Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: e/Oac+UI78H3YJFXS4lg7Mm+zghr73+E6SOyQgCNfp8=
Subject key identifier: 2B:29:F0:3C:CB:2B:BF:D7:E5:32:12:01:5A:56:F4:37:F2:49:AD:83
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019D375235289C36F878EFAD08D9DAE95172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0F98
Signing time: Sun 29 Mar 2026 02:00:27 +0000
Manifest this update: Sun 29 Mar 2026 02:00:27 +0000
Manifest next update: Mon 30 Mar 2026 02:00:27 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: 2m77z5VwOV/sxdrGChAYfCOyCwTb+LUYBTMfSv2yTBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:35:28:9c:36:f8:78:ef:ad:08:d9:da:e9:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Mar 29 02:00:27 2026 GMT
Not After : Mar 30 02:00:27 2026 GMT
Subject: CN=2b29f03ccb2bbfd7e53212015a56f437f249ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:c4:06:cf:b2:84:ab:3a:cb:59:f6:32:ba:
8b:18:8a:c5:fb:88:87:e6:52:17:ac:90:01:ce:ef:
e3:21:6a:fb:c1:e7:64:d4:8a:9b:cb:db:af:3e:b9:
d8:78:a5:94:be:8b:7b:c5:08:cd:76:4b:65:fc:46:
6c:fd:a0:92:6e:4b:7d:cc:bb:62:c0:86:d8:a6:3a:
10:9a:0f:35:a7:a2:31:74:83:6a:b9:82:fd:85:fe:
1d:a4:be:4b:dc:ee:4a:68:79:6f:90:dc:96:39:54:
17:57:70:d7:95:2b:d7:1e:6f:1e:84:5b:4a:41:6e:
20:c2:51:16:e4:4a:47:fa:bb:6f:97:44:a0:8d:0c:
3c:c1:d4:96:d0:46:b4:0e:de:a1:61:ae:6d:f8:5c:
39:16:0d:92:1a:a3:d6:1f:08:0b:71:32:f0:9f:c7:
ba:75:4a:75:9c:8a:5b:9f:34:52:86:38:81:eb:68:
7d:20:80:5f:22:e5:46:cb:e3:f9:f8:54:0e:28:fa:
86:28:0e:e2:50:b9:89:4f:b6:d3:db:d5:3e:71:f5:
1e:69:04:df:a6:3d:46:df:2d:34:93:63:80:30:bc:
02:a1:5a:db:84:de:20:1b:71:9a:9f:0a:0b:e5:05:
86:f1:64:36:23:d7:61:ab:52:26:2e:6c:a2:20:da:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:F0:3C:CB:2B:BF:D7:E5:32:12:01:5A:56:F4:37:F2:49:AD:83
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:21:2d:2d:a8:6f:ad:7f:69:f4:a2:cc:d5:bb:80:23:40:50:
60:94:11:9d:22:10:56:a5:52:59:99:ea:de:20:83:6c:29:22:
0b:9f:22:3e:af:ed:0b:6b:d0:d2:01:94:74:c1:7e:cc:34:ca:
4a:2b:c4:c0:47:dd:be:c8:3d:59:f7:b4:99:8e:13:d0:cc:be:
3c:e0:b0:82:d5:83:db:f6:9d:f4:ad:28:a4:9f:e5:df:e2:f0:
48:e6:44:51:c8:e7:53:43:70:92:83:df:fd:26:2e:d1:fb:8d:
f8:84:fe:b8:7a:6f:80:9e:b2:d2:c1:08:3a:11:d5:c8:ca:43:
6e:f2:4b:3d:05:27:d3:ad:96:3f:b1:ab:42:a3:37:29:08:aa:
49:63:9a:d4:8c:0f:54:c8:bb:1f:2c:9f:27:26:f5:9d:67:a4:
c5:e0:78:e5:56:5a:3d:49:8f:2e:35:40:67:45:e0:0b:95:45:
33:fb:94:b5:27:41:a3:c0:31:d8:95:cd:55:7e:c2:1d:c3:cb:
c0:86:8b:0f:5c:3d:0d:21:60:b9:94:23:bd:50:59:71:b5:c4:
d5:5f:31:c5:9b:03:fb:ab:1c:af:49:19:db:3f:69:ff:b1:f9:
da:8a:6b:2a:b5:c3:c7:d6:a6:5c:be:7b:7c:24:e9:16:3b:16:
5e:c5:d3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UjUonDb4eO+tCNna6VFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTk5ZWZmZDQ5MGEzYjhkMGNkMzFhZTk5OWYwZTZkM2U5
OGU2ODIwHhcNMjYwMzI5MDIwMDI3WhcNMjYwMzMwMDIwMDI3WjAzMTEwLwYDVQQD
EygyYjI5ZjAzY2NiMmJiZmQ3ZTUzMjEyMDE1YTU2ZjQzN2YyNDlhZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeXEBs+yhKs6y1n2MrqLGIrF+4iH
5lIXrJABzu/jIWr7wedk1Iqby9uvPrnYeKWUvot7xQjNdktl/EZs/aCSbkt9zLti
wIbYpjoQmg81p6IxdINquYL9hf4dpL5L3O5KaHlvkNyWOVQXV3DXlSvXHm8ehFtK
QW4gwlEW5EpH+rtvl0SgjQw8wdSW0Ea0Dt6hYa5t+Fw5Fg2SGqPWHwgLcTLwn8e6
dUp1nIpbnzRShjiB62h9IIBfIuVGy+P5+FQOKPqGKA7iULmJT7bT29U+cfUeaQTf
pj1G3y00k2OAMLwCoVrbhN4gG3GanwoL5QWG8WQ2I9dhq1ImLmyiINpqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsp8DzLK7/X5TISAVpW9DfySa2DMB8GA1UdIwQY
MBaAFN+Znv/UkKO40M0xrpmfDm0+mOaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQt
NTAxNTM4YzBkZDAxLzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQtNTAxNTM4YzBkZDAx
LzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyEtLahv
rX9p9KLM1buAI0BQYJQRnSIQVqVSWZnq3iCDbCkiC58iPq/tC2vQ0gGUdMF+zDTK
SivEwEfdvsg9Wfe0mY4T0My+POCwgtWD2/ad9K0opJ/l3+LwSOZEUcjnU0NwkoPf
/SYu0fuN+IT+uHpvgJ6y0sEIOhHVyMpDbvJLPQUn062WP7GrQqM3KQiqSWOa1IwP
VMi7HyyfJyb1nWekxeB45VZaPUmPLjVAZ0XgC5VFM/uUtSdBo8Ax2JXNVX7CHcPL
wIaLD1w9DSFguZQjvVBZcbXE1V8xxZsD+6scr0kZ2z9p/7H52oprKrXDx9amXL57
fCTpFjsWXsXTBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:34 2026 by rpki-client