Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: bo+EKL26FF8iY1OHo7iNzgtTdmZsuaf5aB/wuTSjgPk=
Subject key identifier: 7C:12:42:AB:D8:5B:9B:32:E8:67:9C:83:14:22:AD:58:39:62:91:29
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019D99D00A11F64D64BCB52886A63DA80DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0FCB
Signing time: Fri 17 Apr 2026 05:00:41 +0000
Manifest this update: Fri 17 Apr 2026 05:00:41 +0000
Manifest next update: Sat 18 Apr 2026 05:00:41 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: aTHKKbp9fx3MIl1ZTXTj9X/CITK3zeOh7tGk2Pa6wNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0a:11:f6:4d:64:bc:b5:28:86:a6:3d:a8:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Apr 17 05:00:41 2026 GMT
Not After : Apr 18 05:00:41 2026 GMT
Subject: CN=7c1242abd85b9b32e8679c831422ad5839629129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:f8:9f:09:87:55:a9:e7:bf:a1:52:2c:46:
c9:f9:8a:99:78:19:ce:52:ce:17:41:c2:37:bc:6e:
e0:ec:fe:2d:8a:e1:67:93:f0:60:7f:09:b7:14:e5:
e4:4e:50:a9:5c:9c:26:df:27:17:98:ff:ac:a5:54:
f5:a2:fa:6b:fb:7c:e7:bb:2a:d4:21:7a:cc:ff:08:
b6:cb:88:77:72:e5:54:97:3a:11:93:90:12:68:d4:
12:4e:0a:6a:2f:81:b5:0e:00:fb:2b:65:13:10:d2:
42:5d:4b:9f:41:7d:0e:54:18:6a:ea:db:e1:af:27:
3d:08:cd:a8:cb:2a:cd:d1:b6:94:5e:6b:76:e9:70:
71:38:69:7c:d5:dd:d8:08:79:5f:c7:53:4c:6f:85:
d1:f4:3b:2f:62:59:5c:82:bf:49:2f:f4:3c:c4:18:
cb:ab:43:8a:26:2a:21:0f:ae:60:41:ab:d5:c2:a8:
c9:58:24:d4:a4:2d:a6:44:35:73:ae:6f:68:89:30:
d5:ff:db:02:2e:ab:01:ec:c0:77:11:0a:1c:99:3f:
57:ca:50:6b:03:09:04:c4:1e:7a:8c:4f:f4:4f:a1:
0b:74:4d:9a:c9:f6:dc:f8:89:8f:9c:c7:d0:5d:a6:
f9:b3:fd:cc:9c:1a:59:3d:dc:3f:63:63:fd:d8:b1:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:42:AB:D8:5B:9B:32:E8:67:9C:83:14:22:AD:58:39:62:91:29
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:fc:0d:b2:ba:aa:4b:74:7e:dd:44:aa:ec:3d:c4:fd:72:
a9:2f:dd:61:2b:ae:22:31:f3:1c:1b:b9:2d:67:f9:2b:9f:05:
32:e2:3b:79:e4:c3:97:7d:06:2a:2c:3f:56:f1:a1:e7:b7:46:
32:42:f8:a3:99:e4:6a:67:04:d9:24:c6:84:c8:6e:e2:d4:31:
2c:fe:b0:93:37:35:30:b7:ca:c4:53:3a:f2:2b:72:9f:71:24:
7e:93:13:d8:41:6f:4c:2b:69:94:7a:af:23:72:dd:5a:1f:5c:
9a:b8:2d:8a:34:e9:2d:f0:0d:7a:b6:b1:3f:43:5f:52:75:da:
90:34:b4:bb:65:b5:f1:5d:e9:f5:a2:69:08:ba:45:68:94:60:
23:aa:4d:ab:de:26:0d:f7:f0:b1:5b:f1:09:30:de:43:a1:62:
ae:11:95:5b:db:5d:49:37:e6:b0:14:99:57:ed:18:9c:18:d2:
0f:79:f9:76:d8:42:21:39:be:b0:94:5b:80:01:66:ff:bd:14:
d0:10:ab:e3:e1:c3:8b:4a:7d:c6:7d:40:a0:ba:cf:12:b8:d2:
3d:f8:06:45:dd:26:e6:61:7f:7e:7b:5a:22:e3:74:fe:76:08:
ab:80:e1:a7:fd:18:26:ff:db:a4:4d:4e:5d:95:18:01:99:90:
86:fb:db:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0AoR9k1kvLUohqY9qA3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTk5ZWZmZDQ5MGEzYjhkMGNkMzFhZTk5OWYwZTZkM2U5
OGU2ODIwHhcNMjYwNDE3MDUwMDQxWhcNMjYwNDE4MDUwMDQxWjAzMTEwLwYDVQQD
Eyg3YzEyNDJhYmQ4NWI5YjMyZTg2NzljODMxNDIyYWQ1ODM5NjI5MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHX4nwmHVannv6FSLEbJ+YqZeBnO
Us4XQcI3vG7g7P4tiuFnk/Bgfwm3FOXkTlCpXJwm3ycXmP+spVT1ovpr+3znuyrU
IXrM/wi2y4h3cuVUlzoRk5ASaNQSTgpqL4G1DgD7K2UTENJCXUufQX0OVBhq6tvh
ryc9CM2oyyrN0baUXmt26XBxOGl81d3YCHlfx1NMb4XR9DsvYllcgr9JL/Q8xBjL
q0OKJiohD65gQavVwqjJWCTUpC2mRDVzrm9oiTDV/9sCLqsB7MB3EQocmT9XylBr
AwkExB56jE/0T6ELdE2ayfbc+ImPnMfQXab5s/3MnBpZPdw/Y2P92LFaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwSQqvYW5sy6GecgxQirVg5YpEpMB8GA1UdIwQY
MBaAFN+Znv/UkKO40M0xrpmfDm0+mOaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQt
NTAxNTM4YzBkZDAxLzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQtNTAxNTM4YzBkZDAx
LzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjf8DbK6
qkt0ft1Equw9xP1yqS/dYSuuIjHzHBu5LWf5K58FMuI7eeTDl30GKiw/VvGh57dG
MkL4o5nkamcE2STGhMhu4tQxLP6wkzc1MLfKxFM68ityn3EkfpMT2EFvTCtplHqv
I3LdWh9cmrgtijTpLfANeraxP0NfUnXakDS0u2W18V3p9aJpCLpFaJRgI6pNq94m
DffwsVvxCTDeQ6FirhGVW9tdSTfmsBSZV+0YnBjSD3n5dthCITm+sJRbgAFm/70U
0BCr4+HDi0p9xn1AoLrPErjSPfgGRd0m5mF/fntaIuN0/nYIq4Dhp/0YJv/bpE1O
XZUYAZmQhvvb0A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:18 2026 by rpki-client