Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: wcKihdJdUfUhfQp5RRUN9ASOAIUHgC1h3aElPNOgiMQ=
Subject key identifier: F3:88:7A:AB:6A:98:3A:5F:5F:5B:C5:5B:B9:68:5D:52:DA:95:12:48
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019F8531A72D9356D3260D1B3FC6F33F95C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 035B
Signing time: Tue 21 Jul 2026 15:00:51 +0000
Manifest this update: Tue 21 Jul 2026 15:00:51 +0000
Manifest next update: Wed 22 Jul 2026 15:00:51 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: Z+0cEdIECETiIUjKCaX23oDxquqXMWeRJKsm0hG9vWM=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:a7:2d:93:56:d3:26:0d:1b:3f:c6:f3:3f:95:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Jul 21 15:00:51 2026 GMT
Not After : Jul 22 15:00:51 2026 GMT
Subject: CN=f3887aab6a983a5f5f5bc55bb9685d52da951248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:e8:68:d3:48:6c:db:18:4c:97:ef:36:b8:
b3:8e:7a:92:a6:03:a3:0e:75:cc:36:4e:d5:b6:c0:
25:80:81:41:22:ef:98:f8:69:8e:a6:8a:33:b2:c1:
57:d7:12:e3:2a:45:40:12:2c:da:44:a3:9f:46:3d:
de:7a:c4:aa:ae:64:20:38:4f:2b:16:88:e3:bf:01:
94:82:0c:3b:21:59:7d:5f:13:05:9e:9e:77:47:a6:
8f:b0:dc:35:68:77:0f:ea:7d:fd:fc:ba:b1:39:49:
34:f7:4c:c2:fb:12:94:7a:48:58:68:d5:eb:90:9d:
9a:5c:67:37:bb:46:db:a9:21:ab:bf:1b:10:8a:fc:
ad:f9:50:2c:f0:55:c2:75:71:c7:9e:1a:b8:2a:8c:
99:11:f2:4c:ab:b4:d9:31:2a:ad:f6:37:3e:62:01:
a0:35:a0:43:4b:9b:7d:3a:ca:30:81:c3:e5:c3:85:
74:2a:3c:e1:00:79:ff:8d:96:8f:87:dc:9d:fe:86:
ce:d3:de:01:41:e6:6f:5f:9b:63:e7:62:3f:66:c6:
e8:05:7e:ca:20:a2:1b:f5:b0:0e:7f:18:ee:51:aa:
6b:d5:08:63:0f:31:6c:81:13:f5:d7:c5:9c:78:8e:
e3:67:96:48:4a:8e:a1:ad:7b:d7:25:34:98:fd:3e:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:7A:AB:6A:98:3A:5F:5F:5B:C5:5B:B9:68:5D:52:DA:95:12:48
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d7:ed:0d:9a:da:02:81:2c:d7:58:b8:72:87:49:64:da:c8:
62:05:41:d5:08:a1:dc:bc:28:18:94:06:0a:a1:f9:03:a6:99:
6c:b7:98:0c:b8:f9:a9:0b:81:e0:2c:c4:05:95:5d:5b:29:67:
49:e7:55:61:1b:6f:81:74:64:fd:3c:21:d8:09:cf:1d:0e:a7:
ce:38:ef:3e:dd:06:85:52:36:a9:9d:49:1c:5c:bf:53:86:2a:
dd:b6:5a:94:27:0c:43:3e:cb:cc:f0:03:f8:1e:6f:32:8e:d4:
09:a3:6a:76:4a:f6:e0:ab:d3:1d:9e:ac:a2:d3:82:4f:77:88:
1a:54:3b:7a:75:c1:0b:f4:8f:b2:45:61:81:20:4f:01:81:7c:
91:79:24:6a:d7:a4:ef:58:eb:8b:05:ce:61:25:0a:1a:d0:3f:
dd:03:21:a3:48:c3:5d:c3:3f:21:67:cb:cc:da:ca:a7:e1:cb:
0c:e8:fd:88:00:9e:ef:80:6a:3a:fc:8f:9b:c6:fd:d2:57:07:
38:c9:06:e8:0a:a4:64:e1:65:10:85:c4:f2:2c:bf:a9:82:a3:
df:b8:e3:09:57:5f:57:5f:86:af:50:19:ae:8f:65:29:a4:81:
fe:6d:25:b6:c4:28:68:63:fa:4b:f1:16:3f:af:ef:ce:45:96:
09:57:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:51:01 2026 by rpki-client