Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: 0/MsvLnOIQx4wFjZwsV0kPIvwdb6r+Jncuxs/LesF7Y=
Subject key identifier: EF:69:38:C3:BA:A0:DB:C1:BC:70:6F:53:DA:66:45:BE:7B:2E:BF:23
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019D37F6F84D36DB4373EEC094E50B654A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 1276
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: 5uNCbdwO5ViRrEKFDpD2zX0PWhWFkqBaaj6RwECd19w=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f8:4d:36:db:43:73:ee:c0:94:e5:0b:65:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=ef6938c3baa0dbc1bc706f53da6645be7b2ebf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:e3:a8:3d:37:b0:32:9a:f2:89:84:16:f8:
f3:7d:1b:c8:47:bb:ef:3d:c1:8a:4e:23:f1:76:70:
02:bc:78:36:7b:7e:4e:a0:4a:56:e1:c6:75:49:6d:
66:5d:95:fc:c4:ba:48:f9:fc:ae:23:77:9f:e2:e6:
ac:78:f8:4c:f0:16:0b:4a:6c:2d:c5:1b:fa:66:d8:
25:02:b9:82:d0:21:ce:e2:d4:8e:62:92:2e:96:92:
af:02:dd:64:3b:ba:ee:56:49:57:08:1d:f4:21:4a:
88:26:9f:44:ac:0d:78:8d:24:c1:7e:1c:b3:53:83:
42:6b:6e:97:b3:c9:b6:bf:53:a3:66:bd:03:ae:c8:
52:c2:3e:80:26:2e:d5:d0:ac:aa:fa:c8:af:44:d1:
bf:62:7b:b9:d3:89:67:18:e5:62:da:24:ba:77:c3:
3e:2d:14:b7:9a:65:3c:e5:d8:88:2c:8f:97:57:06:
60:19:2f:e7:a3:f7:99:05:cb:1b:6e:41:20:10:be:
cb:98:4e:60:e5:fb:59:df:c7:90:7a:5d:6a:f4:d5:
8c:5e:b6:a9:0d:7e:53:02:c9:f5:f6:5f:cc:a3:90:
e8:c2:d7:ea:71:60:f0:38:1f:50:ea:73:31:3c:57:
2c:28:0f:5e:e0:24:c5:ad:c2:15:e7:e8:8d:29:51:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:69:38:C3:BA:A0:DB:C1:BC:70:6F:53:DA:66:45:BE:7B:2E:BF:23
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:84:40:7f:80:4e:b8:b2:a1:a8:a5:5e:2c:78:11:09:03:
e1:1b:e1:93:a0:82:36:45:0e:34:02:f6:dd:a7:91:c6:86:b0:
79:72:8f:db:ac:47:e8:2f:33:da:e7:b6:fe:50:ba:60:05:d2:
8f:50:b3:13:76:77:1a:d8:d1:b2:2d:a3:16:35:62:0e:ad:2a:
e7:be:60:30:82:57:c9:b9:cc:de:38:3e:47:20:eb:09:63:ad:
84:02:d6:5f:93:cc:cb:42:ce:43:aa:66:fe:8f:26:ef:8b:8d:
a1:b3:08:74:1f:ad:10:73:8c:ee:48:ec:eb:85:25:07:9b:e5:
c8:1e:35:ea:63:37:e0:ef:51:75:d8:3d:af:a5:e0:89:33:64:
b7:65:b1:05:a5:7e:a3:f5:fe:44:70:7b:8e:63:a3:89:c2:11:
39:49:66:c0:c8:0c:34:42:6e:ff:33:8d:49:a8:dd:c8:82:98:
6b:39:bc:04:78:fa:6d:98:45:48:e6:ea:9d:d7:68:9a:cf:3d:
21:b6:05:23:6a:3f:65:8b:e6:37:a0:a8:4d:f7:5a:b1:cf:62:
b4:25:f9:d0:59:5d:45:6f:06:6c:40:78:28:c1:dd:55:b7:5b:
d4:1f:9b:7c:fa:c9:b2:ea:30:e4:b2:f7:45:08:b5:4a:d5:8e:
ee:c3:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:08 2026 by rpki-client