Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: jtNfg4FxmoxMhRYRUV9sji27HEIgHb/uO9H+8ASo6/Y=
Subject key identifier: 80:BD:A5:28:83:09:38:DE:77:C6:F3:90:9D:E8:9D:2E:D0:4E:B4:59
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 019D37C10ED671529B281A7DAF9326D0CD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 110C
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: qh7D7s7bUKNvpuwvz3sHlRuQ0CQ16+lonHcs8MfWIEQ=)
2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0e:d6:71:52:9b:28:1a:7d:af:93:26:d0:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=80bda528830938de77c6f3909de89d2ed04eb459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:9a:9c:f9:0d:20:96:8a:b6:34:6c:73:21:
8a:a8:9a:b4:7f:af:46:48:d8:e0:27:96:14:cd:ba:
93:07:25:ca:71:92:9b:43:f5:2c:66:cf:3c:7d:24:
42:0b:08:93:6d:79:27:e7:e3:dd:5f:9f:ec:02:84:
81:d4:57:c5:37:2e:a2:51:e1:e7:17:79:c8:cf:d3:
eb:1f:07:83:41:92:ee:24:86:67:19:93:86:7e:ce:
83:3a:cf:9a:de:89:99:6e:15:69:6a:7a:6d:87:e6:
37:bc:7a:81:d2:b7:c1:fc:10:58:e6:dc:be:a5:d7:
4b:d6:fd:31:22:b2:a8:5e:39:3e:f0:5f:1b:94:5a:
97:9c:91:84:68:ff:3f:a7:45:59:78:ff:a1:a8:2e:
e6:83:64:9b:c5:7b:75:db:6f:21:0b:52:2c:67:85:
1b:c7:b2:f7:c4:d7:6d:49:27:96:b5:36:d0:a3:38:
c9:f2:8d:7e:b5:78:e4:1a:5c:93:b1:87:da:99:96:
da:4a:2f:6f:85:23:88:0e:26:c5:e3:80:4c:47:8c:
fb:c4:60:24:ff:29:3f:96:0d:0b:49:10:69:c6:0d:
ae:b7:4c:97:33:da:86:b3:b8:56:f3:2d:dc:20:79:
7b:4f:34:1d:9d:c0:e0:68:53:5e:dc:b5:86:2f:e7:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:A5:28:83:09:38:DE:77:C6:F3:90:9D:E8:9D:2E:D0:4E:B4:59
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:12:21:75:6e:3f:c5:fd:48:21:ec:2f:a9:85:27:39:64:98:
99:be:3c:81:30:ec:2e:f1:db:7f:ef:e7:fb:8b:ed:3f:fa:7f:
48:c0:61:97:1a:f5:bd:2a:2b:74:ed:77:14:13:6c:7f:3f:ef:
3d:31:8e:06:bf:53:34:2c:c2:64:bb:80:f3:43:fe:88:a1:29:
1b:f8:af:40:eb:a9:b1:fa:32:60:44:37:36:44:43:f8:f8:aa:
56:ec:ec:c2:7c:3a:ed:b7:a0:ac:c4:d9:3d:e0:05:08:0b:25:
b3:83:a7:53:6c:99:6d:2d:81:d7:a0:a1:18:c0:91:29:d3:27:
90:d8:c8:b9:aa:9a:d2:69:96:4c:2b:9d:11:ae:3f:5a:cb:e5:
a2:2c:be:06:f4:87:d5:b5:34:ca:ab:5e:de:49:13:fc:10:9e:
46:5c:ac:a6:2d:d9:88:82:6f:70:b3:4f:19:d8:a0:92:28:d1:
61:b8:06:92:eb:c8:89:d5:6f:58:cb:c8:a6:55:c6:de:de:12:
d9:cd:eb:8e:28:d1:89:8c:bb:36:ee:b4:81:f2:e7:6a:d7:ad:
ab:52:fc:3a:ad:08:f0:7e:d7:0f:72:7c:7e:c6:25:05:6f:0c:
c7:7f:d7:45:a0:33:69:6a:88:54:bf:aa:f6:f8:4a:9c:db:47:
56:8a:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:24 2026 by rpki-client