Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: SfZUGGUvtMoP5s83aLCW9x415a1WRpsuRTzQROTezt8=
Subject key identifier: 8E:44:00:4F:3E:0B:43:CD:24:F6:FD:16:E7:7A:15:0F:F8:B2:F1:D1
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019E31173700E7533D854269EE29667FA881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 12F7
Signing time: Sat 16 May 2026 14:01:05 +0000
Manifest this update: Sat 16 May 2026 14:01:05 +0000
Manifest next update: Sun 17 May 2026 14:01:05 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: MuWAdpNwABgotPr6P7y4HzUL4CwTQeTl60vbHTZx2XI=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:37:00:e7:53:3d:85:42:69:ee:29:66:7f:a8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: May 16 14:01:05 2026 GMT
Not After : May 17 14:01:05 2026 GMT
Subject: CN=8e44004f3e0b43cd24f6fd16e77a150ff8b2f1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:8c:dd:a4:af:b9:50:67:df:e8:f2:f5:85:
3b:f2:6d:07:e5:e0:53:db:20:c0:5d:fd:ef:28:48:
36:b6:e9:2e:32:d4:7e:bc:e1:ae:1d:72:ac:3d:ad:
57:d6:62:c1:41:d9:f1:47:fa:e6:4b:5f:6c:2e:9e:
a3:64:c1:2c:21:74:16:bd:8e:0f:ff:44:96:b7:93:
8a:dd:6f:16:30:11:0c:b0:ce:b7:b5:ed:15:68:3b:
23:31:39:3c:8e:30:51:62:92:ae:bf:e2:f5:2f:5a:
3e:aa:e1:24:37:d4:8d:51:48:e5:2f:d4:f6:2c:14:
73:5e:7a:e9:7b:ce:e3:c0:b0:94:d0:9d:1b:78:c9:
c2:05:3d:1b:d1:c4:34:35:7e:06:aa:0e:74:fe:90:
fc:55:02:b8:be:a0:1e:3e:93:5f:4f:bf:64:a2:c4:
78:54:3f:70:ba:a8:0d:e7:bb:5a:5d:01:53:47:35:
07:06:e6:f1:3d:d3:99:7d:d9:ad:b2:b7:cd:c3:a8:
1a:79:f4:d1:46:b5:b9:04:8a:ef:e7:1e:f1:5d:6c:
23:cd:0b:56:30:f3:ae:ab:95:7f:54:2a:03:f8:3a:
bc:98:df:4c:01:b6:46:cb:71:c3:56:a4:70:3b:84:
c9:de:68:1b:44:39:2f:68:b2:cb:0a:9a:c4:8c:82:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:00:4F:3E:0B:43:CD:24:F6:FD:16:E7:7A:15:0F:F8:B2:F1:D1
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:97:54:d9:d0:b7:99:78:40:5c:58:39:37:71:7d:db:ea:43:
a5:ce:29:69:76:88:d7:e9:24:a8:99:59:71:c5:9d:2e:ca:a3:
92:99:68:a7:13:62:f3:ff:77:67:a8:df:c4:53:9d:58:c7:bc:
75:89:e0:ee:c6:ea:e1:73:24:a6:5f:e2:7f:7e:3f:ed:7d:1c:
b8:8a:71:89:35:32:74:00:79:58:e5:cf:50:a7:44:47:ca:bd:
53:d8:ef:40:0a:dc:96:3f:9f:0b:8a:92:3a:04:5c:dd:83:52:
fc:3a:0b:9d:45:5d:2e:61:41:0e:19:3e:6a:21:26:b3:f2:e2:
aa:ac:11:4a:f5:70:64:48:40:d2:17:f5:59:c2:9d:3c:b6:9b:
9e:e1:c4:4e:06:37:98:c7:38:a3:d7:c3:49:dc:10:dd:72:6e:
38:94:84:e2:a5:94:f3:8f:cd:a8:6e:f2:83:8c:ee:c9:96:d3:
b4:6f:5d:2f:ba:9f:99:74:87:17:d1:46:e8:86:25:29:32:15:
7e:b3:9a:1d:fd:70:c3:3f:12:13:9c:14:ac:d7:05:86:bb:26:
ff:b1:4d:3b:51:9f:f1:3d:cc:9c:38:04:8d:a3:44:b5:3e:31:
d4:ef:df:88:fc:4c:10:2a:3d:98:9b:5f:f3:69:61:f8:36:75:
0e:b1:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:05 2026 by rpki-client