Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: nGDR5FtF4X4GUZGdfzjbgcObPowod0tdNNldTIm2Z40=
Subject key identifier: 94:9B:5B:7B:9E:56:01:1D:CD:94:E7:23:02:0C:6D:E0:74:FB:B6:79
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 019D2A7285FD940E535ACCBA944EEC88CA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 14AE
Signing time: Thu 26 Mar 2026 14:00:41 +0000
Manifest this update: Thu 26 Mar 2026 14:00:41 +0000
Manifest next update: Fri 27 Mar 2026 14:00:41 +0000
Files and hashes: 1: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (hash: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU=)
2: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: b3xd2/fVIBp1ACXnCwYjnC6jHu4HwQAW5ih508D01mk=)
3: z92krxSw-hPFAOTzqyVkWwbmwSQ.roa (hash: UmaQR3RHLDeTPrQrX1Vr4JMThGImksq/AjUcliH2e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:85:fd:94:0e:53:5a:cc:ba:94:4e:ec:88:ca:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Mar 26 14:00:41 2026 GMT
Not After : Mar 27 14:00:41 2026 GMT
Subject: CN=949b5b7b9e56011dcd94e723020c6de074fbb679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:75:ba:2d:48:6e:5a:21:3b:46:30:97:09:
59:91:ec:ed:99:bd:13:31:20:06:87:63:b3:c1:af:
cd:e8:1a:68:2b:5e:21:1a:2e:e5:bd:7d:79:c3:cd:
6e:ba:15:1a:94:8d:1e:24:d7:32:0f:a6:f8:13:c9:
4e:ca:e1:d7:73:08:11:8f:9a:77:cb:1f:ed:9b:d5:
77:04:1d:8e:b2:fa:3a:b6:45:36:52:39:8b:ca:0a:
d2:1c:3f:22:02:7f:df:ff:21:4c:1b:1d:49:65:e9:
4f:f7:45:9f:7c:7e:07:be:cb:9f:00:5f:e7:2b:98:
cf:22:00:7a:4c:6e:32:fc:ec:74:02:d1:d4:78:86:
98:fe:0e:79:4c:84:8b:25:b9:d3:dd:93:9a:b3:d2:
55:67:2b:c0:b0:4d:40:14:92:ff:e8:e5:d0:1f:6f:
6c:75:9a:75:92:79:f8:21:18:be:11:33:54:10:30:
6c:b2:62:69:25:56:af:f3:26:8d:0c:56:6f:70:3c:
cb:6b:29:09:54:a4:e2:51:c7:eb:59:5d:b8:91:c0:
6e:10:98:01:70:be:62:85:c2:48:cd:57:e9:ae:72:
fb:e9:dc:b9:7c:1a:a6:d3:68:94:d6:16:a0:47:bf:
0a:41:3b:ee:6b:8c:87:7b:bf:73:fa:b9:b9:7e:da:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:5B:7B:9E:56:01:1D:CD:94:E7:23:02:0C:6D:E0:74:FB:B6:79
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f9:c2:85:bb:4a:2e:c1:63:62:63:bd:cb:2d:aa:e2:cd:8e:
dc:4b:62:76:40:1f:07:61:3d:4d:bf:1b:fb:5d:1a:80:48:c6:
8d:4f:bd:c1:9c:62:f4:69:11:3f:a1:b1:90:1c:54:f8:26:8c:
24:77:0d:af:c4:32:08:6f:eb:24:b0:ee:1a:3a:5c:fa:79:bb:
45:c8:93:69:1f:86:4c:1d:68:70:3c:20:a5:4c:a6:73:3a:ee:
61:f9:5a:34:65:0c:9c:03:b5:26:ec:03:d9:3c:f6:2b:ee:0e:
6d:fa:c2:c3:87:2a:62:57:93:ef:56:46:06:d5:8c:0c:a3:c0:
d1:65:cc:8b:a1:b1:fa:7c:97:ff:2e:fe:4b:61:bd:56:aa:79:
27:9c:7c:88:2d:a7:d4:66:a0:ca:ce:8b:28:28:f4:80:cd:a4:
a7:5b:7f:a1:ff:89:52:25:4e:cb:92:06:77:b7:1f:a3:34:1f:
86:3e:ea:a0:96:4a:97:19:93:ef:02:71:58:67:ac:c2:8d:37:
c6:ec:77:77:8d:55:df:bd:af:7a:f8:b8:56:6d:9a:f7:1d:76:
74:59:76:45:a8:ae:c9:b8:e7:1a:e2:a5:79:95:22:85:ad:5d:
2c:96:ca:16:2e:a8:30:6a:2d:85:77:87:14:50:1c:bd:d8:43:
2f:e2:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:34:19 2026 by rpki-client