Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: xLW2yhyuwoOPvsp8VoN3QD9Zc3D5SAbYoo81EZePnIw=
Subject key identifier: 21:16:DD:46:A4:85:A0:A0:2F:2E:76:7D:3D:75:B4:C4:8B:31:78:2F
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019EBF5B1FF9D76D1DC53DA6AD7B1F282099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 1063
Signing time: Sat 13 Jun 2026 05:01:20 +0000
Manifest this update: Sat 13 Jun 2026 05:01:20 +0000
Manifest next update: Sun 14 Jun 2026 05:01:20 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: htlyx5IcurfgSagOor6bSp4ApJSTTp3JSaQTcrDdCq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:1f:f9:d7:6d:1d:c5:3d:a6:ad:7b:1f:28:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jun 13 05:01:20 2026 GMT
Not After : Jun 14 05:01:20 2026 GMT
Subject: CN=2116dd46a485a0a02f2e767d3d75b4c48b31782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:15:67:26:07:71:59:2f:8e:54:49:68:4f:
68:74:9c:ed:56:87:6c:12:92:1b:33:32:dc:ff:d8:
e3:9c:cb:75:64:55:c6:5b:11:7f:e4:e6:24:15:13:
07:04:3b:e3:7d:a9:fb:f0:bd:1c:8f:76:ca:ce:92:
93:10:4b:ce:77:5b:e6:b9:1f:c8:90:08:5e:6d:57:
b6:16:41:30:97:9c:95:11:b4:a3:5e:39:74:95:f4:
a5:ec:67:71:39:38:5a:75:d6:91:ac:53:f2:84:00:
71:03:9b:f0:71:28:31:89:59:6f:33:c3:b3:0f:07:
96:98:c8:65:1f:64:e7:b3:1e:6e:3e:e9:49:f1:4a:
4f:22:7c:b4:62:aa:f1:29:19:f7:b0:90:6a:b1:15:
f8:fc:ef:b3:4e:64:6f:c1:3a:87:fc:e8:0f:25:9c:
56:b2:a6:35:34:69:f8:44:b0:f8:ae:4f:a4:89:bf:
a9:25:a0:ce:77:2e:40:18:2b:0f:04:f9:14:05:47:
26:30:ab:78:70:14:41:fe:d3:81:3b:e2:b6:10:1a:
8d:04:22:5b:33:0d:d7:21:5b:14:c7:18:86:80:95:
e8:14:be:b2:77:1a:4b:6c:27:6b:3b:d7:4d:e4:d4:
0e:26:1c:30:93:f2:88:26:e0:f8:94:89:43:40:40:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:16:DD:46:A4:85:A0:A0:2F:2E:76:7D:3D:75:B4:C4:8B:31:78:2F
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:6b:2f:62:a5:bb:ca:cc:43:dc:e3:39:57:23:65:d3:84:
52:56:25:17:91:dc:55:f7:67:d6:3a:3b:a8:a1:0f:ff:97:94:
35:4f:a5:d2:aa:a8:46:9f:c4:97:0f:53:10:ca:34:79:3e:85:
62:4c:54:66:2b:ce:84:f1:98:7e:ae:3a:d9:02:fd:93:84:6f:
c3:3d:63:a4:2b:d3:49:e4:ff:35:d6:da:8d:a2:31:f3:dd:46:
78:0e:fc:4d:b6:b7:26:b3:14:94:2e:96:27:08:3b:0f:55:5f:
b2:b9:a9:e0:09:f5:0f:f1:5a:8c:b1:97:4e:bb:a3:8c:4b:bf:
cc:17:37:b3:b1:7d:f5:fc:20:2d:aa:c1:5d:16:4e:d1:3f:92:
ad:22:af:9e:dc:a4:13:be:5c:67:97:89:72:b0:90:a9:e1:e7:
b2:2a:8e:94:fc:38:b6:ac:b6:33:71:a7:82:04:16:7c:51:72:
3e:36:f3:ab:0f:60:d0:57:f7:c7:36:b8:49:e5:2b:9c:f4:8f:
0a:23:1f:9c:51:48:0b:60:70:69:c8:8f:57:0b:b3:a1:ac:62:
ce:9c:ec:1f:48:97:1a:7f:76:8e:9f:04:40:fb:51:0c:23:d5:
b8:ff:fd:8f:dd:30:df:cb:3c:a3:55:55:95:b9:db:13:40:ca:
a3:70:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:09 2026 by rpki-client