Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: dHHRRNOqFaOEi0dqX1CuIZz3z52/hyccolRTCX8CrxU=
Subject key identifier: 2B:36:17:91:98:A2:05:7A:15:5A:E7:06:A4:35:C0:5F:5D:97:80:76
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 019D3A1CB1B1FA31BCD87209DDDA68ADDF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0F75
Signing time: Sun 29 Mar 2026 15:00:52 +0000
Manifest this update: Sun 29 Mar 2026 15:00:52 +0000
Manifest next update: Mon 30 Mar 2026 15:00:52 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: lOmnnGujNw/q5PaGtipgEMPo6jBckQj2RMN9CDah2+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b1:b1:fa:31:bc:d8:72:09:dd:da:68:ad:df:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Mar 29 15:00:52 2026 GMT
Not After : Mar 30 15:00:52 2026 GMT
Subject: CN=2b36179198a2057a155ae706a435c05f5d978076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:86:de:0d:01:57:c0:8f:b9:98:71:c5:59:
69:11:99:9c:28:57:af:d0:40:13:2a:a1:66:6f:57:
8e:4f:74:03:3b:36:20:ef:74:24:74:1e:a7:be:2f:
e2:10:3a:fa:10:1c:c7:4d:4d:5d:df:85:fa:28:a0:
9e:39:76:78:3d:d7:2d:4d:96:60:bc:6f:c3:b6:1d:
8a:56:a1:a1:ac:19:0a:f2:37:0a:a8:0e:99:9e:b7:
1d:3e:ee:03:6e:cf:3f:35:9f:73:07:7b:86:18:3c:
b7:f9:2e:31:1e:a1:dc:cb:a8:e6:b1:1c:1d:f6:61:
b4:da:3a:89:f2:c1:0e:6b:ce:25:83:da:0c:4a:84:
ef:13:73:17:97:fc:e5:08:26:00:23:d5:1b:37:22:
ba:cf:89:3a:35:0d:a3:3e:f5:15:d2:cd:d1:a3:51:
b9:ae:9b:0a:25:9c:a6:46:41:f8:fb:b9:2c:62:78:
ca:ae:fd:02:3a:8d:52:a6:d1:41:d6:db:7e:a8:8f:
6c:cf:bd:72:f9:ed:b1:4d:3c:b6:e9:af:92:c3:aa:
0c:44:7e:24:fc:04:17:0f:e9:c0:48:3c:d2:24:cc:
e1:65:0f:e5:26:8d:64:60:09:5f:97:f3:02:be:00:
d0:a6:0b:e4:e9:5b:38:9d:a3:aa:6c:cd:eb:48:c8:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:17:91:98:A2:05:7A:15:5A:E7:06:A4:35:C0:5F:5D:97:80:76
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:7a:62:b7:f7:26:fe:4a:9a:06:0a:cb:8b:10:d9:4c:ee:
11:b6:61:34:d6:9c:b8:04:ae:cc:2e:02:f3:b1:fe:b9:b6:be:
73:f9:28:94:64:80:36:35:42:46:83:7d:29:af:87:dd:3a:4e:
ed:e7:01:3d:95:66:0d:6a:de:69:3b:57:59:25:a4:c9:be:29:
26:20:39:79:51:ef:41:9d:d4:f9:91:d5:9a:4c:db:d6:fa:9f:
8f:aa:01:6f:ae:a7:3f:3c:10:7e:03:3c:35:fc:97:d6:57:fa:
6f:f3:ab:8c:63:34:1a:28:47:0a:dd:5b:aa:15:24:74:3a:48:
7a:f1:75:4f:0c:a5:85:c4:a6:40:85:fa:ce:80:84:28:d7:bf:
91:92:fa:db:a3:d9:12:82:62:e3:3a:ee:c7:9b:2c:3b:5b:72:
6d:55:d9:00:4e:af:7f:d9:bf:96:06:fa:a8:ef:31:c2:61:3a:
e6:12:44:ba:8c:d1:32:73:3f:c6:05:c4:9d:07:87:ff:3c:5f:
03:fd:86:80:af:92:eb:0f:e4:ad:be:3e:8d:9d:52:1c:8a:58:
73:5f:83:9a:14:c9:14:5c:d7:ff:61:80:c7:6f:ca:e8:61:4c:
47:ac:c9:e3:24:bc:08:b7:b7:08:9c:79:95:37:f3:da:71:69:
ee:b9:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:12:19 2026 by rpki-client