Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: smbS8kcT5b66DxiBpYm7ebHyNRbBb3iAy0YN19AxIv8=
Subject key identifier: DD:08:D8:84:0A:E7:F0:FC:26:AA:EB:32:6E:7B:DA:4C:67:7C:B0:5F
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 019F190CD89DF473EA92F3A4C899DF03F725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 106D
Signing time: Tue 30 Jun 2026 15:01:39 +0000
Manifest this update: Tue 30 Jun 2026 15:01:39 +0000
Manifest next update: Wed 01 Jul 2026 15:01:39 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: TKmVZrI1CKjeJL/ZhTYjjY1LAqSn2EyZzFcRJ4S6NNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:d8:9d:f4:73:ea:92:f3:a4:c8:99:df:03:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Jun 30 15:01:39 2026 GMT
Not After : Jul 1 15:01:39 2026 GMT
Subject: CN=dd08d8840ae7f0fc26aaeb326e7bda4c677cb05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:83:06:0e:29:51:a5:21:fa:fe:02:1b:8a:
7a:cc:0e:af:bb:26:a9:1b:66:91:5f:30:f8:84:42:
57:19:7f:d7:4d:80:7b:7f:ff:28:eb:1f:65:83:c1:
69:40:19:4f:ea:0b:25:f1:ea:1b:e4:9d:52:8a:e5:
2b:88:8b:14:4d:bb:c8:98:73:f0:d9:19:dc:a1:8c:
15:27:99:ad:10:60:81:ed:a7:87:c4:ca:a4:f6:a5:
cb:7a:13:85:55:20:dd:e0:33:31:c8:cb:4a:11:51:
17:17:19:b9:5c:bc:6c:c8:7f:fe:92:18:20:84:dc:
8d:75:df:10:da:f4:ca:4a:86:31:c1:00:c6:9c:99:
e6:80:2f:a1:24:99:8b:b3:55:25:44:e7:03:01:8b:
57:52:f5:86:b6:a3:42:74:f1:35:f5:0c:2d:43:4f:
f1:37:24:e4:da:6c:71:55:1f:45:ee:98:42:6e:2b:
00:1f:87:96:40:4b:c0:17:84:90:95:1a:3c:b2:a6:
b5:bf:d9:90:cf:56:e6:e6:28:d5:00:65:dc:c3:61:
18:3a:1b:4b:60:e1:80:0a:8a:84:3a:1f:6c:8f:1f:
ab:be:fe:9a:1e:dd:f6:cb:76:d8:76:25:2f:8e:33:
eb:7b:d8:74:a7:dd:53:be:ac:16:d9:3f:fc:60:ec:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:D8:84:0A:E7:F0:FC:26:AA:EB:32:6E:7B:DA:4C:67:7C:B0:5F
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:96:c6:f0:1a:b6:d0:60:fc:b1:bb:14:50:d2:f6:0e:b0:
5e:86:8b:5b:35:5a:53:67:2a:d6:78:75:22:0a:50:31:2a:38:
5f:d9:5e:ee:ec:c0:f1:a8:83:ef:2c:53:51:9b:91:ba:eb:91:
0b:94:6c:8f:c6:a9:09:ad:06:7e:71:9a:f8:da:e7:ff:c5:e8:
a1:75:78:14:86:c9:d4:83:11:29:d4:45:e3:15:7e:bd:2d:66:
c7:9e:82:d4:63:f4:63:d5:f4:f3:26:ab:ee:17:f2:7e:a7:36:
78:da:ea:27:6d:03:b0:f2:c0:24:bc:75:5b:c7:b6:ef:97:66:
2a:3d:3a:3c:8b:54:00:41:93:03:78:ea:f3:ce:bd:bc:76:52:
27:9d:47:41:cc:a4:73:d5:d3:8b:94:aa:50:2a:c6:41:6a:6e:
17:a0:b9:a0:92:d9:82:bd:0e:8c:cd:47:e2:1d:3b:a7:e0:75:
50:91:f5:c2:3f:a4:f6:e1:f8:cd:fd:a2:31:54:26:6e:46:d0:
4c:07:5e:bb:13:d3:2c:e3:db:41:c7:c5:fe:56:89:39:cb:3f:
e5:bd:19:61:1f:76:5a:27:6c:11:33:8c:92:d5:4b:16:ce:fd:
1c:31:4d:ee:ab:68:00:a2:b8:16:80:0c:0f:e1:4f:91:e7:12:
a4:b9:af:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDNid9HPqkvOkyJnfA/clMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWE5NjM4MDk3MTRkMTEwM2I2NDYwZDlkMGUxNGExMmU4
NTAzMjUwHhcNMjYwNjMwMTUwMTM5WhcNMjYwNzAxMTUwMTM5WjAzMTEwLwYDVQQD
EyhkZDA4ZDg4NDBhZTdmMGZjMjZhYWViMzI2ZTdiZGE0YzY3N2NiMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO2DBg4pUaUh+v4CG4p6zA6vuyap
G2aRXzD4hEJXGX/XTYB7f/8o6x9lg8FpQBlP6gsl8eob5J1SiuUriIsUTbvImHPw
2RncoYwVJ5mtEGCB7aeHxMqk9qXLehOFVSDd4DMxyMtKEVEXFxm5XLxsyH/+khgg
hNyNdd8Q2vTKSoYxwQDGnJnmgC+hJJmLs1UlROcDAYtXUvWGtqNCdPE19QwtQ0/x
NyTk2mxxVR9F7phCbisAH4eWQEvAF4SQlRo8sqa1v9mQz1bm5ijVAGXcw2EYOhtL
YOGACoqEOh9sjx+rvv6aHt32y3bYdiUvjjPre9h0p91TvqwW2T/8YOyjWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0I2IQK5/D8JqrrMm572kxnfLBfMB8GA1UdIwQY
MBaAFN+aljgJcU0RA7ZGDZ0OFKEuhQMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgt
ZjMwOTZhMDI0ZTI5LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgtZjMwOTZhMDI0ZTI5
LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg22WxvAa
ttBg/LG7FFDS9g6wXoaLWzVaU2cq1nh1IgpQMSo4X9le7uzA8aiD7yxTUZuRuuuR
C5Rsj8apCa0GfnGa+Nrn/8XooXV4FIbJ1IMRKdRF4xV+vS1mx56C1GP0Y9X08yar
7hfyfqc2eNrqJ20DsPLAJLx1W8e275dmKj06PItUAEGTA3jq8869vHZSJ51HQcyk
c9XTi5SqUCrGQWpuF6C5oJLZgr0OjM1H4h07p+B1UJH1wj+k9uH4zf2iMVQmbkbQ
TAdeuxPTLOPbQcfF/laJOcs/5b0ZYR92WidsETOMktVLFs79HDFN7qtoAKK4FoAM
D+FPkecSpLmvzg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:00 2026 by rpki-client