Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: 1bs9HGl9EGss+SM+f9aT2uaLSme6CMkyH8PBrEPHCSc=
Subject key identifier: F6:22:8F:6B:E4:18:F4:A8:5E:A8:ED:13:54:5D:2B:31:90:67:AF:01
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019E3073333B2BCAB2470B64F30D7210DD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 1019
Signing time: Sat 16 May 2026 11:01:56 +0000
Manifest this update: Sat 16 May 2026 11:01:56 +0000
Manifest next update: Sun 17 May 2026 11:01:56 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: qWChwA8tWg9ITQ9JBkwPXTpJeS2VBkHuBSowj/AZlVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:33:3b:2b:ca:b2:47:0b:64:f3:0d:72:10:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: May 16 11:01:56 2026 GMT
Not After : May 17 11:01:56 2026 GMT
Subject: CN=f6228f6be418f4a85ea8ed13545d2b319067af01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:8f:db:65:94:5b:55:73:0f:e4:83:13:4f:
1e:43:a1:31:2a:06:4f:b3:8d:54:b8:ce:a1:66:f8:
a1:0a:ba:08:63:c9:95:b8:16:88:d7:a6:10:98:3a:
78:76:e6:00:ff:e8:84:2a:f7:b9:58:ba:34:c6:a9:
c8:b7:d0:b5:70:d7:97:2c:e6:71:d9:2c:68:b9:7c:
ed:13:e8:be:c1:ca:c7:e3:3c:38:87:56:35:7d:28:
ae:dc:cd:5d:b1:df:25:62:eb:16:d0:18:e2:86:5f:
bb:53:e6:56:6c:3b:e2:7c:63:8e:5f:2c:94:65:fc:
8f:2c:08:58:3c:23:3d:c7:6a:fa:21:39:01:39:c5:
33:56:cf:cf:10:a3:44:72:2a:9c:0a:d4:61:46:47:
ef:4a:fa:f6:82:93:58:40:66:d8:2e:c6:38:53:ac:
5e:54:60:d2:03:cf:e9:43:74:c1:46:8a:e1:a8:3e:
07:4e:1e:f7:64:7f:4d:ad:ac:ff:d8:df:82:a9:1a:
6f:84:d5:a1:1e:4b:e3:37:74:fa:a3:63:15:45:cf:
5e:0e:c1:a4:77:7f:e7:a3:22:51:77:44:af:be:c0:
a7:6c:d7:54:dc:e9:5b:a9:30:af:e2:92:aa:9d:dc:
bd:9b:f2:7a:f5:3b:cb:e9:11:24:98:52:d4:2b:32:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:22:8F:6B:E4:18:F4:A8:5E:A8:ED:13:54:5D:2B:31:90:67:AF:01
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1d:b4:82:ee:27:5a:12:64:c6:7b:b0:46:c7:5e:8e:ea:c2:
da:a4:44:93:c4:2a:29:b4:28:c6:ab:2c:48:df:eb:93:37:30:
97:01:4f:5c:26:cd:48:7b:c8:a9:46:38:b7:ac:a7:2b:f9:66:
03:ed:f7:7c:fb:b8:68:cd:53:3b:3d:50:20:d0:fe:36:3f:7d:
91:11:00:aa:29:42:d8:b3:7c:70:7f:f9:6b:09:18:5c:5d:82:
a9:ac:27:46:75:bc:c9:4e:b0:08:37:35:99:7e:36:8a:f0:95:
38:cc:55:be:a0:08:83:3e:a2:e0:b9:f8:ff:87:f3:d2:ac:00:
1b:00:92:f2:b6:20:f9:16:4f:1e:97:92:bd:4d:5f:98:20:db:
4c:fe:b0:ec:e3:30:13:0e:48:2d:d0:2f:c3:40:dc:40:48:b8:
23:4e:88:ae:1c:98:f7:bd:40:16:5b:e0:c1:00:6d:a8:20:00:
11:26:4f:18:87:5d:bc:42:53:bf:82:af:92:d3:c2:84:0a:3a:
d1:ed:41:39:68:72:fe:48:20:dc:65:e8:ca:d8:a3:ea:63:01:
b0:ff:7c:de:ff:a6:00:dc:b0:a2:2b:3d:41:e2:a0:25:1e:a9:
4e:23:7c:b0:b6:e4:44:1b:ae:8f:f6:b8:cd:d0:a0:78:df:bd:
99:03:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:50 2026 by rpki-client