Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: 9jTLxhWRDySmOQybtKsnqtNm/lagqFySC2mYrGQXD44=
Subject key identifier: 73:66:B5:47:8F:16:F6:CD:7B:AA:75:0D:D4:2D:BE:95:DE:D1:8E:2F
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019E1BD951542D506EAEC5A8FF042A8C954E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 12EC
Signing time: Tue 12 May 2026 11:01:27 +0000
Manifest this update: Tue 12 May 2026 11:01:27 +0000
Manifest next update: Wed 13 May 2026 11:01:27 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: nJgXlN3f+054Xt7S2oEs37FKL6UmdfNf8Iqq4vs5Ong=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:51:54:2d:50:6e:ae:c5:a8:ff:04:2a:8c:95:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: May 12 11:01:27 2026 GMT
Not After : May 13 11:01:27 2026 GMT
Subject: CN=7366b5478f16f6cd7baa750dd42dbe95ded18e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:a5:07:5b:17:04:04:1f:76:0c:76:bc:1a:
ef:f5:bd:f2:4f:80:ef:c5:f2:84:be:4c:4a:a9:a5:
b5:ce:a3:49:70:e3:0c:32:07:89:c8:0a:66:60:8e:
25:65:54:f3:e8:88:bf:37:12:7b:26:91:09:34:5e:
0b:4a:e0:b8:36:f8:d5:9b:3c:a4:59:f0:9b:0e:7c:
83:d4:9f:a6:a3:8c:91:e0:66:0c:f3:c6:85:fd:3e:
a5:5d:5c:5e:9c:48:1a:10:c4:b6:1c:83:32:d8:0c:
02:9a:f3:cb:1d:5a:06:72:6f:0a:ed:fd:4e:38:46:
46:0f:db:e1:07:bd:16:43:1f:95:f4:b7:e7:d0:cb:
21:ca:25:04:d8:f4:c8:7e:96:ed:8d:38:c1:ec:7e:
50:53:2a:a0:56:9c:c6:8a:4d:f8:81:8c:12:c5:cd:
03:d1:17:1d:16:c7:e1:56:36:58:1d:fb:94:da:e4:
02:d3:33:08:bf:a7:0b:7a:15:54:46:85:13:c1:63:
0e:32:db:94:83:6f:99:6a:96:bb:65:1f:dd:a9:4e:
2a:9e:13:7f:87:78:6e:3d:36:ef:c7:ff:97:f0:12:
8b:8e:e2:2a:f6:90:2f:02:a2:a5:45:2a:a2:91:1e:
00:fc:e5:79:64:8a:b8:f5:0f:dc:12:b5:56:66:42:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:B5:47:8F:16:F6:CD:7B:AA:75:0D:D4:2D:BE:95:DE:D1:8E:2F
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:36:9b:5c:fe:4a:03:6b:16:fe:b6:06:c2:04:b3:a5:e9:
7b:8b:49:e3:01:8a:1a:d5:93:76:c8:59:34:ab:a6:a9:1f:c6:
76:41:50:9c:bd:4a:37:4d:83:40:c5:3f:88:05:bb:38:f0:7e:
c6:a7:f9:ac:62:3a:c8:cf:d2:98:1e:c2:4f:a2:be:aa:6a:a7:
1e:10:6f:4c:ce:f3:d7:1f:72:0e:a1:64:02:18:3f:4b:d7:ed:
ad:85:32:9d:68:8d:ff:c3:09:f5:b9:d8:11:f8:49:ff:a1:50:
4a:32:78:63:8b:e2:ef:dd:6a:a5:3d:10:8b:33:7d:a2:2b:12:
9e:e6:df:21:d1:e9:d4:a8:a9:b9:c4:3a:38:5e:ad:70:04:68:
b8:bf:14:95:3c:68:2e:20:d2:1b:d2:38:ce:27:d7:a1:f0:e7:
24:a1:5e:22:fd:47:24:22:f7:fa:d7:cf:4e:1b:3e:8f:78:2f:
55:a9:9f:92:a6:e2:1d:4c:31:f6:7a:59:86:86:43:83:68:58:
ad:14:84:ef:21:f2:e7:d3:93:a5:08:12:52:7c:94:53:b2:94:
ed:c3:37:45:a7:21:95:0a:5a:72:ba:68:fb:e6:17:f2:fd:a7:
57:90:73:50:2a:8a:b0:47:e1:c3:22:1f:dc:1d:e2:ce:7c:37:
32:f1:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:20 2026 by rpki-client