Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: 2IspuNhNEbnaUFLXbbLJDYxdgRuZHfgYSfpmz2QsBpI=
Subject key identifier: 1E:39:DA:06:53:8D:E2:87:2F:C3:10:2B:CC:27:1B:00:40:70:19:39
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019E1D22B14C73C7AE8845F77EF19F01C2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 100F
Signing time: Tue 12 May 2026 17:01:13 +0000
Manifest this update: Tue 12 May 2026 17:01:13 +0000
Manifest next update: Wed 13 May 2026 17:01:13 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: pdAiOEs4SRidCqcXf2W4RDY8TslXVw3nK2C50ebVTjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:b1:4c:73:c7:ae:88:45:f7:7e:f1:9f:01:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: May 12 17:01:13 2026 GMT
Not After : May 13 17:01:13 2026 GMT
Subject: CN=1e39da06538de2872fc3102bcc271b0040701939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:27:26:25:64:5d:c6:d1:8f:ed:6e:f7:26:7f:
4e:fd:de:a7:c9:69:21:e9:a6:41:d4:dc:e6:83:8a:
3a:b6:52:9d:ca:72:b3:28:fe:e6:07:70:6c:9e:f0:
34:50:35:52:e9:4b:e3:e0:f4:8d:71:5b:88:2d:14:
53:3c:5c:c8:5f:45:33:62:0d:da:c1:37:f6:b3:ea:
33:a5:5f:69:bd:96:8c:96:a6:cb:65:6c:d8:58:f1:
3f:11:7b:21:1c:89:00:48:d7:55:a0:1c:69:bc:bd:
e5:a7:fe:f0:67:bb:7c:af:39:01:fb:85:6d:8b:65:
f6:8a:9a:81:b4:f3:78:a8:02:a5:88:cd:70:e2:3d:
15:52:42:49:15:4d:87:6f:3b:4a:bf:d0:a1:f3:46:
14:ee:60:bf:6b:65:19:7f:07:52:30:0c:37:a2:dc:
1e:08:59:80:bc:6a:e1:f9:5e:76:d0:71:7d:96:07:
f6:dd:8a:e1:ca:4e:94:66:83:2b:53:cb:66:0e:5a:
25:e3:6f:8d:0a:d7:09:15:f3:a0:86:91:47:f5:83:
df:88:55:d1:b5:cf:60:ec:fc:38:e0:5d:5e:02:63:
35:64:64:e7:6b:71:c2:e0:d8:ed:df:34:c6:f6:db:
38:9b:0a:9d:20:0b:1e:ec:22:be:03:14:3d:63:20:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:DA:06:53:8D:E2:87:2F:C3:10:2B:CC:27:1B:00:40:70:19:39
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:13:8b:42:59:45:2f:1e:8f:4d:59:d0:a7:3f:1b:c5:e3:d2:
f3:52:9c:18:a5:ca:95:21:53:4d:2a:43:07:83:e8:ec:3d:da:
11:0c:5e:c6:f8:1b:25:cf:4e:5e:ef:bb:db:85:33:2a:19:e3:
10:e7:91:01:90:73:a6:bd:55:39:b5:6d:7f:72:5a:0d:63:52:
4e:35:44:90:1b:60:49:b7:db:8d:f8:39:98:40:e9:ba:3a:c3:
95:cc:ea:4b:f9:bf:b2:7e:3c:d1:d1:7f:fa:e6:b3:93:06:f6:
70:8c:a0:22:ce:f9:c7:6e:6a:62:e0:ad:5b:94:f1:ed:a9:a7:
a5:94:49:82:75:1c:c3:33:fb:0a:85:71:5e:3a:ff:94:f7:c1:
20:a8:9b:92:d8:29:c7:45:2b:c8:ea:29:b4:c4:0c:21:88:4d:
85:fd:01:10:69:37:68:10:9a:1e:13:ad:a8:2e:57:60:30:60:
7b:7a:d0:d4:60:82:c0:90:e7:37:7e:66:a8:77:24:0d:25:f2:
be:35:e7:27:52:29:4c:65:3b:5b:1a:6c:f4:d8:9d:f7:41:91:
77:9d:1f:71:6a:13:12:45:4e:cc:16:31:7d:ce:e2:ae:99:31:
b7:ae:06:2c:6e:af:a6:32:d1:d0:72:8b:41:e5:a7:b7:e1:97:
a2:91:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:17 2026 by rpki-client