
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: f6ESHXHEBD6DuoHYerrSx2YCoE5nurzadAFcfmvSnW0=
Subject key identifier: 00:75:1F:3B:6B:2C:45:41:91:EA:66:F6:FB:0F:EF:0B:DB:54:2E:25
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 01A0DEE0C18C321A970B9669DC192478324F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 06F9
Signing time: Sat 26 Sep 2026 18:01:06 +0000
Manifest this update: Sat 26 Sep 2026 18:01:06 +0000
Manifest next update: Sun 27 Sep 2026 18:01:06 +0000
Files and hashes: 1: IhLOm92HXnyakwrGk2b3G1y7Qh8.roa (hash: XGBsWtqTuRWJyVArj43ucXy3vxmDpsoMFLfVD7o3X1A=)
2: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: HqcuQcKjpir1mdbbghY04+knl6gU+E4o0jFJP4flzW4=)
3: VIPR9GaJp0A9BJwV5rcEWmvNCVI.roa (hash: nuYGpbafE1z5iM0Vax1PRdxnWDLYzOJGe7bvaAjHHU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:c1:8c:32:1a:97:0b:96:69:dc:19:24:78:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Sep 26 18:01:06 2026 GMT
Not After : Sep 27 18:01:06 2026 GMT
Subject: CN=00751f3b6b2c454191ea66f6fb0fef0bdb542e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:85:06:f9:3a:89:57:1a:71:e9:02:56:d3:
f4:a6:ab:87:5a:97:b0:e4:2a:eb:86:f9:46:a5:e6:
bc:6d:9d:41:e3:cc:38:fb:ea:33:aa:fd:30:f5:64:
e3:a0:cf:b8:32:8c:5d:81:bf:7f:e5:83:46:5d:54:
78:2e:ed:a8:fd:38:71:eb:55:dc:e0:4c:28:3a:4f:
72:32:0e:c1:b8:d9:27:6f:3b:6d:03:4a:69:1f:4b:
60:83:99:a5:ec:25:ec:9e:02:e9:e8:4f:0b:53:7e:
34:ce:49:f3:45:76:08:f2:65:7a:d4:0c:74:e6:4b:
fe:b9:55:7a:be:a8:e6:64:a0:20:d4:d8:bd:47:24:
38:4b:7c:4b:51:79:02:c9:09:ce:f5:de:ac:7d:63:
4a:99:cb:5c:a7:89:ef:ae:92:ac:e0:76:90:ad:bc:
b7:fa:a0:26:9a:49:fd:7a:6c:7d:d8:30:c8:a4:58:
22:2b:98:28:3a:0f:dd:77:f0:ff:20:2c:5f:0c:57:
2a:b0:77:03:e0:6c:5f:8c:44:82:f8:ea:4d:1b:c9:
1a:b6:c9:91:d4:19:d1:02:07:7e:63:7c:0e:ad:33:
44:9c:89:b7:d2:7d:d0:34:e8:83:65:24:2d:eb:44:
23:bf:70:cb:16:be:15:de:85:3a:0d:39:d8:06:8e:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:75:1F:3B:6B:2C:45:41:91:EA:66:F6:FB:0F:EF:0B:DB:54:2E:25
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:77:09:b7:1f:d4:49:06:86:bf:74:e9:3b:dc:52:1a:f7:bb:
4a:02:fd:f5:7b:ad:f9:84:8b:2a:61:19:37:b9:36:56:be:dc:
d1:81:ce:27:30:79:44:3f:7f:03:1b:11:ba:38:b0:c3:c3:c9:
1c:68:06:0c:ac:19:7f:aa:4b:1b:ac:fd:94:65:c3:f9:51:ae:
db:89:ea:2c:0c:db:74:9d:6d:c3:ef:9a:71:c8:fc:48:64:60:
5c:5d:c1:ee:6a:88:2c:eb:0a:03:0a:a4:29:50:76:2a:8a:71:
95:ae:68:51:37:83:0c:20:d1:c1:ed:38:1b:36:14:2d:a7:f6:
62:36:35:6d:3b:58:74:4b:20:67:d4:64:7a:9d:df:75:d3:51:
35:22:d5:28:58:8e:3b:30:98:34:51:54:18:7f:39:99:44:06:
9d:43:c3:98:1d:3d:f1:08:cf:ae:a1:f0:db:2f:e6:90:f1:f6:
bd:87:b7:c6:dd:f3:16:89:b9:06:70:cf:22:0f:62:02:84:b7:
db:71:64:3f:9a:95:7e:7f:95:fd:41:6f:c4:f3:43:2d:0a:f1:
a1:54:af:71:df:6b:06:21:30:21:ac:68:a7:25:ba:c8:09:69:
d1:d7:51:e8:f5:60:58:6f:9c:21:1e:4d:f2:75:6b:e8:59:24:
fd:b5:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:22:05 2026 by rpki-client