Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: ubTMCJpe3graYxAk6sXTwZjrbso8fJOH1Y4zeYzTeho=
Subject key identifier: DB:48:BE:7E:95:73:B5:D1:57:AF:55:C2:B8:A6:49:D2:92:06:B3:3E
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019D2A72ABBB82E7C45AC086C70C8D00B71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 126F
Signing time: Thu 26 Mar 2026 14:00:51 +0000
Manifest this update: Thu 26 Mar 2026 14:00:51 +0000
Manifest next update: Fri 27 Mar 2026 14:00:51 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: IADcpolgpKyU+XAfcOFPfjiobWl3Aoj9JdFGwa6RnK8=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:ab:bb:82:e7:c4:5a:c0:86:c7:0c:8d:00:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Mar 26 14:00:51 2026 GMT
Not After : Mar 27 14:00:51 2026 GMT
Subject: CN=db48be7e9573b5d157af55c2b8a649d29206b33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:5d:0a:ec:a4:c2:3f:3c:11:58:01:bb:a5:
4e:16:6f:f3:f8:4f:1b:86:ef:aa:22:04:58:e1:b2:
56:45:e3:2b:75:10:6f:6d:78:28:36:26:6f:78:fe:
d8:52:38:31:0a:12:04:e3:6f:cb:78:dc:13:d3:e8:
2f:13:0d:df:79:bb:c2:bb:1c:a1:6f:05:c2:19:ad:
cc:34:68:7c:5f:e6:cc:24:5a:28:88:c2:a5:96:b1:
27:2d:a6:8f:85:ef:c4:7e:3f:58:1b:a7:b9:65:f0:
f3:49:8a:cb:70:ab:e8:95:41:80:69:d9:71:ce:f9:
89:b3:a0:e0:e2:b3:97:5d:96:19:5f:5f:cb:92:70:
f8:72:d5:22:c2:9f:f0:ca:00:bf:ae:41:4a:42:c1:
7f:e8:01:94:30:e6:53:c0:e8:a5:f2:d4:45:59:26:
c9:09:ef:c9:93:cb:92:38:ea:b2:0f:ee:c6:39:ce:
34:87:47:5a:d7:fc:e9:b5:69:99:ce:8e:af:9c:bd:
a1:71:cd:6a:17:95:0a:2f:f6:fe:66:2a:34:4c:98:
b6:36:64:27:a4:fd:be:f7:cf:cd:c9:03:c3:64:17:
d9:23:00:2c:0b:6a:c1:25:8a:97:45:e5:df:76:d0:
6b:ee:a4:23:ee:21:8e:43:8e:5d:0f:81:3a:49:3d:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:BE:7E:95:73:B5:D1:57:AF:55:C2:B8:A6:49:D2:92:06:B3:3E
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:71:f8:b4:a8:d9:f8:2d:51:5a:43:40:16:ae:69:e6:3d:
71:2d:10:b0:de:20:0a:3d:e2:c3:a7:5c:3d:56:0d:27:65:ff:
b8:76:18:42:b4:33:43:65:23:60:fd:d9:ee:c9:5c:d7:3f:9e:
14:e2:b8:bf:c1:6d:35:cb:d9:e0:a2:0a:9c:68:d4:bc:57:9f:
0c:06:9b:64:b4:69:0d:77:b9:42:61:a6:87:87:42:9b:3d:86:
a4:94:bd:6d:6c:22:91:27:e0:66:fd:c5:91:92:5d:04:13:2e:
7d:94:8d:06:99:9d:c8:e4:97:57:e5:f0:4d:7b:85:ef:f9:cc:
0a:5f:11:cd:a1:45:e4:67:d6:89:dd:90:03:2d:38:4d:5e:d5:
08:22:a0:13:3f:b6:21:44:fd:75:dc:91:58:a7:aa:70:0a:e9:
50:a2:56:66:1f:b3:70:96:e9:9f:c5:c5:48:8b:25:5a:92:f9:
91:16:e9:f3:1c:1a:ab:41:a6:a9:0c:d9:44:5e:6b:04:09:83:
55:31:7f:c9:f5:6f:41:fb:03:83:36:3e:81:e9:05:12:bb:2d:
59:7f:56:09:0f:b9:62:30:a1:7e:87:55:5b:79:36:8b:e5:98:
2e:73:71:42:c1:92:29:2b:71:8c:07:57:be:5f:38:a6:00:4e:
c0:eb:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:02 2026 by rpki-client