Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
File: 35nVPUR4O91NiUjEU0rLsA9xtac.mft (raw, json)
Hash identifier: wHs4eRAO6QxRx1PW3br3nFynTYyMyHtdnMVHTA5J2AA=
Subject key identifier: DF:30:42:13:2E:7F:50:16:4F:54:35:28:E2:F9:79:39:92:E2:64:96
Authority key identifier: DF:99:D5:3D:44:78:3B:DD:4D:89:48:C4:53:4A:CB:B0:0F:71:B5:A7
Certificate issuer: /CN=df99d53d44783bdd4d8948c4534acbb00f71b5a7
Certificate serial: 01A0404E7CE7CC6B96B2B068DC8641C1FF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:20 +0000
Manifest this update: Wed 26 Aug 2026 23:01:20 +0000
Manifest next update: Thu 27 Aug 2026 23:01:20 +0000
Files and hashes: 1: 35nVPUR4O91NiUjEU0rLsA9xtac.crl (hash: 4ufJVyjOXnbDS5wVeedaj4zdr3Go22elGSA7enEH5bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:7c:e7:cc:6b:96:b2:b0:68:dc:86:41:c1:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df99d53d44783bdd4d8948c4534acbb00f71b5a7
Validity
Not Before: Aug 26 23:01:20 2026 GMT
Not After : Aug 27 23:01:20 2026 GMT
Subject: CN=df3042132e7f50164f543528e2f9793992e26496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:af:00:a2:a0:0b:ac:7a:a7:0a:3e:a4:b1:
ca:88:20:aa:a4:65:b9:77:7c:52:25:c3:64:b3:8f:
a6:c0:be:61:f1:2a:6a:dc:f1:27:de:bf:15:88:06:
87:0d:81:43:40:1b:4f:ff:d6:50:c8:3c:81:1b:2f:
56:24:2c:d1:c3:e6:f0:d2:5c:ad:f0:7d:c0:51:39:
f4:df:c5:aa:5b:5c:ed:ca:c3:ba:87:ab:d0:88:b1:
b1:0b:57:f3:b0:43:cc:3b:5e:d6:3b:bf:8d:30:aa:
ab:d8:5a:30:95:7e:e3:ec:98:13:ab:c1:6e:63:31:
e1:3e:a2:e8:ea:bd:74:66:81:34:ef:a5:cf:1d:b3:
2a:18:b6:f8:cc:5e:dc:ec:bd:61:a7:2f:59:cd:e8:
9b:12:1e:0b:a3:0f:94:f7:52:f7:1a:8e:87:3d:54:
e7:2e:3f:96:55:3a:6d:3a:e3:5c:6f:31:81:8c:70:
35:8d:29:32:11:0f:62:b0:ac:fb:54:89:5f:72:b6:
a1:d6:9f:fe:01:f6:19:ce:ba:52:26:f2:a1:6b:8b:
41:88:82:9d:7d:e9:d1:78:98:49:ab:70:6c:cf:fe:
ee:86:90:6a:4b:24:d2:41:de:46:29:b7:bd:10:9a:
76:33:6b:8d:45:36:b3:69:68:13:84:8f:6a:0e:4c:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:42:13:2E:7F:50:16:4F:54:35:28:E2:F9:79:39:92:E2:64:96
X509v3 Authority Key Identifier:
keyid:DF:99:D5:3D:44:78:3B:DD:4D:89:48:C4:53:4A:CB:B0:0F:71:B5:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:c0:36:8f:1f:b9:f2:24:bd:2f:3d:5a:38:15:ba:7f:e5:
9a:70:54:93:e4:bb:11:f0:70:41:fe:5b:12:af:6c:80:a0:ae:
fe:a9:c4:f0:91:cd:c1:a5:ff:25:f3:ba:61:c5:44:9d:de:78:
d4:e8:bf:0c:9b:f0:b4:fb:17:b4:30:be:51:18:80:6f:65:22:
71:f0:9e:7f:44:2b:24:db:3f:c6:9c:30:f2:c2:d9:ae:fa:e3:
2d:4f:8c:1b:ca:fb:76:88:88:1b:17:08:35:8a:1c:fa:8e:ae:
84:f9:cf:97:b7:8a:f5:e1:ee:0a:e7:c9:ca:6e:ff:3c:e7:e4:
61:9d:e7:70:7a:18:36:5d:fe:84:3e:37:e1:6f:8b:ea:88:db:
83:d6:a0:40:73:7c:cb:2c:73:6e:b8:f0:ea:ba:e8:98:47:1a:
0a:a5:5a:ff:c4:34:20:a9:47:89:31:8b:b0:5c:a6:c4:3e:32:
0f:32:17:7d:b0:75:6e:90:2e:1d:ea:70:0a:00:e2:24:f3:6b:
90:b2:c0:90:18:6e:36:6d:d8:6b:f7:9c:0b:48:7f:2f:d2:c6:
1c:99:51:02:30:c2:47:80:a5:cc:a3:35:ef:0e:40:04:b7:80:
b4:50:d8:21:a6:f0:1a:a7:d6:ff:f0:6f:de:7c:16:12:6e:a8:
f0:cf:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:48:16 2026 by rpki-client