Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: /Qjhq22ZXREXXVKa0mVOgGiYAvUIxvQXsXivvjDhebo=
Subject key identifier: 2E:74:FA:45:D0:FC:7D:3D:AA:61:2E:70:4D:3B:7E:EA:59:8A:44:5E
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 01A08DC4074063F9E9CE78F8B0EE444EF76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 06CF
Signing time: Fri 11 Sep 2026 00:00:29 +0000
Manifest this update: Fri 11 Sep 2026 00:00:29 +0000
Manifest next update: Sat 12 Sep 2026 00:00:29 +0000
Files and hashes: 1: IhLOm92HXnyakwrGk2b3G1y7Qh8.roa (hash: XGBsWtqTuRWJyVArj43ucXy3vxmDpsoMFLfVD7o3X1A=)
2: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: jw2gLzyDKM1wUs1ls2DjvvMXWwz3CpaHiCcfdGemGx0=)
3: VIPR9GaJp0A9BJwV5rcEWmvNCVI.roa (hash: nuYGpbafE1z5iM0Vax1PRdxnWDLYzOJGe7bvaAjHHU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:07:40:63:f9:e9:ce:78:f8:b0:ee:44:4e:f7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Sep 11 00:00:29 2026 GMT
Not After : Sep 12 00:00:29 2026 GMT
Subject: CN=2e74fa45d0fc7d3daa612e704d3b7eea598a445e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:aa:6d:38:ec:aa:c4:c7:a3:b5:af:ae:2b:
2c:f3:eb:0a:0a:c2:1e:37:63:16:e2:be:2e:01:56:
b4:d7:d7:88:e9:b8:06:8a:61:f0:a8:3c:d5:07:73:
c9:2c:20:c6:8d:40:5e:73:5b:65:3a:41:61:63:ca:
2f:2f:73:12:10:4f:aa:42:cb:4d:b5:d0:a5:98:c9:
09:11:53:cd:f3:55:93:76:f2:57:f9:a9:45:b8:be:
6e:5b:23:74:ef:02:6f:14:2e:a2:6d:81:cc:22:dd:
26:f4:c4:45:41:d0:1a:2a:00:4f:b6:7a:8a:fd:ae:
dd:d3:8d:9a:9a:33:42:a2:42:4a:a3:20:7b:86:93:
c9:c1:31:b4:36:ee:45:0d:bb:c8:0e:2d:c8:9a:a3:
14:74:0e:87:a9:ea:da:9f:0b:62:4d:8f:02:9a:99:
88:69:56:d8:79:2e:01:d7:8a:c1:a9:60:21:82:42:
10:e4:c3:8b:16:33:ec:73:99:3d:1d:c8:ea:c2:03:
5c:01:62:bf:75:68:76:7c:7f:92:b4:94:bf:7d:d7:
d3:bf:99:0e:5a:36:0b:32:2f:8a:03:2e:90:f7:89:
d6:a2:d2:3e:29:cb:0e:81:41:55:88:c7:26:f7:97:
aa:c4:cc:b3:86:2b:c9:9c:f2:71:54:01:8b:e7:48:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:FA:45:D0:FC:7D:3D:AA:61:2E:70:4D:3B:7E:EA:59:8A:44:5E
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:07:aa:1d:ec:5d:aa:e1:d6:94:3a:08:32:c4:96:8a:44:2c:
2d:56:bb:56:d0:e4:0d:3b:54:ea:32:2f:1b:44:7f:65:1a:8e:
d1:dc:ca:8c:e7:0d:95:01:4c:70:19:2b:04:6c:b5:32:0d:b9:
c5:0e:a1:0c:1c:f2:f5:22:7f:95:a5:a9:94:ac:47:b9:b6:8d:
71:4b:db:4a:90:96:27:c1:e4:c0:d9:a8:11:cb:45:95:db:ef:
ad:32:27:cc:14:6c:5c:e5:bf:be:3d:ec:41:78:cc:04:d2:d2:
5e:45:b2:12:8f:6f:57:ed:4b:b1:03:4c:75:36:eb:90:50:47:
bd:b0:c6:c5:9b:26:44:c5:4d:b7:14:88:ed:ca:43:67:17:3f:
89:ac:9a:0a:70:b2:20:d9:8a:58:98:f4:77:68:0f:fe:39:79:
15:85:52:bb:66:4f:d3:1e:d9:6b:36:f5:b7:93:91:45:15:35:
55:d9:19:e3:a4:fd:b0:12:a2:92:cf:43:a0:ed:6f:38:b4:c2:
19:ff:68:e2:b1:54:8e:4f:d5:08:c5:d2:7c:8f:31:d0:28:9d:
33:43:da:ea:34:41:33:fa:3c:6b:95:1a:11:42:94:9c:c0:90:
15:31:47:1b:5e:74:21:a6:cc:90:0d:5f:74:e8:38:7b:5e:6e:
e4:b2:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:16 2026 by rpki-client