTm1YATSlKuBjdy8RCzmhJj
7E+mK88sZpvGPxymyLgRmz4ZUizxBS7fKN+DRTwPbAOCSFb1PGfIm/1n+tWGHpID
cbI/MRxDqxYrXlvtgZpSIUqjg1tr03rasCT8I4cvHwFlpmi097k6LMHssWmTGlPj
Qu++h8ogGvkY5w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:21:06 2026 by rpki-client