Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: MK913S9/nZrE35qeaFOfgNCkcqeuLVwbeGL3eMmhA54=
Subject key identifier: BA:27:4A:62:DA:80:4B:D6:65:B7:CF:D8:C4:F9:5A:3C:31:7D:2F:67
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 019F189EA04D697EBF5BBBECF7BE38EF6CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 12B9
Signing time: Tue 30 Jun 2026 13:01:16 +0000
Manifest this update: Tue 30 Jun 2026 13:01:16 +0000
Manifest next update: Wed 01 Jul 2026 13:01:16 +0000
Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: /lNBUEH2W8loYPUG0ZeAXQBjk9VVqm78IHK0E3ywQIg=)
2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:a0:4d:69:7e:bf:5b:bb:ec:f7:be:38:ef:6c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Jun 30 13:01:16 2026 GMT
Not After : Jul 1 13:01:16 2026 GMT
Subject: CN=ba274a62da804bd665b7cfd8c4f95a3c317d2f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:94:c3:55:32:64:ed:6c:11:be:9b:39:75:
02:a8:ad:af:12:c2:5f:7f:d6:42:20:08:c9:ee:49:
4f:ab:b7:dc:99:93:1a:31:a3:55:70:90:0f:99:8d:
82:62:71:a7:b2:ac:aa:4b:27:15:63:29:2e:51:b7:
2a:4b:53:00:44:fc:73:2f:8f:77:39:e5:27:65:89:
ad:0a:c1:df:db:dd:61:cc:1b:0c:e4:d2:5a:3a:a2:
6d:82:1e:39:70:90:dd:84:53:b6:68:73:54:68:94:
cc:72:89:c0:fc:53:31:11:89:e9:87:72:56:d0:1d:
65:77:19:e6:ed:5b:bf:53:b6:05:91:64:97:ce:62:
d4:95:dd:b1:1a:1b:42:a7:88:cc:24:36:a6:1c:0a:
ab:61:f5:4c:03:fa:b0:bc:df:7d:40:52:05:f9:12:
07:65:97:ee:75:08:cb:1a:47:be:e2:b5:99:ef:05:
aa:e0:46:4b:51:72:6e:3d:27:e7:38:ea:50:6c:af:
ae:39:f2:1e:da:78:44:e2:b3:75:4c:82:6b:14:00:
8a:3d:71:ef:70:5b:6a:50:92:24:35:98:87:0b:b8:
af:64:52:fa:4d:ef:99:fd:05:c1:66:fe:54:7c:4a:
d3:c7:f4:48:85:81:c0:8f:fb:c4:bd:be:de:9f:3f:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:27:4A:62:DA:80:4B:D6:65:B7:CF:D8:C4:F9:5A:3C:31:7D:2F:67
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4b:83:4c:42:bb:e7:38:0c:62:c5:40:97:f0:8a:9a:95:41:
55:ea:73:99:ca:5e:d0:c5:d1:c2:f9:97:e8:30:78:c4:05:78:
9e:bf:7b:26:9d:0e:1d:85:de:ca:e9:42:33:6a:72:71:fc:ab:
15:ee:b4:44:e5:a6:4d:55:76:5e:f7:83:29:bb:03:c8:36:e2:
f0:76:3b:9d:bc:22:e5:5b:b9:85:ec:9c:5e:50:32:06:0a:ee:
49:df:9e:11:a5:04:11:c7:bf:12:ee:85:d1:c4:67:90:aa:5f:
58:aa:32:f1:16:71:a3:ee:f8:f4:d6:5a:19:20:42:e1:75:9f:
b8:6f:57:23:7f:3f:8c:81:6f:5d:4f:4c:51:f0:c9:62:f3:4d:
ff:a2:19:2d:7e:4a:c4:b8:18:fd:f9:53:38:ee:67:67:e9:c0:
fb:26:c6:b3:bc:17:16:24:af:65:9c:20:ed:f0:42:9e:2f:d4:
8a:c5:c0:28:12:c0:32:13:1b:82:65:3b:bc:af:bb:7c:c9:6f:
51:c0:d2:a6:4b:cf:cf:b3:41:d6:1c:52:a7:a3:f6:8c:26:fc:
36:9f:e2:84:9d:39:73:63:52:dc:32:e9:c1:93:d1:34:92:c7:
88:00:9b:6c:b4:f8:77:19:fb:24:e9:78:f5:4a:de:39:72:f6:
c5:5d:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:53 2026 by rpki-client