Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: nqDI7f4iQWzJzGTgnWCeeA1B4ouDAMuzYLbAPgWXR9M=
Subject key identifier: 5D:89:82:D0:6B:73:5D:78:59:C3:47:AA:8D:0F:8B:6A:04:4D:2C:F7
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 019CAAC636674D55E8354DD74C699F8CB723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 10C3
Signing time: Sun 01 Mar 2026 19:00:42 +0000
Manifest this update: Sun 01 Mar 2026 19:00:42 +0000
Manifest next update: Mon 02 Mar 2026 19:00:42 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: 6n+/3DKcF1XybFBxyESDFsqkp/Al3Cv3oddBQ2PHLB4=)
2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:36:67:4d:55:e8:35:4d:d7:4c:69:9f:8c:b7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Mar 1 19:00:42 2026 GMT
Not After : Mar 2 19:00:42 2026 GMT
Subject: CN=5d8982d06b735d7859c347aa8d0f8b6a044d2cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:71:c1:f9:6b:01:50:4c:18:03:35:2f:18:
4c:ba:93:bf:97:46:8f:7d:ea:70:aa:13:10:a0:79:
e9:93:ea:7c:7a:78:9e:00:4a:af:a0:57:e2:3b:53:
72:ca:78:ae:35:2e:83:ff:0f:0b:2a:e5:95:0a:8e:
ed:71:24:c2:68:c9:44:55:67:70:43:f5:45:cc:58:
25:43:b1:ea:7d:5a:31:1b:e5:17:0a:f1:b9:4b:94:
e8:0b:05:ef:c9:db:d2:a7:76:fe:f1:db:04:ad:c7:
57:e8:1e:29:ec:26:d0:80:41:1a:55:53:b7:c1:b8:
5c:5f:ff:9f:a0:a2:61:28:99:35:c9:2e:07:2b:8e:
78:d9:c2:6a:e9:9f:b7:1e:73:45:56:87:53:17:1d:
40:6c:97:ea:bc:43:1c:f1:98:63:8b:fb:b6:82:89:
aa:50:de:f9:65:e2:1a:0e:d4:86:00:36:b5:c8:ae:
3d:fb:c2:65:45:a4:3f:98:7e:12:f4:0d:11:67:2f:
12:9b:dc:e7:6c:43:1c:86:e0:33:6a:d8:77:8b:a7:
5d:26:0a:81:58:91:2a:87:f8:ac:47:c4:15:b2:84:
34:06:1f:5e:cf:d3:ab:cb:18:81:a2:89:df:18:18:
85:7d:f8:cc:2c:a5:f5:de:58:62:f1:7d:92:83:af:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:82:D0:6B:73:5D:78:59:C3:47:AA:8D:0F:8B:6A:04:4D:2C:F7
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:fa:d4:7e:5e:e6:0f:a4:f3:ae:5f:b8:2d:80:dd:b5:ce:
20:04:f6:c4:b7:4b:e3:ee:e8:4c:2e:8e:35:ec:e3:f2:e5:30:
e5:9b:ee:21:b2:90:81:a3:34:ff:15:4f:02:c2:d1:9a:05:94:
ff:a5:d7:ec:02:7f:78:b5:dc:5e:98:2c:73:e0:bc:e5:94:35:
e8:10:f8:e1:01:eb:d7:c3:de:a4:76:dc:63:69:dd:2a:43:dd:
48:23:5c:b2:31:b5:92:8b:e4:b2:21:b2:76:1a:09:72:b8:70:
5d:29:52:27:7f:15:d4:1f:e1:2c:37:bf:66:69:e7:e4:e8:d5:
28:91:30:6d:f3:a6:e1:3b:e2:28:11:53:33:93:92:bd:c4:72:
ff:5b:05:f7:cd:14:d0:8e:13:43:45:b8:78:ef:a4:a5:ac:54:
9b:c7:b2:51:05:d9:45:e5:d6:5a:33:c2:b7:d7:90:ec:1f:d8:
d4:b3:02:97:a1:c7:cf:3b:25:23:26:3f:4a:18:de:bb:35:7f:
e8:d1:3b:98:33:71:b6:b8:68:32:09:3e:80:d3:08:8a:57:7c:
97:9e:c3:29:75:88:e5:64:e9:b3:89:d8:f6:4a:ff:a1:ad:72:
7e:c1:ee:63:ca:ef:68:63:25:7c:97:0a:f2:32:28:52:10:2d:
09:52:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:02 2026 by rpki-client