Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: +UkUdYf1grjW8D7dN10WH4PE+T5DI9ow1Qo3quSNpIc=
Subject key identifier: 91:F0:66:CE:1D:14:87:E7:7B:D6:C1:84:08:59:A3:A3:31:E5:31:A2
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 01A0D538FDD828729605F92C91262DE2391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 1153
Signing time: Thu 24 Sep 2026 21:01:17 +0000
Manifest this update: Thu 24 Sep 2026 21:01:17 +0000
Manifest next update: Fri 25 Sep 2026 21:01:17 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: HNfbCposdpw6zPq7DMJGmEbwgOoiEfyem34sNTZ95cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:fd:d8:28:72:96:05:f9:2c:91:26:2d:e2:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Sep 24 21:01:17 2026 GMT
Not After : Sep 25 21:01:17 2026 GMT
Subject: CN=91f066ce1d1487e77bd6c1840859a3a331e531a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:2c:5c:20:8f:d5:18:32:26:37:0c:fc:a1:
8a:43:97:83:f6:ac:93:83:b5:4e:1f:b8:21:44:53:
4e:8f:96:56:48:24:d7:93:41:8f:04:66:92:b3:7f:
e5:57:5c:28:fb:f7:72:5a:94:f1:89:73:d2:40:e4:
49:9d:8e:7d:de:c8:7d:67:75:5f:28:b4:01:99:1b:
6b:2c:b6:8f:7c:e5:3a:04:38:4d:1f:31:f6:64:fd:
62:60:40:b5:f5:74:de:69:d8:cb:0e:8f:16:d9:03:
85:c2:c6:24:59:c9:c9:25:41:3a:e2:48:b0:0b:ab:
fb:58:e5:5b:95:2e:c5:29:bb:a7:31:6f:39:eb:ab:
2e:a9:72:9d:34:68:72:6b:06:c3:a1:f4:9d:a5:5d:
31:bc:24:06:7f:c5:7e:6f:06:fd:98:89:40:aa:f9:
71:d0:04:a5:62:5f:0b:99:65:64:c6:bb:44:b6:9e:
1c:1a:d5:59:61:35:4c:59:8f:e2:bf:2f:29:a7:96:
d8:16:4c:cf:e6:9e:25:a2:fa:34:39:b0:34:93:4b:
09:1f:12:0f:96:e3:2d:aa:94:50:0c:16:d8:98:c4:
20:78:91:74:f4:3b:03:1f:08:78:34:f7:d3:ca:c2:
21:64:7c:7b:b8:9b:fa:13:ef:47:f1:d7:56:32:2f:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:66:CE:1D:14:87:E7:7B:D6:C1:84:08:59:A3:A3:31:E5:31:A2
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:6d:74:f9:e4:df:d9:6d:24:6d:c3:20:dc:e7:7c:84:4d:
06:e7:b6:f9:f8:7c:aa:42:fd:01:ab:e9:97:dc:43:d2:2f:fb:
35:14:1e:2e:33:19:be:1b:89:28:84:50:48:13:41:a1:12:27:
71:bc:3e:ee:e8:e8:96:06:c5:21:da:92:b4:6e:5b:d9:24:63:
17:ae:3a:e1:1b:41:9c:df:ff:d1:ac:34:5e:4f:72:a0:5f:ac:
8f:ba:8c:9b:33:1b:56:2b:77:c9:9d:63:6a:03:ae:fe:6e:54:
5a:3f:e8:f5:3a:eb:37:ae:d1:0e:24:f2:7a:0a:44:c4:0b:c1:
43:5b:44:f7:35:ea:ef:2f:c8:fa:4d:e8:ba:98:f4:e8:48:4e:
a7:23:6a:1a:f7:ae:af:4b:0e:45:ba:bc:f4:e8:e3:80:8a:df:
6f:b7:0b:4f:2c:ea:6c:be:29:a1:bb:f4:f7:88:1c:bc:3d:35:
a4:55:33:17:32:96:b3:dc:bc:99:13:a6:27:d9:97:02:d7:b9:
ce:0d:e9:c1:fc:99:2a:ff:19:7a:aa:51:a9:b2:4c:a7:ba:a7:
52:27:cf:69:a6:9b:81:3a:a9:2c:2d:70:46:32:48:dd:9d:62:
32:c8:21:a6:0c:19:21:6b:8f:48:61:a5:91:21:98:ac:29:b4:
cb:94:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:28:32 2026 by rpki-client