Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: U8adYTZjTB42XuFG/8Ueu3HWYuPKoRR8YYdyv48JdUI=
Subject key identifier: 35:EE:B5:39:2C:90:8E:DE:0B:69:63:28:80:2A:5A:D8:12:9E:7B:4B
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 01A0D87297E3CF5F5F1A533028D97DCE051E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 03C5
Signing time: Fri 25 Sep 2026 12:03:03 +0000
Manifest this update: Fri 25 Sep 2026 12:03:03 +0000
Manifest next update: Sat 26 Sep 2026 12:03:03 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: jrivYtZTVhf7gvydxYgLNHVrF9wbTXrfwk5ohjUbZnk=)
2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:97:e3:cf:5f:5f:1a:53:30:28:d9:7d:ce:05:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Sep 25 12:03:03 2026 GMT
Not After : Sep 26 12:03:03 2026 GMT
Subject: CN=35eeb5392c908ede0b696328802a5ad8129e7b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:8d:04:30:40:87:23:80:59:9a:b6:0d:84:
1d:3d:84:21:b2:ef:7b:79:a7:58:7a:62:c8:e8:b9:
f1:af:61:c6:c1:8c:53:cb:64:e4:f7:ce:0b:52:fc:
5a:06:80:09:a5:99:b1:a3:f5:3e:9b:5b:4c:16:d9:
99:8a:b8:c7:07:95:92:9e:61:27:83:8f:7b:3d:c7:
30:43:84:a6:29:31:23:6e:e4:5c:d0:82:23:07:70:
89:9f:24:1c:2e:3a:0e:5a:d6:89:4e:bd:ba:4d:c4:
ec:4c:07:c7:f2:85:ee:95:f6:87:41:c0:01:36:c5:
9f:24:67:36:46:a7:24:3c:ae:f6:66:d8:65:55:1b:
71:4b:48:f1:82:51:4f:7c:d4:80:5c:99:f7:3b:43:
7f:ab:ff:f0:43:86:b7:b7:6c:ff:11:13:43:a6:51:
db:4d:d5:84:7d:90:fc:52:5e:dc:44:90:32:5c:08:
48:32:79:b3:0c:b0:a2:d2:7a:af:1d:1f:a1:c1:d2:
f8:55:89:68:7b:0e:5b:42:1f:54:5b:18:41:e5:80:
ff:b2:72:29:21:6b:6e:1b:d1:16:59:13:b6:28:3d:
f4:3d:87:9f:20:94:3b:45:86:e8:b1:99:ab:af:24:
48:c3:c1:7d:8b:ac:23:f4:1f:ae:d5:92:fa:53:ac:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EE:B5:39:2C:90:8E:DE:0B:69:63:28:80:2A:5A:D8:12:9E:7B:4B
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:07:44:4c:31:23:e1:98:b3:cb:77:b4:eb:f8:85:ef:99:89:
af:2b:19:bc:10:27:3f:be:12:ef:47:ad:b7:bc:05:7f:63:43:
5e:88:5d:9b:38:47:8e:7d:75:93:2a:70:4f:03:3d:29:61:d7:
e2:1d:27:f1:a5:7f:54:c2:12:60:6a:73:8b:c5:9e:da:ac:c9:
ae:25:6a:7f:59:0e:84:19:a4:0e:be:52:a6:0f:47:56:32:88:
b0:fc:be:36:a8:bb:da:0d:6d:ae:80:ca:9c:72:bf:a7:3c:1c:
3f:cb:0a:4d:08:64:89:6c:82:c0:e1:8c:69:fd:a6:9d:d5:4d:
d8:af:a7:22:0e:12:fc:0b:91:41:6f:a1:ef:5e:e5:2a:7f:98:
e5:87:5c:4f:1d:0f:a7:64:c8:34:a8:b1:23:a6:30:41:29:ee:
e4:f2:1c:b8:ae:62:ad:36:4c:f3:ce:8d:54:54:f9:fa:02:54:
bb:1d:d5:27:7d:0c:a9:33:16:96:26:b4:80:82:77:5e:cc:57:
7a:77:a7:61:b8:8b:ed:5e:c7:d0:5d:a4:ad:56:51:21:dd:51:
ba:43:8d:14:f5:40:e7:09:b8:c9:a2:0c:59:f5:56:ce:35:14:
83:4e:38:64:ce:e1:3b:69:1b:45:3e:f9:6e:aa:86:ab:14:19:
a3:ac:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:11:23 2026 by rpki-client