Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: AEieCHO8eCRCMdaY+nfvmto8N/5HnnrKo0mG8TAF6lc=
Subject key identifier: A8:52:53:91:BC:06:39:BD:E8:35:7A:C4:5C:91:27:0B:27:72:BB:24
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019F183085A9044A24F060097853153FA436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 1091
Signing time: Tue 30 Jun 2026 11:01:00 +0000
Manifest this update: Tue 30 Jun 2026 11:01:00 +0000
Manifest next update: Wed 01 Jul 2026 11:01:00 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: FLCKYLbyXBTAIaMDebIhwGT1k3QAD3Ko8HYpD0I6+hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:85:a9:04:4a:24:f0:60:09:78:53:15:3f:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jun 30 11:01:00 2026 GMT
Not After : Jul 1 11:01:00 2026 GMT
Subject: CN=a8525391bc0639bde8357ac45c91270b2772bb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:da:34:71:2b:2d:fc:11:5c:d2:45:f0:a8:
df:42:b6:ac:93:da:7e:4d:d5:59:be:b3:f4:a8:72:
b8:92:97:67:2a:8c:49:66:fd:64:e2:73:1d:16:07:
19:e3:36:72:7d:a0:3e:bb:e9:d2:c8:6a:39:39:9d:
86:2b:e2:23:b4:93:73:0c:4e:18:8c:39:22:57:89:
ae:67:93:42:12:f0:e3:cb:0e:22:c0:80:e2:10:45:
37:2c:8a:6c:3d:20:5f:5d:db:e5:85:b6:12:cd:89:
ef:ec:01:7f:7d:7b:c3:05:3a:dd:fb:08:98:27:09:
d7:26:46:53:54:1e:20:ef:27:c8:91:11:74:c8:0a:
15:f8:66:f8:20:f8:96:ce:b2:7e:00:8e:fb:77:65:
ff:34:06:06:b1:46:d2:f5:36:c7:f1:43:b1:9d:fc:
52:e3:26:2e:a7:80:2b:6a:04:f5:c9:05:0a:d1:1b:
04:37:20:1a:45:8f:b3:bb:34:81:51:f9:61:3d:15:
4d:6d:c8:2b:4f:c7:d2:3a:2a:ad:e8:fd:b0:99:1f:
ea:52:96:1c:37:db:52:86:e1:54:65:3f:09:37:af:
d1:f8:f2:30:92:91:0b:36:37:6e:93:62:e6:0b:c1:
b9:69:1e:38:0c:7c:a0:ab:00:69:1d:17:1b:56:4a:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:53:91:BC:06:39:BD:E8:35:7A:C4:5C:91:27:0B:27:72:BB:24
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7c:eb:3b:1d:5a:9b:a3:b5:a3:6e:cf:5c:40:d2:db:67:32:
67:5d:31:16:f9:27:a7:bf:24:87:17:7c:c5:a6:dc:da:7f:ca:
bb:37:66:df:ec:75:d3:e5:28:ac:d8:39:17:2f:21:cc:77:31:
e6:52:7a:cd:d6:a8:6a:ca:dc:59:02:d4:e1:2d:6f:9c:00:9d:
8d:d7:b2:da:23:35:bf:ef:b4:f6:e0:f6:e8:4a:ab:c6:95:b4:
b4:33:01:2f:67:a5:6e:b7:d9:a0:2f:ab:99:f4:20:e9:6b:23:
90:2d:ef:39:2f:95:35:e2:b3:05:02:6f:d5:f6:de:dc:82:06:
11:ec:38:3b:03:85:29:50:22:fc:09:20:c1:c1:d6:16:14:8e:
ad:80:31:17:e5:b8:f0:ba:f2:1a:1d:19:c9:a4:9b:dc:ff:4b:
dd:69:78:5c:f0:eb:c9:89:ba:ea:db:f2:51:cb:14:a6:2f:92:
c1:12:9f:29:71:8b:1a:28:a8:b7:28:1b:de:9e:66:89:91:60:
06:ca:57:75:c2:1b:99:ea:d5:ea:97:44:82:10:4d:70:4a:62:
44:e6:ce:07:da:83:e2:8b:50:7c:d0:07:33:8a:bd:d0:c6:4f:
61:fb:fc:ac:b6:01:d6:16:9c:e3:44:37:ab:7f:3a:16:f8:22:
18:65:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:45 2026 by rpki-client