Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: bvCKZC2K8g+q3ICIz971RUn8wqiQO6vBsYXE8BhVeYg=
Subject key identifier: 7C:DC:77:40:30:55:28:D1:2B:1D:D4:78:6B:7D:57:A6:A4:50:AF:2E
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 019E1C0FCBBF226F1F2EFE0887DB9ACCF8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0FEA
Signing time: Tue 12 May 2026 12:00:57 +0000
Manifest this update: Tue 12 May 2026 12:00:57 +0000
Manifest next update: Wed 13 May 2026 12:00:57 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: gkWJwF+/l/LaUgk+CEB74E+XfyZo8jD+FrMhcuxAJhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:cb:bf:22:6f:1f:2e:fe:08:87:db:9a:cc:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: May 12 12:00:57 2026 GMT
Not After : May 13 12:00:57 2026 GMT
Subject: CN=7cdc7740305528d12b1dd4786b7d57a6a450af2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:92:f4:56:f9:0e:ab:e8:95:48:8a:fd:48:
34:0d:66:70:7b:b4:c4:d9:ea:7b:27:67:df:23:e5:
e9:91:58:40:36:60:c9:ec:95:1a:36:7f:b9:34:70:
a8:8a:a4:53:08:c1:7d:4e:12:49:2f:92:84:d4:8b:
a1:e2:ae:1c:cc:fa:e2:bb:73:9e:8c:f8:60:cc:ec:
c5:c6:d5:58:19:d4:1b:f7:c7:82:4d:3d:2a:95:be:
73:fe:38:1d:dd:8a:5d:4a:33:29:22:c9:28:4f:0f:
6a:f0:3f:2f:2b:42:5c:75:d1:03:1d:1d:1f:5d:7c:
43:e4:d9:26:eb:8b:c5:86:76:97:98:c7:b6:d2:47:
c4:01:64:9f:a7:fe:43:93:57:3f:76:70:a3:2a:02:
72:ca:a0:58:ad:ce:ee:92:7b:4b:ee:db:f4:f9:75:
29:9f:26:9b:c2:01:b1:7f:22:8d:57:92:1e:c2:39:
d9:5e:a1:79:08:14:b7:8a:25:03:bd:5d:75:60:ac:
00:11:5c:51:da:a1:cd:29:11:30:c6:48:18:a4:a6:
1d:2c:11:cc:cf:62:78:25:ba:e6:e2:31:c1:41:51:
6c:53:c3:c9:ed:62:fe:8e:24:a0:55:27:e4:e3:51:
3e:c1:76:a9:56:23:e4:4f:2e:f4:b4:46:8a:c3:1e:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:77:40:30:55:28:D1:2B:1D:D4:78:6B:7D:57:A6:A4:50:AF:2E
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:14:2c:46:fb:d3:9d:a5:e6:33:01:0c:11:69:61:00:8f:01:
88:c0:2b:9c:62:57:51:3c:08:db:d5:ef:ac:21:43:db:66:82:
16:98:1a:1c:17:66:16:17:4a:6e:6a:1e:b9:30:53:24:76:e4:
13:98:cc:4e:bd:93:bf:34:60:69:8d:52:98:6e:ac:d3:9e:5b:
a0:7b:14:01:6c:d3:58:7d:4b:bc:86:ca:b6:9e:46:43:36:4d:
51:dc:8e:9f:54:a4:bd:97:99:29:3a:b4:2a:0e:95:39:55:8c:
fc:5b:0a:df:dc:56:8b:db:30:cd:1b:21:3b:fe:0c:75:19:6e:
cb:2d:4a:8a:43:fa:3e:80:07:a7:5b:64:d8:90:17:7a:eb:90:
6f:76:71:8c:a2:d0:47:c2:97:94:ff:0a:28:b4:e0:1b:8f:f7:
91:73:ab:64:a1:d0:f2:44:a3:e6:c9:5e:b5:37:bc:f6:d7:cd:
16:a5:ae:fe:a4:45:b5:e9:c4:53:66:fc:59:0a:52:95:9d:92:
a4:2c:77:7e:59:b6:37:da:13:48:22:6b:7e:89:80:8d:9f:15:
82:b6:7f:f4:29:47:39:91:25:aa:40:57:ae:31:de:73:64:cc:
cd:6a:c1:ec:a1:73:fb:5a:79:11:bd:8b:df:63:fd:0d:98:58:
b1:29:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:26 2026 by rpki-client