Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: VuanlXn4hoFLlawI/4aeAZrWTdiK9o1RZgMEQOFNhy8=
Subject key identifier: 8F:23:8D:30:79:6B:78:F4:8B:A6:5C:13:A6:93:3B:96:DE:A8:A8:F2
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 019D26CD7FEC14F630175649F2F66CC013C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0F6B
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: L4V6kxg0xXY3h6Ls+RIvuV+jy8BdbFRXS1+21o1hhZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7f:ec:14:f6:30:17:56:49:f2:f6:6c:c0:13:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=8f238d30796b78f48ba65c13a6933b96dea8a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:18:74:3c:39:de:87:0c:6a:c6:d7:04:78:
f7:b2:23:57:ff:98:e2:9b:0e:51:f6:9e:f3:bc:f9:
1b:a9:59:cb:87:e6:75:80:43:a9:f5:78:71:e9:db:
20:19:7d:bc:10:44:f5:31:4f:29:1e:3a:50:6d:ca:
ad:63:c4:64:ed:27:30:5b:66:bd:74:ad:f9:d1:e8:
3f:03:ff:da:c5:fe:66:9b:1a:e0:d0:8c:9f:dc:1b:
0d:c3:74:95:80:04:a5:bd:68:87:71:6b:f0:bc:cb:
d8:c3:a7:e5:15:80:ca:99:a0:97:8d:2d:68:bf:c3:
23:2c:31:9a:9c:11:29:be:1d:30:46:86:cd:19:21:
09:69:d7:81:35:6b:a6:16:29:5e:40:55:ac:f0:4a:
c5:7b:de:01:e0:ea:75:a1:cf:28:4b:30:98:19:bc:
06:bc:63:9e:f9:88:f5:bf:5c:2f:64:1b:39:22:38:
cc:9a:3b:ea:bd:2c:d5:bb:81:a5:8b:14:98:25:01:
af:9d:f6:49:c9:c6:32:da:46:e6:a1:88:cb:b8:27:
4e:f9:b8:1d:ee:76:52:e2:c2:f7:7d:ed:55:bd:c1:
87:63:7d:9a:d0:9b:4c:24:20:8d:8d:7e:43:93:69:
b6:56:4d:25:04:45:f6:aa:ad:ce:39:e5:52:46:fa:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:8D:30:79:6B:78:F4:8B:A6:5C:13:A6:93:3B:96:DE:A8:A8:F2
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:53:7b:41:01:31:02:d6:82:40:ad:92:12:96:f0:30:8c:99:
25:95:04:11:f4:17:82:32:54:0f:3c:ec:b4:63:85:0b:61:d1:
b9:d8:a4:53:5f:b4:13:7a:06:61:88:36:a1:5e:56:3d:98:be:
dc:f7:af:9b:4b:e2:70:d5:54:4d:b3:be:dc:3e:b0:cd:c1:be:
a1:63:01:ba:fd:70:87:ba:dc:2a:05:38:7a:b3:9e:bb:1e:dc:
96:b1:9b:9a:44:c7:9f:93:b4:ea:51:4d:88:82:1b:2f:0a:48:
c6:15:ef:da:bd:7d:ad:ed:bb:8a:f9:8d:87:cb:c8:ec:10:4c:
01:e1:7f:65:30:70:e8:74:62:1f:21:b2:0d:24:a0:1f:a7:0e:
d4:54:47:92:64:5a:03:3f:60:53:b3:d7:5e:57:cf:31:9d:e9:
4c:cd:1d:1b:90:0c:76:59:24:0e:a0:83:5c:0a:15:ef:b4:d8:
51:d7:80:6c:68:c8:ea:ea:97:9b:b8:a0:c2:a2:6c:2c:3f:37:
d2:7a:5d:69:d6:e1:32:b3:4c:a2:47:12:28:b3:7b:6f:59:cb:
08:43:6c:39:d0:0f:33:fc:c2:ce:7b:d4:b6:93:23:1e:f1:5f:
77:bd:ae:32:d3:54:bc:88:9c:09:55:d5:ae:c1:a5:5b:82:1f:
b3:8b:33:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzX/sFPYwF1ZJ8vZswBPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWE5NjM4MDk3MTRkMTEwM2I2NDYwZDlkMGUxNGExMmU4
NTAzMjUwHhcNMjYwMzI1MjEwMTM0WhcNMjYwMzI2MjEwMTM0WjAzMTEwLwYDVQQD
Eyg4ZjIzOGQzMDc5NmI3OGY0OGJhNjVjMTNhNjkzM2I5NmRlYThhOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpYYdDw53ocMasbXBHj3siNX/5ji
mw5R9p7zvPkbqVnLh+Z1gEOp9Xhx6dsgGX28EET1MU8pHjpQbcqtY8Rk7ScwW2a9
dK350eg/A//axf5mmxrg0Iyf3BsNw3SVgASlvWiHcWvwvMvYw6flFYDKmaCXjS1o
v8MjLDGanBEpvh0wRobNGSEJadeBNWumFileQFWs8ErFe94B4Op1oc8oSzCYGbwG
vGOe+Yj1v1wvZBs5IjjMmjvqvSzVu4GlixSYJQGvnfZJycYy2kbmoYjLuCdO+bgd
7nZS4sL3fe1VvcGHY32a0JtMJCCNjX5Dk2m2Vk0lBEX2qq3OOeVSRvr95QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8jjTB5a3j0i6ZcE6aTO5beqKjyMB8GA1UdIwQY
MBaAFN+aljgJcU0RA7ZGDZ0OFKEuhQMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgt
ZjMwOTZhMDI0ZTI5LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgtZjMwOTZhMDI0ZTI5
LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlN7QQEx
AtaCQK2SEpbwMIyZJZUEEfQXgjJUDzzstGOFC2HRudikU1+0E3oGYYg2oV5WPZi+
3Pevm0vicNVUTbO+3D6wzcG+oWMBuv1wh7rcKgU4erOeux7clrGbmkTHn5O06lFN
iIIbLwpIxhXv2r19re27ivmNh8vI7BBMAeF/ZTBw6HRiHyGyDSSgH6cO1FRHkmRa
Az9gU7PXXlfPMZ3pTM0dG5AMdlkkDqCDXAoV77TYUdeAbGjI6uqXm7igwqJsLD83
0npdadbhMrNMokcSKLN7b1nLCENsOdAPM/zCznvUtpMjHvFfd72uMtNUvIicCVXV
rsGlW4Ifs4szPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:46 2026 by rpki-client