Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: To1+VSqerrzdZuM2boiBmAxpcRoRTwQ6cQsnjsSpR/E=
Subject key identifier: FB:36:D5:D6:C7:22:64:10:2D:85:7B:39:FD:8A:35:9C:B0:8C:CA:0D
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 01A13F704A31513ADF60450A8A8B7B54501B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 118A
Signing time: Thu 15 Oct 2026 12:01:25 +0000
Manifest this update: Thu 15 Oct 2026 12:01:25 +0000
Manifest next update: Fri 16 Oct 2026 12:01:25 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: M6R6e4YcUVvzu6i+EiHXXH1PcSlEbJtqc2K/2oxnHtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:4a:31:51:3a:df:60:45:0a:8a:8b:7b:54:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Oct 15 12:01:25 2026 GMT
Not After : Oct 16 12:01:25 2026 GMT
Subject: CN=fb36d5d6c72264102d857b39fd8a359cb08cca0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:63:56:7a:74:3b:24:a5:64:21:5f:bc:7a:
55:f7:23:07:06:eb:d1:2e:4f:34:dc:81:8d:fe:a6:
92:d0:4d:35:61:02:a4:39:b6:9b:e9:fb:81:d8:69:
bd:0a:d0:52:7b:e9:29:03:31:6a:ad:d1:e3:68:47:
2f:e2:e1:63:b2:65:3e:0a:62:b0:76:e8:b7:c4:96:
f3:d7:e3:b7:df:26:93:12:57:27:02:f3:66:b7:c8:
5a:6d:dd:67:67:05:70:8a:f7:db:c8:70:95:1d:0f:
92:d7:1a:32:be:71:56:da:6e:d7:eb:e1:ef:30:03:
b8:66:d2:b5:32:3a:99:bd:b7:24:9a:06:3b:13:57:
be:24:a1:55:18:6c:7b:5f:31:95:b7:9e:05:86:87:
57:b8:17:12:f4:89:76:cf:4f:3a:76:82:3b:ab:aa:
dd:71:f0:58:f0:aa:3d:40:ce:49:ae:16:7f:c2:59:
bf:9f:78:d7:9c:eb:f9:3e:6c:dc:67:00:0f:3b:0a:
bb:96:1c:b8:1d:d1:38:0e:30:88:c8:76:9b:df:21:
de:78:73:09:76:ca:1f:83:39:72:b2:84:57:10:1b:
ba:e6:f3:03:48:b5:a7:7d:f6:7b:5a:95:a4:08:bd:
90:46:fc:0d:7c:70:9e:0f:a0:f4:a4:24:21:c5:a6:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:D5:D6:C7:22:64:10:2D:85:7B:39:FD:8A:35:9C:B0:8C:CA:0D
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:40:78:1a:72:26:05:a5:cf:6b:b2:d0:df:6d:63:f5:07:
68:3f:10:4c:fc:2c:91:09:be:58:30:06:09:b0:a2:06:6e:47:
2e:29:ae:66:7b:eb:7b:61:c3:e2:2a:cc:1a:83:00:77:0b:ba:
8c:82:49:d6:ae:a1:74:b2:8a:33:0e:3c:1d:31:f2:5f:2d:e2:
e3:1b:c8:44:c2:7f:60:52:62:2a:fc:fc:5a:81:a6:29:d2:9f:
42:00:06:61:d4:be:d4:4a:eb:2b:01:f7:53:42:f0:a5:c5:37:
ad:22:c1:a1:72:34:8c:ef:41:1b:f4:c6:84:1c:ea:a6:ec:07:
2a:36:e2:22:fd:30:7a:89:46:f5:0f:29:fc:a9:29:34:0b:4b:
43:a9:a9:08:b9:f6:11:3b:7f:75:d6:e5:18:5a:f6:f8:d3:65:
8b:ae:58:99:0f:52:25:fa:d5:9d:36:46:ba:8a:be:eb:27:e9:
5d:d0:b2:64:aa:01:f4:df:96:e8:e9:5e:10:da:b1:aa:b0:e5:
81:e1:16:78:35:11:ae:d9:8e:d9:67:4f:85:de:4e:b2:ca:23:
62:fb:70:78:f0:ee:00:ef:77:84:4e:dc:6d:08:72:36:73:a5:
30:e6:c4:c4:46:a0:a3:49:93:87:78:e4:93:62:b8:f2:2e:a1:
44:bd:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:36 2026 by rpki-client