Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: TuSWJjPe6HGEXmh45JCc0QKkxmVRSwkuAMnP0A8jkFU=
Subject key identifier: FF:3D:39:A9:6C:E1:C6:F3:EB:56:D5:27:FB:FF:B2:6C:04:89:AB:9D
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019D27DFE0D912D5073BA993BB4BE0532173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0F90
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: ZSS0/sc+OPSbMe3xz8eGhpsw/qWs6TZiobtk+91Y/mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e0:d9:12:d5:07:3b:a9:93:bb:4b:e0:53:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=ff3d39a96ce1c6f3eb56d527fbffb26c0489ab9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:bc:14:47:d5:cc:0b:7f:65:10:cb:ae:c4:
28:ba:5f:16:aa:e5:bf:9a:33:3d:26:12:5c:26:e8:
30:79:ea:25:2f:21:4f:39:45:e5:3e:c4:5e:3a:75:
de:3b:dc:00:cc:56:6b:89:85:f5:27:da:b0:47:08:
ed:3c:41:86:68:17:0d:63:ce:d1:11:ff:17:33:c9:
9a:49:65:9e:ba:bf:13:85:44:68:b3:a0:48:b0:53:
09:17:da:4f:9e:91:ad:f9:bf:b4:0f:57:43:bc:37:
ad:24:2b:3c:71:a0:52:51:31:b6:f9:36:9a:58:5a:
b8:97:83:6f:c1:54:34:b6:7e:3d:07:57:da:d6:74:
96:c7:c9:44:98:8a:1c:39:85:91:d0:b0:cf:5b:d4:
b6:a0:c8:e1:03:1d:a0:4b:80:c7:75:80:87:5b:38:
82:d2:bb:9c:c6:94:52:0e:ca:cc:43:7b:2a:7f:8e:
0a:68:20:c2:a5:75:d7:80:06:d8:7c:fd:95:de:1e:
00:fb:aa:00:88:a8:99:4c:6e:61:cf:b4:fc:96:91:
c8:12:fa:e0:a7:ae:df:e8:b1:7c:12:27:af:3d:35:
7e:e2:fc:cd:b1:15:8f:d5:e9:96:29:bb:38:cd:48:
e0:59:46:ed:05:68:14:e2:05:25:be:45:52:44:6d:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:39:A9:6C:E1:C6:F3:EB:56:D5:27:FB:FF:B2:6C:04:89:AB:9D
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:72:91:ab:46:23:de:cd:88:4a:70:0f:a2:14:a5:71:ba:4d:
08:36:83:c7:43:3a:15:a6:42:50:7d:20:b9:cf:93:34:6e:12:
78:e3:e2:6e:26:61:d8:57:91:c0:b3:78:fb:a0:ef:b5:00:80:
00:2d:d5:cf:49:9e:01:68:ef:0c:ba:cc:91:aa:a3:c0:bf:2a:
90:e3:5c:a8:ed:ba:5a:1b:31:07:66:60:ab:af:44:4d:25:16:
d0:8e:52:ee:01:9c:d0:8b:7f:c6:7a:ca:0a:e8:bb:88:52:6d:
0c:90:02:48:ed:9b:3c:7e:2b:6c:f5:b3:0b:58:75:a6:c2:2c:
a9:da:16:96:6d:28:9c:b1:ce:b8:0e:e4:d4:f9:2b:1d:d4:ef:
94:5d:80:22:9e:3a:7d:c5:99:7a:07:0e:8d:87:58:d5:b9:77:
c3:26:ff:84:2a:5e:59:de:59:24:9a:67:9f:71:c7:35:3e:0f:
12:a5:ed:38:c9:3f:64:6e:1b:13:a6:82:83:4c:b4:52:31:0e:
f5:f3:0d:90:3d:a0:f0:04:cf:45:a5:49:b2:22:1d:e8:07:9d:
7e:bf:0f:2c:d2:db:50:96:e4:89:6b:f3:08:9a:a0:9d:b2:49:
56:5a:b1:20:a6:9d:aa:64:ad:f0:77:be:4b:19:a2:75:2b:7a:
bd:77:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:52 2026 by rpki-client