Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: yEVXvO7heIS+8T5Oj4ZKXgA6uCZqIicW7AsGxAosuc0=
Subject key identifier: 64:F0:80:E9:93:87:0D:24:13:A9:F3:3C:98:07:BB:85:E9:F3:46:F1
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 019F905A639AE1E023CDCA356ABA82999409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 12F7
Signing time: Thu 23 Jul 2026 19:01:10 +0000
Manifest this update: Thu 23 Jul 2026 19:01:10 +0000
Manifest next update: Fri 24 Jul 2026 19:01:10 +0000
Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: kYU0iC2mUEkAYS3n1JZO6J4Ze9dvPOKnZK+9uvKuKbo=)
2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:63:9a:e1:e0:23:cd:ca:35:6a:ba:82:99:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Jul 23 19:01:10 2026 GMT
Not After : Jul 24 19:01:10 2026 GMT
Subject: CN=64f080e993870d2413a9f33c9807bb85e9f346f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:52:03:a6:cb:18:60:ed:75:59:2a:5c:51:
d5:a1:90:ca:99:d5:92:b6:62:71:f5:00:3d:a9:38:
2b:2f:fe:cc:83:8e:03:45:b4:9f:47:ee:10:30:f7:
5e:33:b0:56:14:19:21:8e:fb:2a:d3:33:32:9a:40:
df:78:a9:81:24:9e:60:bb:f7:27:ab:a7:73:83:88:
83:0e:fb:60:8c:6e:5e:d9:9c:eb:0b:2d:69:bf:2c:
12:93:2b:bd:7e:7a:6a:21:43:a0:10:2f:a4:11:77:
82:2c:98:67:20:86:22:87:f8:c2:a4:8f:ec:e3:81:
4b:74:89:29:95:3c:19:a9:e2:c3:48:1d:dd:30:c1:
6d:3c:a2:87:36:9d:24:c9:c7:9b:45:9b:f9:7f:d6:
5f:65:3b:92:c9:24:2c:4f:e8:48:5f:f4:8a:fa:0c:
0b:67:2e:01:dc:18:7e:4b:9c:e5:ef:be:02:4b:b2:
74:34:12:0c:52:ef:41:44:1a:ca:3c:69:8c:73:ef:
53:47:5f:73:e0:0e:20:e0:49:49:1d:9e:8b:b0:df:
b5:0c:87:5a:8b:67:6e:34:ae:74:cc:6f:ff:01:33:
af:54:51:77:9f:2a:c1:15:41:71:53:7c:51:4b:7c:
24:e3:b2:47:72:3c:21:83:3c:33:eb:6f:f5:8f:57:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:80:E9:93:87:0D:24:13:A9:F3:3C:98:07:BB:85:E9:F3:46:F1
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:96:a0:5e:ee:91:db:e4:36:e9:31:d3:4a:49:30:0a:37:70:
27:03:ce:91:20:50:e7:02:0d:53:5b:6e:e1:11:c8:6c:6c:20:
26:9d:a0:8e:05:9a:bc:d8:dd:75:d2:17:6a:f9:11:0c:42:97:
f0:fe:b1:b9:cf:da:44:61:50:ce:09:6d:5d:c2:e4:14:a1:78:
ae:72:7e:65:b2:da:ee:e3:63:7d:8e:33:f7:4f:b0:f4:5f:98:
2e:aa:dc:f6:df:4d:f2:6d:62:e8:7f:de:26:13:76:c6:92:64:
21:dd:6d:fc:3d:e6:69:29:c2:97:6b:a5:fb:c3:f2:ec:a6:5b:
da:e8:9f:ce:eb:3a:98:ff:87:05:07:71:d5:0b:0c:e3:de:ab:
19:87:fd:08:b4:0b:8f:28:95:8f:3b:88:9f:9e:d6:9b:66:0c:
3e:1e:78:a6:1f:74:22:b0:0c:34:58:3a:b1:4e:dc:18:8c:54:
29:bc:76:b6:84:02:3d:7b:eb:0f:cb:49:c0:c1:21:56:16:80:
70:da:58:7a:c1:d0:5b:b6:82:6e:9c:01:9a:45:83:70:f7:74:
ae:a1:d8:d5:25:f0:93:ff:92:b8:d5:21:31:9e:c4:45:7d:7e:
63:5c:4c:fc:16:c1:d6:53:85:b6:db:a9:17:c9:c0:ac:bd:70:
3f:3d:63:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWmOa4eAjzco1arqCmZQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3
ZWIxNjkwHhcNMjYwNzIzMTkwMTEwWhcNMjYwNzI0MTkwMTEwWjAzMTEwLwYDVQQD
Eyg2NGYwODBlOTkzODcwZDI0MTNhOWYzM2M5ODA3YmI4NWU5ZjM0NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6pSA6bLGGDtdVkqXFHVoZDKmdWS
tmJx9QA9qTgrL/7Mg44DRbSfR+4QMPdeM7BWFBkhjvsq0zMymkDfeKmBJJ5gu/cn
q6dzg4iDDvtgjG5e2ZzrCy1pvywSkyu9fnpqIUOgEC+kEXeCLJhnIIYih/jCpI/s
44FLdIkplTwZqeLDSB3dMMFtPKKHNp0kycebRZv5f9ZfZTuSySQsT+hIX/SK+gwL
Zy4B3Bh+S5zl774CS7J0NBIMUu9BRBrKPGmMc+9TR19z4A4g4ElJHZ6LsN+1DIda
i2duNK50zG//ATOvVFF3nyrBFUFxU3xRS3wk47JHcjwhgzwz62/1j1esewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTwgOmThw0kE6nzPJgHu4Xp80bxMB8GA1UdIwQY
MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt
MjhjYjNiYmYwNWFlLzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl
LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJagXu6R
2+Q26THTSkkwCjdwJwPOkSBQ5wINU1tu4RHIbGwgJp2gjgWavNjdddIXavkRDEKX
8P6xuc/aRGFQzgltXcLkFKF4rnJ+ZbLa7uNjfY4z90+w9F+YLqrc9t9N8m1i6H/e
JhN2xpJkId1t/D3maSnCl2ul+8Py7KZb2uifzus6mP+HBQdx1QsM496rGYf9CLQL
jyiVjzuIn57Wm2YMPh54ph90IrAMNFg6sU7cGIxUKbx2toQCPXvrD8tJwMEhVhaA
cNpYesHQW7aCbpwBmkWDcPd0rqHY1SXwk/+SuNUhMZ7ERX1+Y1xM/BbB1lOFttup
F8nArL1wPz1jAA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:24 2026 by rpki-client