Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: UD624SPZAsfL/WGkTNvmtzc7Pd7Ck+BPERAzNRyiCuo=
Subject key identifier: E9:70:68:52:54:73:A4:07:91:56:5C:BA:92:DA:AA:5E:5F:2E:25:21
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 01A112CE839891730998F1CDC699FEC0F21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 16B4
Signing time: Tue 06 Oct 2026 20:01:26 +0000
Manifest this update: Tue 06 Oct 2026 20:01:26 +0000
Manifest next update: Wed 07 Oct 2026 20:01:26 +0000
Files and hashes: 1: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (hash: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU=)
2: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: SCQhaCYKwr/6nTyspFGlmm7kssU0oCYD3WJT7/gx/z8=)
3: z92krxSw-hPFAOTzqyVkWwbmwSQ.roa (hash: UmaQR3RHLDeTPrQrX1Vr4JMThGImksq/AjUcliH2e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:ce:83:98:91:73:09:98:f1:cd:c6:99:fe:c0:f2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Oct 6 20:01:26 2026 GMT
Not After : Oct 7 20:01:26 2026 GMT
Subject: CN=e97068525473a40791565cba92daaa5e5f2e2521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:e3:26:cf:9b:5b:f7:50:33:0d:75:02:ee:
25:1d:4d:81:cb:68:c5:bf:ac:87:cc:2a:25:b4:1f:
4b:5b:7e:37:c0:b9:61:00:0c:9a:cd:a9:b3:4f:6b:
fb:e4:3c:08:e4:c5:42:67:d5:19:34:44:16:fe:ec:
0a:ba:f8:83:49:ad:c3:75:cd:3e:e6:ae:68:6e:66:
79:9d:32:4d:f6:11:85:76:06:d5:bf:4d:69:00:19:
4f:76:9b:4c:f6:b9:15:d5:28:89:9e:c1:8e:94:13:
2d:87:4e:c7:5a:71:e2:81:de:ce:3d:d2:9f:b4:be:
d8:cf:29:dc:e3:65:c3:f1:9f:de:16:ff:14:26:ec:
f5:e5:bd:a7:40:54:f8:cd:e2:5b:49:56:da:8a:09:
b4:56:f2:7c:49:43:31:2f:f5:72:7f:ca:6f:50:cc:
bf:1c:aa:4b:df:25:a1:52:6a:42:00:b2:85:ee:e6:
99:bd:14:ea:6b:53:52:49:7e:4b:83:1b:92:38:d2:
d2:97:06:9f:c7:b3:d3:41:ec:0e:21:5f:47:85:7e:
e9:98:bf:e0:92:c7:0b:82:7a:8a:e7:c6:3c:8e:af:
52:b6:1a:51:de:66:63:9e:88:84:73:cb:49:23:ef:
19:08:74:58:49:1a:fd:cb:be:f8:f2:2c:cc:4f:05:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:68:52:54:73:A4:07:91:56:5C:BA:92:DA:AA:5E:5F:2E:25:21
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:c4:6c:60:55:40:99:f3:ee:ba:d4:cd:d9:12:52:71:e0:
b7:25:af:1b:ff:21:36:fb:fc:46:45:09:a7:04:f1:fd:7e:be:
64:0d:7b:10:e0:b5:df:17:29:c8:0b:cc:bd:b7:20:90:f8:45:
6e:0e:ec:f7:58:66:d2:77:56:e6:0f:5a:36:e7:63:c2:87:66:
9d:cd:7f:15:05:5b:28:6e:84:0f:e8:d1:bc:53:2a:69:46:72:
be:86:bf:a6:2c:ea:3d:d1:9f:79:73:b5:32:ed:69:5a:91:22:
96:48:26:75:59:44:e9:53:e5:79:28:e2:7b:86:de:60:2f:9f:
d7:1f:18:89:30:63:ee:94:eb:bb:67:56:55:4a:2b:8b:ad:bf:
54:ba:3c:15:4d:5c:0c:55:fd:20:98:3a:19:0b:2e:49:30:12:
cf:0a:ba:39:84:f9:12:c7:96:68:cf:bd:ec:be:31:b1:e2:63:
3a:e7:ef:ad:06:02:9d:97:1e:7e:6d:d8:4b:16:6a:71:2d:c7:
33:b8:ae:c5:1b:75:83:3a:ab:5f:86:ed:71:d6:8e:d1:32:b9:
b4:02:9a:9b:4a:67:cd:88:30:2a:95:d5:05:96:06:76:ab:56:
0b:d0:db:43:53:81:c0:10:f3:99:34:6c:d7:2e:a3:4c:51:bd:
c8:2d:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:46 2026 by rpki-client