Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
File: 35nVPUR4O91NiUjEU0rLsA9xtac.mft (raw, json)
Hash identifier: tMJoIcuifMEM9WOTnOo2dEt4uC4lFsY+qYfHjseFAn4=
Subject key identifier: 87:81:05:B4:B7:4A:31:52:24:7F:6D:BA:A7:4D:7C:EA:6D:9E:0F:44
Authority key identifier: DF:99:D5:3D:44:78:3B:DD:4D:89:48:C4:53:4A:CB:B0:0F:71:B5:A7
Certificate issuer: /CN=df99d53d44783bdd4d8948c4534acbb00f71b5a7
Certificate serial: 019F9090EEEC8BB7553F4B3DB71EA879DE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:45 +0000
Manifest this update: Thu 23 Jul 2026 20:00:45 +0000
Manifest next update: Fri 24 Jul 2026 20:00:45 +0000
Files and hashes: 1: 35nVPUR4O91NiUjEU0rLsA9xtac.crl (hash: qgkZLFpiZV64wd8wx1i8ZfyNPKGuPPJgiWLWepiBrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ee:ec:8b:b7:55:3f:4b:3d:b7:1e:a8:79:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df99d53d44783bdd4d8948c4534acbb00f71b5a7
Validity
Not Before: Jul 23 20:00:45 2026 GMT
Not After : Jul 24 20:00:45 2026 GMT
Subject: CN=878105b4b74a3152247f6dbaa74d7cea6d9e0f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:af:cf:04:b1:29:18:2f:8d:85:30:8a:ff:
07:06:ae:48:3f:c0:16:01:dd:39:e5:27:05:ab:da:
60:ba:d8:45:2a:c7:d3:c4:19:7d:29:60:a9:5d:79:
a7:aa:6d:3b:35:d4:f1:09:d0:a5:78:21:f7:9f:f8:
b8:71:bf:f3:59:3b:e8:17:4d:83:f6:90:32:d2:2b:
29:42:e0:c2:ff:61:57:97:15:88:1a:91:e7:be:2b:
5c:c6:ca:84:a9:ac:5a:56:13:9d:de:37:ae:d0:7c:
bd:ef:b2:aa:b7:e6:9c:2e:b2:4c:5b:c2:43:8c:02:
5a:96:2c:33:bd:ce:df:ee:b1:da:9e:19:bd:4b:fb:
62:92:04:c4:f2:bd:95:c4:a8:0c:f1:d5:f2:66:07:
8d:75:bd:62:e6:b8:22:d8:4c:7d:e5:31:39:87:0c:
62:18:70:6a:b0:0f:79:a2:56:57:7d:16:6b:0b:84:
fd:ce:6d:27:35:05:f7:2f:e3:03:32:0d:77:51:30:
d5:7b:02:2a:15:b1:ba:2e:7f:b4:68:2a:9b:ba:89:
e8:0b:d4:40:61:86:b9:ae:30:7a:4f:b5:90:bb:bd:
c0:e8:94:81:de:36:7e:12:cc:d2:27:3f:8e:b9:8e:
3b:20:84:ac:e6:2c:88:55:08:d9:f1:82:a6:0e:64:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:81:05:B4:B7:4A:31:52:24:7F:6D:BA:A7:4D:7C:EA:6D:9E:0F:44
X509v3 Authority Key Identifier:
keyid:DF:99:D5:3D:44:78:3B:DD:4D:89:48:C4:53:4A:CB:B0:0F:71:B5:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:57:cd:11:9a:90:6a:be:20:68:d4:87:de:cd:22:01:55:
51:7f:28:47:57:e5:cf:df:0d:40:c4:55:8f:33:fd:3d:6e:1c:
ca:3c:e9:9a:78:a1:33:23:5d:4d:a7:f8:f3:43:3c:85:a5:2e:
97:1a:6c:2f:9c:2c:3e:56:5b:3c:d8:09:bf:a1:0c:ef:2b:95:
37:53:16:f2:d7:a4:94:3a:d0:f5:37:ac:4c:e1:57:07:7e:1a:
77:95:e7:2b:e2:c8:32:9b:c4:26:98:b0:ce:23:4b:aa:53:bf:
5d:e2:20:bf:2b:52:be:8c:5c:49:78:fd:38:36:cd:02:f2:cc:
9d:f4:5c:81:9c:03:af:f1:43:89:d1:e5:a4:03:c7:5e:4f:06:
b2:ec:6d:2c:ba:60:8f:d1:97:0e:a3:69:98:9d:b1:97:9f:10:
eb:c0:a2:5d:c1:0b:bf:e3:b6:1d:ba:73:7d:a5:b1:68:6e:5c:
55:fb:5d:bf:35:a0:8f:16:c4:72:21:8e:de:41:d9:94:f4:81:
fd:ee:40:56:e3:7b:90:5c:9b:97:26:11:ca:23:5c:b1:3b:93:
bc:0b:b3:37:3c:95:f4:b4:63:2f:ee:d0:1e:40:60:db:5d:c7:
4c:fc:b5:6f:66:26:1b:86:84:1c:5d:53:0b:49:77:ef:8f:2b:
fc:52:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:21 2026 by rpki-client