Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: MU0Gr/Uv72HsS+nScaBMyxURg1t4pV86zWO+futUDJM=
Subject key identifier: 03:16:CA:87:AE:87:75:53:0D:C0:E7:37:8A:16:7F:19:98:31:52:25
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 019D37F78F4449F978611E7DDADC0F343C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 14B5
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (hash: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU=)
2: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: tU/0VcmqC7/vtlcPlBlZ8JZRxTfUoxRUALQMOj9Tfzg=)
3: z92krxSw-hPFAOTzqyVkWwbmwSQ.roa (hash: UmaQR3RHLDeTPrQrX1Vr4JMThGImksq/AjUcliH2e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8f:44:49:f9:78:61:1e:7d:da:dc:0f:34:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=0316ca87ae8775530dc0e7378a167f1998315225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:b4:a7:52:f2:bb:2c:12:f9:fe:2f:18:12:
c8:1a:f1:40:9b:b8:2a:31:f7:a3:67:c1:4c:4a:6e:
53:33:0c:1e:9a:96:50:44:28:de:9d:07:37:8d:52:
4b:7c:cd:ad:13:82:dd:da:e8:1d:81:4d:e5:b6:b6:
2d:69:7a:2e:39:ea:37:e2:41:0b:ad:d8:40:13:3f:
a8:2d:c2:b3:90:30:7d:5b:70:cb:c6:45:8a:0c:f4:
3d:a4:18:5b:01:9a:42:91:3f:1e:d6:70:c0:18:3f:
52:ab:54:0b:5a:f9:bf:a4:6c:25:6c:86:01:56:71:
98:67:3b:1f:6c:c1:21:27:db:20:29:a3:b0:84:4a:
fb:d9:5d:18:3c:f0:d4:28:2b:12:f2:69:d6:83:04:
3f:87:81:21:f2:87:2b:10:7a:e5:64:b0:aa:6b:dd:
07:75:51:56:d7:f4:a1:f5:e6:ae:6f:c1:f7:6d:78:
38:da:6d:d9:ba:78:3d:56:57:b6:a3:ce:d7:9d:91:
93:b9:0b:53:93:ba:52:af:20:60:ff:04:ad:df:4d:
01:cb:a5:bb:ae:62:76:15:23:55:5f:1f:df:9d:56:
84:2e:19:20:72:61:28:bd:77:6b:aa:a0:8d:80:24:
38:54:85:3d:14:a3:21:ab:31:9f:ff:6c:28:b1:8b:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:CA:87:AE:87:75:53:0D:C0:E7:37:8A:16:7F:19:98:31:52:25
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:6a:1e:5e:eb:04:0d:b6:a3:c6:21:0f:db:af:12:e0:d5:
f7:e6:45:9d:42:b6:09:d6:d9:67:ad:92:95:b1:20:a4:88:86:
aa:47:32:85:8d:60:76:80:2e:9a:60:9e:e6:d2:df:14:26:f2:
43:cb:58:1c:7e:e5:20:d2:16:a7:09:b2:35:0c:63:82:5b:0b:
f5:e6:fe:9b:05:47:62:bf:bf:36:0c:a9:2f:60:fc:8e:52:e0:
60:6c:bd:ca:3c:dd:5a:35:32:08:52:cd:c9:4a:a9:cd:cd:96:
df:c1:3a:c5:f8:de:98:95:54:60:93:0a:80:fc:50:42:36:8b:
10:38:da:c4:74:6a:5c:2c:57:c3:23:d1:df:bb:6e:4e:3b:70:
d8:9f:be:b4:6e:58:9b:de:94:a5:cf:fd:f7:b5:72:2c:d7:eb:
77:04:34:34:c4:f8:63:13:2e:e8:13:40:83:8d:47:ef:17:e5:
31:7e:86:19:c0:c9:74:e1:35:25:47:eb:58:54:a9:2a:b0:41:
3e:85:ab:86:3e:bb:1f:ea:40:6d:14:a6:eb:36:24:74:07:19:
b2:4f:63:48:0c:c8:45:53:bb:1a:46:56:8e:ec:25:ca:5e:f6:
ef:1e:e3:cd:e2:8d:cf:9f:6f:c0:33:f5:be:95:b0:12:55:81:
53:ee:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:02 2026 by rpki-client