Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: VLT93iR6FBNdnxAyBd5frJeeqtdsAlKOu2A27dUuYhU=
Subject key identifier: 4B:83:BF:7E:43:F8:82:8E:71:99:4C:1B:C4:D8:B2:7A:2A:49:95:5C
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 01A000CA1D75F5FF101351C54D228E99A1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 10E5
Signing time: Fri 14 Aug 2026 15:00:40 +0000
Manifest this update: Fri 14 Aug 2026 15:00:40 +0000
Manifest next update: Sat 15 Aug 2026 15:00:40 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: Y1gw6ZimAAqEyBCHd8kuGnSVNiC3y5U/2+VM8j46j+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:1d:75:f5:ff:10:13:51:c5:4d:22:8e:99:a1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Aug 14 15:00:40 2026 GMT
Not After : Aug 15 15:00:40 2026 GMT
Subject: CN=4b83bf7e43f8828e71994c1bc4d8b27a2a49955c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:17:e3:46:84:ef:e3:7a:be:29:1d:32:da:
21:97:02:e4:c9:7f:0f:d9:73:90:d2:90:42:ae:59:
53:af:e1:f5:e0:18:dd:35:09:4f:27:af:0d:8b:51:
fc:3b:96:f7:7c:62:1c:c9:1c:5b:31:f7:46:67:33:
23:89:d0:4f:0f:92:3b:df:36:3a:5b:5a:f4:af:ff:
22:d6:28:fa:8a:39:0e:41:cb:19:96:93:c7:89:34:
91:db:cd:a1:42:09:55:98:0b:64:e7:f3:a2:83:13:
e1:3a:71:15:16:2d:8d:18:22:a4:d2:9c:d8:37:d3:
3b:ff:06:0d:a8:10:9c:57:cc:d1:ac:2e:fd:be:d5:
3b:23:97:8f:ee:de:34:e8:ae:3b:7f:88:7f:d3:82:
8a:40:93:0e:a4:a1:a9:cb:b3:93:0f:d6:7c:d3:f3:
b3:cb:b6:4e:e6:4e:2e:63:2f:35:39:27:93:95:c3:
ac:c8:bc:c9:9e:49:fc:25:23:04:73:30:d2:e8:02:
a5:a4:ea:d6:46:82:3c:c0:4b:15:b4:68:2f:c8:b3:
4a:22:f4:34:9f:64:c9:35:e8:f8:e3:f4:db:ef:7d:
0d:30:a5:9a:05:46:a5:78:bd:ad:3e:df:ee:a7:8d:
b3:8e:b3:93:61:52:b5:84:00:24:07:fa:1e:b9:b5:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:BF:7E:43:F8:82:8E:71:99:4C:1B:C4:D8:B2:7A:2A:49:95:5C
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ec:dd:c2:9d:46:60:cd:d2:5e:4b:2b:d2:fc:69:bb:12:3a:
cf:49:9b:d5:b6:fd:96:98:af:bb:54:bd:e2:69:91:e1:91:f5:
7c:4a:02:72:b1:6a:3a:fd:ed:e0:45:96:ee:81:2c:cf:7d:e8:
64:04:e0:53:a7:a4:7b:96:e8:62:ff:06:ec:ca:0f:3f:a3:cb:
1e:3a:19:27:f6:3a:92:80:6d:8d:07:12:e9:97:8b:19:e8:2b:
4e:51:2b:dd:d5:5a:07:4b:64:a7:7c:1e:1f:1b:1b:42:1d:2b:
25:da:8b:d6:a8:39:dc:2f:59:d0:8e:74:b6:a9:fd:b0:e8:78:
aa:57:e3:7f:8a:9a:4a:1d:a1:f6:62:c9:6a:44:44:83:8e:d9:
a6:e2:e4:72:ff:0a:f6:a4:e6:bd:b7:17:e6:63:79:3d:eb:41:
0e:1d:f0:f3:94:98:6b:69:7f:18:84:18:fe:31:f9:89:e5:cb:
7e:5f:19:d4:44:63:f7:dd:ee:7d:8b:cc:ce:29:e8:f1:de:a8:
78:e8:01:1c:86:08:2b:b0:33:ed:7c:dc:96:18:cc:91:a1:ec:
c7:46:24:58:2a:0f:9c:ff:7d:69:d1:3f:1d:57:11:11:e3:78:
66:2b:e2:24:c4:2d:82:97:4a:ed:f8:9a:86:88:60:df:ba:4f:
88:15:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:42 2026 by rpki-client