Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: lLffRBz9YCSF5Nqs3uryRJfVenrSO1mWk3lDVB6A8zs=
Subject key identifier: 44:B2:CA:C0:29:DF:05:49:C5:AF:DF:59:6A:6B:3A:A2:D2:26:F1:F6
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019EC3DC237A7232AB04E6CC3DB65236C6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 1343
Signing time: Sun 14 Jun 2026 02:00:44 +0000
Manifest this update: Sun 14 Jun 2026 02:00:44 +0000
Manifest next update: Mon 15 Jun 2026 02:00:44 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: rkUwQmzZR0PoS0DcShsDbsfrWgZHH+Ue3kYVqVthp+8=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:23:7a:72:32:ab:04:e6:cc:3d:b6:52:36:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jun 14 02:00:44 2026 GMT
Not After : Jun 15 02:00:44 2026 GMT
Subject: CN=44b2cac029df0549c5afdf596a6b3aa2d226f1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:0d:e1:61:2c:b0:3c:e4:b7:e7:f7:b7:b1:
69:ac:f2:82:05:b2:e1:ed:6e:2e:0a:af:8a:92:e0:
ad:ba:6a:71:92:a3:9e:a3:8a:da:5d:2f:fc:7e:b1:
64:fa:6b:08:e0:52:f1:c5:67:c8:c1:0a:2f:c3:c5:
23:ea:66:f5:69:db:f1:7d:91:bb:08:e3:e4:79:1b:
67:17:f9:04:b8:79:10:f3:c5:42:5a:2a:0f:67:fc:
db:11:a6:44:59:a2:60:8d:6a:a9:50:39:a7:c6:1f:
87:c0:c2:a8:9d:26:df:91:b9:ee:be:1b:fd:ee:db:
73:bb:9c:68:2b:a3:8b:f7:5d:2d:28:e7:2c:a6:dd:
de:97:99:5f:6f:50:0b:18:44:bf:a2:75:c8:0c:20:
67:12:2a:62:bc:07:f4:5c:9f:2d:ac:8f:69:85:e8:
56:d6:4d:0a:44:f0:ca:e6:32:71:f7:2f:76:21:4c:
0d:a9:bc:7a:52:87:b7:db:3f:39:ba:b3:43:3d:8c:
f4:17:d9:38:ff:6f:7b:cd:99:35:f0:9c:ac:de:8d:
35:6a:00:b2:e4:4c:3a:93:2f:eb:1e:dc:9f:8d:59:
16:e5:4f:2c:06:aa:fe:fa:c5:5c:7c:53:2f:d4:8d:
9e:50:9f:67:cd:dd:6f:02:a4:0e:e1:b6:5f:c0:2c:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B2:CA:C0:29:DF:05:49:C5:AF:DF:59:6A:6B:3A:A2:D2:26:F1:F6
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7a:68:dd:55:a3:0b:c0:e0:9a:86:b4:25:01:dc:f9:64:a5:
01:35:11:0a:49:4a:2b:73:c9:96:46:9c:69:b3:04:07:70:3e:
89:82:8e:a0:ba:6f:62:bf:c9:33:21:69:e9:d7:23:31:18:91:
fb:61:48:d8:f1:10:d8:af:1e:eb:71:41:71:b4:96:5e:73:a1:
6f:53:f4:e2:3d:a3:48:f2:96:d0:af:6e:fc:ac:91:46:77:9c:
7d:5b:3d:ca:60:39:c2:f0:fa:5c:53:fe:49:9e:38:a5:0c:7f:
67:7c:ae:e1:7e:95:3d:2b:25:99:7f:42:98:f3:da:10:13:1a:
20:12:e0:2c:db:92:0f:8a:d8:b5:10:0b:64:06:29:f7:8c:af:
b9:43:ad:36:28:5f:cc:7f:b3:e7:43:b6:f3:7c:5d:9b:73:b7:
85:fb:8e:5b:39:8b:89:ad:56:da:19:cb:b6:51:30:00:95:9b:
b6:d9:0c:5a:ea:73:37:4b:e5:af:f2:be:97:e8:ed:52:a1:ab:
ba:5c:9d:87:65:c6:22:7b:68:2e:ab:af:8f:74:61:6e:5a:f6:
0a:fd:db:c3:7e:dc:c2:6c:ca:f5:72:f2:4f:0d:50:74:38:0c:
d0:8e:e5:31:68:44:b8:fb:b8:ed:2b:0f:12:cc:70:ed:9f:96:
4c:25:2d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3CN6cjKrBObMPbZSNsamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTE4NDVlNjVlNGYwMzk0ZjFlNmMzZmY5ZTc3MzJmNmFh
NDZmZGMwHhcNMjYwNjE0MDIwMDQ0WhcNMjYwNjE1MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg0NGIyY2FjMDI5ZGYwNTQ5YzVhZmRmNTk2YTZiM2FhMmQyMjZmMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa4N4WEssDzkt+f3t7FprPKCBbLh
7W4uCq+KkuCtumpxkqOeo4raXS/8frFk+msI4FLxxWfIwQovw8Uj6mb1advxfZG7
COPkeRtnF/kEuHkQ88VCWioPZ/zbEaZEWaJgjWqpUDmnxh+HwMKonSbfkbnuvhv9
7ttzu5xoK6OL910tKOcspt3el5lfb1ALGES/onXIDCBnEipivAf0XJ8trI9phehW
1k0KRPDK5jJx9y92IUwNqbx6Uoe32z85urNDPYz0F9k4/297zZk18Jys3o01agCy
5Ew6ky/rHtyfjVkW5U8sBqr++sVcfFMv1I2eUJ9nzd1vAqQO4bZfwCyRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESyysAp3wVJxa/fWWprOqLSJvH2MB8GA1UdIwQY
MBaAFN+RhF5l5PA5Tx5sP/nncy9qpG/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQt
Zjg5YWI5ZjEyODZjLzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQtZjg5YWI5ZjEyODZj
LzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnpo3VWj
C8Dgmoa0JQHc+WSlATURCklKK3PJlkacabMEB3A+iYKOoLpvYr/JMyFp6dcjMRiR
+2FI2PEQ2K8e63FBcbSWXnOhb1P04j2jSPKW0K9u/KyRRnecfVs9ymA5wvD6XFP+
SZ44pQx/Z3yu4X6VPSslmX9CmPPaEBMaIBLgLNuSD4rYtRALZAYp94yvuUOtNihf
zH+z50O283xdm3O3hfuOWzmLia1W2hnLtlEwAJWbttkMWupzN0vlr/K+l+jtUqGr
ulydh2XGIntoLquvj3Rhblr2Cv3bw37cwmzK9XLyTw1QdDgM0I7lMWhEuPu47SsP
Esxw7Z+WTCUtyg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:52 2026 by rpki-client