Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: 1gf6wEduiJ0IpY8+icSqoUAd+OkUZ90S/1sSKSBMQZM=
Subject key identifier: E7:6B:5C:03:D0:BA:2A:A6:13:0B:0C:10:6D:06:5E:C2:3E:AF:3C:40
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 019E1FB59CC283F378A8A5AFB77C260422B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 152D
Signing time: Wed 13 May 2026 05:00:56 +0000
Manifest this update: Wed 13 May 2026 05:00:56 +0000
Manifest next update: Thu 14 May 2026 05:00:56 +0000
Files and hashes: 1: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (hash: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU=)
2: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: 86AC1wtYl76ElYswmV8yED7KlgZeHLfAOUsr9X9KExY=)
3: z92krxSw-hPFAOTzqyVkWwbmwSQ.roa (hash: UmaQR3RHLDeTPrQrX1Vr4JMThGImksq/AjUcliH2e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:9c:c2:83:f3:78:a8:a5:af:b7:7c:26:04:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: May 13 05:00:56 2026 GMT
Not After : May 14 05:00:56 2026 GMT
Subject: CN=e76b5c03d0ba2aa6130b0c106d065ec23eaf3c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:5d:00:99:9b:20:32:b4:ae:5c:93:96:e6:
db:39:25:b9:00:70:e5:1a:fd:59:2a:91:c8:3f:9a:
6a:ea:dc:ac:86:fe:6b:ec:ab:72:8c:7d:ef:5e:27:
6d:bf:da:e7:a0:81:6c:97:12:82:29:04:db:a6:fc:
6f:c7:c6:7b:ed:ab:ec:90:5b:13:af:ed:7d:af:ae:
cd:03:f8:be:ee:08:a5:3c:20:8c:11:9b:16:55:fb:
1b:20:0d:7f:df:12:61:48:5e:fb:89:74:63:ed:b4:
af:42:3f:de:26:19:43:85:31:7b:05:14:ca:92:dc:
eb:e4:95:de:f2:29:15:aa:d6:ea:cd:c4:33:08:3c:
cd:ac:34:f8:45:fa:36:4b:df:7e:ae:06:a2:4f:fa:
98:40:09:46:23:4f:91:b1:25:89:4e:3c:4b:8d:33:
16:e0:ae:a7:15:b5:05:6e:6e:a7:d6:a0:bf:e2:15:
1f:87:96:a0:1a:6a:92:3d:c7:87:b5:8f:1a:df:76:
3a:d7:bb:48:c6:31:ab:38:54:7c:06:0c:88:67:06:
41:99:d5:14:58:93:20:4a:ab:eb:ed:e6:ac:dd:98:
e5:7b:2b:78:4d:3c:a5:30:52:bd:2b:ba:dd:ca:7c:
36:e5:a5:ef:24:cf:87:24:c4:90:9e:90:b8:9c:c9:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:5C:03:D0:BA:2A:A6:13:0B:0C:10:6D:06:5E:C2:3E:AF:3C:40
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:ef:a9:19:ad:05:6a:85:7e:64:87:39:71:22:a5:fa:c8:
08:66:a7:16:8d:26:91:1f:26:b0:33:16:50:38:74:7b:be:cf:
2f:d2:4d:8e:fb:b3:e5:b9:30:f5:39:f2:49:48:8c:61:2b:a2:
f2:c2:38:97:ee:4c:02:bd:73:09:4e:fb:dd:d2:30:78:2a:8c:
51:dc:9b:4e:df:16:98:32:f0:a4:d3:04:bb:54:df:89:ed:f1:
a8:79:67:bb:f1:ed:a0:2b:03:d3:dd:20:3e:04:b0:b5:09:e7:
4f:53:72:b4:b8:38:97:7e:03:65:ad:1d:60:1a:24:09:5e:e6:
d7:2d:45:d7:63:1f:dd:81:93:8c:59:e6:e9:3d:0c:2c:73:b9:
7b:a2:33:6d:f1:04:f3:49:5e:6c:eb:2d:85:7e:41:fb:5c:01:
83:37:db:6a:3c:a1:58:a9:00:a0:27:2d:db:83:25:e5:3f:ec:
a7:ae:8a:bc:59:d3:d5:ca:4d:e0:44:d6:2c:20:88:c3:f0:00:
c4:75:15:56:c3:40:f9:05:e8:b3:4d:e0:a9:ae:51:a7:26:01:
9b:70:91:18:14:d6:dd:04:cc:ad:44:fb:bb:39:d3:d3:0a:21:
fa:dc:8c:01:64:6f:74:04:62:44:b1:ad:ee:e4:01:d5:2f:b2:
aa:74:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:03 2026 by rpki-client