Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: YgV8JsYPEZAPmj59jlFzsx678R9sedvfw1Tr+rk+hKg=
Subject key identifier: 54:A1:52:AA:6C:8D:FC:F2:2F:29:FC:DC:74:6A:D1:5E:30:F7:2D:72
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 019F90C784700E8C20EC8EEB9575CB75A94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 10AB
Signing time: Thu 23 Jul 2026 21:00:22 +0000
Manifest this update: Thu 23 Jul 2026 21:00:22 +0000
Manifest next update: Fri 24 Jul 2026 21:00:22 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: 03rhkcW7dORNNmOYnb9HWhG/RgwBx1UWS7aQZs0vpr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:84:70:0e:8c:20:ec:8e:eb:95:75:cb:75:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Jul 23 21:00:22 2026 GMT
Not After : Jul 24 21:00:22 2026 GMT
Subject: CN=54a152aa6c8dfcf22f29fcdc746ad15e30f72d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:d7:86:26:41:c2:ea:47:f1:ab:5e:c6:70:
45:ad:52:ab:cc:e8:f4:a3:65:91:ee:3f:f8:53:13:
07:03:c9:52:2e:de:7c:d0:b0:ff:1e:9d:18:9a:ca:
64:25:f3:f5:fe:ab:4e:de:5c:34:de:f5:91:e1:8c:
99:74:a6:c9:fb:b2:6d:bd:84:37:12:82:76:f6:4d:
9d:18:28:56:e0:a6:3e:68:39:56:4e:3f:35:ee:67:
03:b2:f8:a1:d1:f9:e8:9e:6e:71:93:8c:2c:d7:3a:
ff:2f:22:ca:69:14:f0:56:f2:19:b8:71:2d:b8:4a:
8f:fc:75:1b:ef:80:81:17:7c:71:26:9c:1a:22:b4:
bd:eb:ac:b2:c3:8d:52:cd:2a:ac:c0:00:3f:82:2e:
3d:3b:20:8f:6f:57:7f:a3:13:99:bf:76:35:69:98:
e1:e7:9f:1a:30:42:c1:57:b2:c6:bd:28:da:a1:26:
36:95:90:32:14:0e:62:7b:b7:f7:bd:68:10:50:a7:
1a:64:1e:22:fe:1c:b1:34:79:b2:ce:b3:5f:d5:a3:
36:c0:0b:ec:83:ac:e1:49:ac:dd:c5:34:d3:db:55:
6f:26:14:6e:ad:ae:5c:e7:70:2f:a2:76:6b:27:99:
38:75:17:6f:9a:df:bc:b7:18:22:fa:f7:76:01:93:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:52:AA:6C:8D:FC:F2:2F:29:FC:DC:74:6A:D1:5E:30:F7:2D:72
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:37:42:ff:67:92:06:fa:7e:6b:43:a4:d2:f5:38:88:7d:
82:9d:53:4b:f9:ec:99:55:ce:f2:6c:0c:0c:a8:4d:89:34:26:
a0:e5:c9:c5:86:a5:50:40:a2:4e:39:74:99:26:5c:95:02:a9:
ad:e2:1c:e3:59:60:b9:37:14:8e:42:0f:76:16:e5:e3:55:6f:
d4:c5:78:77:c8:4f:a9:57:7b:15:64:7e:fc:23:44:7e:11:b7:
4f:3f:35:b8:c3:b9:ec:e4:86:41:f0:e4:12:69:ae:b0:6e:76:
9f:8b:41:2a:9d:f2:5f:1b:ab:45:98:14:bc:bf:12:33:be:a5:
13:85:f9:40:de:ae:63:44:44:19:09:73:a1:c4:3e:73:a6:e8:
22:2f:59:6d:ce:fe:ce:f4:53:63:bc:5c:07:04:a7:f1:e2:e8:
f8:e3:c4:fe:8e:c7:c0:eb:86:fa:03:fd:6d:66:57:14:38:c7:
8f:a6:84:6c:14:88:5e:59:b4:25:5c:1a:70:b4:bb:e9:91:47:
7c:84:45:4f:eb:fc:63:95:38:63:c2:63:5e:a7:36:55:d9:77:
3b:85:56:3e:13:16:d5:4f:6f:df:b5:73:95:62:c5:e2:ee:67:
f0:d1:ec:25:0d:89:34:6b:d6:41:e8:c4:c1:dd:a5:08:48:db:
49:04:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:10 2026 by rpki-client