Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: PGJxKAtne78bMvNGFjGiB+JzinU9Dyvj2a+tk+MbmwQ=
Subject key identifier: F8:F0:2A:18:3C:93:F0:BA:F3:5E:5E:21:15:E9:E1:BB:A9:1E:B5:C2
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019CAEDA1998E092D92AF01325529AB790A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 122F
Signing time: Mon 02 Mar 2026 14:00:54 +0000
Manifest this update: Mon 02 Mar 2026 14:00:54 +0000
Manifest next update: Tue 03 Mar 2026 14:00:54 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: KMo1ovldM1XOVYxMR9qir+SKhUZlHCTzsPv+KkDvQ+g=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:19:98:e0:92:d9:2a:f0:13:25:52:9a:b7:90:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Mar 2 14:00:54 2026 GMT
Not After : Mar 3 14:00:54 2026 GMT
Subject: CN=f8f02a183c93f0baf35e5e2115e9e1bba91eb5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:6b:91:ef:1a:3e:5c:a4:56:72:9d:09:35:
ca:9d:dc:f1:5c:b6:dc:a2:be:37:cb:83:c1:01:3a:
39:ff:19:37:48:61:18:38:eb:88:99:a7:64:de:5a:
5e:11:d8:bf:74:5a:ac:1e:10:00:ff:b4:c1:1a:d7:
fb:5c:d6:be:44:59:7c:98:c8:8e:96:5b:bc:fb:bd:
73:97:c5:e4:93:1c:38:72:29:2c:8e:7b:e3:ab:8a:
9c:85:6e:7f:84:38:cd:24:cf:62:30:5e:b2:d1:4d:
43:9c:90:b6:0c:d6:04:d3:36:45:0e:b4:ac:72:0c:
e2:62:78:9a:2b:9a:dc:8e:21:2d:f7:ec:04:d9:b6:
7f:87:30:0b:0c:e1:e9:e5:bf:2d:4e:7a:75:ac:84:
09:8c:05:cc:58:9d:ba:f4:4b:82:b1:4c:c2:b2:2e:
bc:70:76:10:fb:83:ee:51:7f:ed:4e:24:66:b0:47:
ed:04:a9:54:c5:ef:93:2c:66:5f:a2:4e:94:e8:b4:
3e:5e:a6:47:d5:d3:99:1e:7b:af:0d:cd:91:dc:be:
84:f7:10:c2:75:f7:10:2c:69:76:f6:79:2f:6d:ce:
eb:be:6b:8e:cc:84:23:9b:be:bb:97:d5:3f:f6:28:
0a:9c:93:7e:0a:44:2e:cc:28:1a:b6:5f:e7:b3:40:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:2A:18:3C:93:F0:BA:F3:5E:5E:21:15:E9:E1:BB:A9:1E:B5:C2
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:92:c9:cc:51:aa:5a:64:2b:93:66:c9:94:87:67:3a:e0:d8:
95:86:9a:49:db:1f:f3:a7:be:d5:ea:29:32:44:7b:6f:17:00:
fe:7c:9d:fd:e3:41:31:b0:8c:f8:a7:b8:49:61:d6:a4:7e:46:
2f:44:af:cd:8d:57:d9:4f:a1:af:95:e3:c4:05:89:76:d6:99:
a4:75:bb:c2:fc:df:c2:83:a9:a9:b1:c0:21:f9:8c:2a:1d:b9:
6f:fd:40:39:a7:e7:f7:7c:c2:23:25:0b:82:69:69:a8:aa:77:
5d:90:72:17:ea:ae:20:c4:38:d8:df:4b:bf:e5:3a:f3:42:3b:
51:1a:99:a9:1a:75:e9:9c:42:20:eb:eb:12:e4:8c:9b:17:13:
99:e6:e6:82:7b:00:21:25:47:56:3f:c6:85:f4:b8:b2:f2:7a:
a1:de:4a:9c:aa:98:01:5c:7d:d2:a5:34:39:17:fc:de:65:29:
a2:38:f5:19:73:33:84:2d:3c:1e:ad:7a:f3:19:a0:80:5c:96:
97:3b:41:a7:82:81:f8:25:19:78:b7:7d:b8:1a:4f:75:85:5b:
c8:8a:a5:01:82:95:b8:a9:31:93:17:8c:d2:73:e9:ff:6a:2f:
3c:12:bc:64:bf:26:a3:f4:47:6d:cf:5c:82:2d:ab:43:05:b5:
b2:4e:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:09 2026 by rpki-client