Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: nsGwf3Sf/cM/C14bdxrDJGxJ+m3/nSbvRCxGYLWriMU=
Subject key identifier: 2B:32:09:B0:36:E7:7B:7D:16:46:67:09:85:94:26:09:6F:81:BE:08
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019D9C6314D7DE80DBF503903D5C82BA7718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 12AA
Signing time: Fri 17 Apr 2026 17:00:32 +0000
Manifest this update: Fri 17 Apr 2026 17:00:32 +0000
Manifest next update: Sat 18 Apr 2026 17:00:32 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: i2A9cLFLyg433n852bAL7KBjp0P80OxsE+rgabOHLVU=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:14:d7:de:80:db:f5:03:90:3d:5c:82:ba:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Apr 17 17:00:32 2026 GMT
Not After : Apr 18 17:00:32 2026 GMT
Subject: CN=2b3209b036e77b7d16466709859426096f81be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:79:41:08:40:c7:8c:5b:89:15:cf:07:30:
2d:c7:9a:27:fa:06:b4:4a:69:a0:b2:b8:b5:8b:e6:
4d:d9:ec:d5:71:ef:3f:58:c9:86:5e:e8:3b:36:60:
f5:45:1e:55:fb:c3:a9:ea:1f:76:d8:7f:c2:ce:cd:
57:43:d2:5d:2a:b3:00:bf:aa:ad:52:36:b0:89:01:
46:7e:c9:41:c0:ea:5b:57:90:ba:3a:60:07:40:0d:
40:9d:7b:89:b9:45:aa:8b:33:ef:e3:18:41:06:8f:
19:62:66:c7:2e:a0:90:af:f7:3b:bc:0d:09:3c:61:
33:19:0f:63:2a:6c:9d:7b:e3:9b:ec:2c:8f:cc:2e:
e3:38:d8:a8:47:66:e4:ae:6f:65:eb:db:72:63:ea:
7b:60:db:a5:a9:fe:5f:1c:5b:11:b9:87:57:72:24:
39:d2:53:b8:b0:a5:8b:10:dd:1c:d7:d6:1b:5f:b5:
bc:a5:b5:fa:7d:ee:90:69:96:9b:3c:93:67:ce:d3:
a0:b1:4f:b9:62:e9:42:df:e3:b4:25:17:2e:e4:8f:
a4:fd:a5:6f:70:55:6b:8a:e9:89:b4:17:4c:35:84:
8a:69:a1:42:0c:30:e7:b7:67:61:69:40:1a:97:03:
6f:60:17:bd:04:24:2e:ad:98:a6:a4:b7:2d:c0:9c:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:09:B0:36:E7:7B:7D:16:46:67:09:85:94:26:09:6F:81:BE:08
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d0:25:26:87:98:4e:e8:44:fd:e6:9c:a6:a9:f8:5a:4b:47:
91:c7:8b:c6:12:0c:a8:a4:91:fe:87:63:8e:97:a4:4d:63:32:
d7:cc:9d:dc:3c:ab:60:9f:b3:ee:43:72:5d:ee:14:63:16:82:
a3:e6:7b:1a:ac:42:b1:19:90:e6:10:17:68:e6:01:f0:65:91:
a3:26:32:6f:2f:15:a9:1c:a9:15:c2:63:3f:f9:81:45:4a:7b:
8b:43:bc:83:58:a6:7c:f9:69:d1:e3:fe:2f:60:01:93:63:b2:
f7:2a:26:be:c1:83:55:fb:03:73:61:08:3c:31:ca:f9:84:84:
78:35:4e:f6:83:ce:31:84:c6:16:15:7a:10:82:bf:2b:c5:0b:
da:b1:f7:4b:64:d4:1f:b8:19:61:e6:87:be:2d:89:29:bc:71:
4a:c6:56:3e:a0:8a:3b:cc:7d:75:56:2c:e8:a0:ed:7a:46:62:
a4:f5:e6:b4:ce:85:b4:32:6d:d7:a2:62:f7:5c:e2:72:22:2d:
ce:9a:b9:3d:da:f8:1f:53:18:c8:53:81:63:d3:49:b8:05:c6:
0b:d4:9f:77:1a:54:40:03:ce:4f:1a:38:e3:44:d3:c7:09:5d:
63:f9:b4:21:33:31:74:88:78:00:38:5b:1a:15:5a:80:f9:e4:
d2:7e:4e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYxTX3oDb9QOQPVyCuncYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTE4NDVlNjVlNGYwMzk0ZjFlNmMzZmY5ZTc3MzJmNmFh
NDZmZGMwHhcNMjYwNDE3MTcwMDMyWhcNMjYwNDE4MTcwMDMyWjAzMTEwLwYDVQQD
EygyYjMyMDliMDM2ZTc3YjdkMTY0NjY3MDk4NTk0MjYwOTZmODFiZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxZ5QQhAx4xbiRXPBzAtx5on+ga0
Smmgsri1i+ZN2ezVce8/WMmGXug7NmD1RR5V+8Op6h922H/Czs1XQ9JdKrMAv6qt
UjawiQFGfslBwOpbV5C6OmAHQA1AnXuJuUWqizPv4xhBBo8ZYmbHLqCQr/c7vA0J
PGEzGQ9jKmyde+Ob7CyPzC7jONioR2bkrm9l69tyY+p7YNulqf5fHFsRuYdXciQ5
0lO4sKWLEN0c19YbX7W8pbX6fe6QaZabPJNnztOgsU+5YulC3+O0JRcu5I+k/aVv
cFVriumJtBdMNYSKaaFCDDDnt2dhaUAalwNvYBe9BCQurZimpLctwJw2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsyCbA253t9FkZnCYWUJglvgb4IMB8GA1UdIwQY
MBaAFN+RhF5l5PA5Tx5sP/nncy9qpG/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQt
Zjg5YWI5ZjEyODZjLzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQtZjg5YWI5ZjEyODZj
LzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdAlJoeY
TuhE/eacpqn4WktHkceLxhIMqKSR/odjjpekTWMy18yd3DyrYJ+z7kNyXe4UYxaC
o+Z7GqxCsRmQ5hAXaOYB8GWRoyYyby8VqRypFcJjP/mBRUp7i0O8g1imfPlp0eP+
L2ABk2Oy9yomvsGDVfsDc2EIPDHK+YSEeDVO9oPOMYTGFhV6EIK/K8UL2rH3S2TU
H7gZYeaHvi2JKbxxSsZWPqCKO8x9dVYs6KDtekZipPXmtM6FtDJt16Ji91ziciIt
zpq5Pdr4H1MYyFOBY9NJuAXGC9SfdxpUQAPOTxo440TTxwldY/m0ITMxdIh4ADhb
GhVagPnk0n5OEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:57 2026 by rpki-client