Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: bgiBSThXqB/ZPKmwFVM3byxRvm8R7oansZYzo4YbCEI=
Subject key identifier: AF:C6:8D:13:6F:31:C0:F3:33:63:BB:1B:66:42:81:8F:E6:B3:02:B3
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 01A10EBA717D1001DF3639BD47EB05C79782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 13BD
Signing time: Tue 06 Oct 2026 01:01:02 +0000
Manifest this update: Tue 06 Oct 2026 01:01:02 +0000
Manifest next update: Wed 07 Oct 2026 01:01:02 +0000
Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: Si+2HpC7S3/Bzv1tlkxkJrsI55m5XtznXAfxYYADcf0=)
2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:71:7d:10:01:df:36:39:bd:47:eb:05:c7:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Oct 6 01:01:02 2026 GMT
Not After : Oct 7 01:01:02 2026 GMT
Subject: CN=afc68d136f31c0f33363bb1b6642818fe6b302b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:9a:95:40:76:02:c8:8f:da:85:13:98:d2:
64:97:ae:0f:e5:86:99:54:8b:17:8e:76:06:02:af:
60:12:06:41:b1:30:c9:82:63:97:f5:f0:b5:d8:2c:
07:77:6f:58:b5:9b:65:15:6e:0e:b8:68:78:6c:0b:
e8:1a:2d:96:76:3c:45:88:64:74:01:82:06:86:21:
07:86:ce:fa:1b:61:70:f2:2f:fc:3b:25:db:0d:a2:
ed:9a:96:04:2a:7c:95:fd:55:30:c4:d3:65:4c:8d:
3c:83:bc:47:bf:c9:6e:c8:8a:87:6e:e6:29:39:b5:
d4:36:78:2c:3e:40:38:95:88:8e:f0:cb:6e:46:ad:
66:34:8e:a0:8f:9f:ac:04:e2:e2:8f:e4:47:8a:a1:
dd:76:63:47:bb:bb:03:2d:e9:7f:43:56:93:32:f0:
e1:8d:90:24:af:b3:bf:04:2f:8d:fe:10:64:f3:37:
d4:e1:50:c4:c2:43:ba:3c:63:fc:ce:1e:51:d2:f0:
d2:7a:6c:29:e2:bb:e8:d2:08:1c:47:46:6c:f6:e3:
97:cd:21:ac:5e:d7:fa:2d:3b:25:3c:a9:c0:01:8e:
77:db:cd:a7:a8:63:08:73:07:e8:c4:31:64:00:fc:
c1:29:04:c5:db:05:6e:01:7c:eb:ec:54:9a:12:99:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:8D:13:6F:31:C0:F3:33:63:BB:1B:66:42:81:8F:E6:B3:02:B3
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9b:18:cf:d1:9a:b8:df:e1:ad:aa:f9:b3:52:4a:ef:9b:93:
8b:45:21:c3:87:2a:37:7a:fd:a7:04:c1:d5:db:86:fb:24:50:
fa:b0:1f:79:3e:f2:d4:de:d0:a6:03:5d:30:c0:41:69:67:48:
d4:1e:22:8d:2c:88:69:cf:ba:f4:e1:88:73:df:bf:9c:7e:32:
3f:49:6b:bd:14:6d:b6:54:4f:1f:3c:7f:eb:20:a8:e1:17:db:
45:72:77:7f:85:58:bc:65:69:90:10:18:f5:0b:3a:3d:e6:80:
d8:d5:f5:70:b0:b4:3e:2f:64:23:33:f4:f1:93:5d:0d:b4:14:
c4:af:03:06:dc:53:63:57:d5:b1:c1:b0:96:11:5f:37:2a:d9:
13:e2:5d:0d:0f:51:ac:66:8f:ed:55:3c:46:1d:95:0a:40:be:
e4:e7:91:f0:cb:dc:5e:2f:eb:40:15:dd:a7:1b:fd:4e:aa:39:
f3:93:32:74:d3:64:e6:c1:51:ca:3d:60:ae:66:0b:8b:6a:ba:
62:11:3c:c7:f6:a8:2f:a4:27:c7:3a:fa:c9:50:93:6c:52:d6:
fb:ed:50:21:87:f0:35:81:49:37:e6:cf:eb:90:1d:a7:98:23:
b7:e8:19:a4:21:32:16:36:59:5b:53:a4:e2:5c:fa:66:d3:fe:
0f:56:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:16:54 2026 by rpki-client