Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: M6KDtiQ4fwaoz5Crl6z5O1hMRUaPjMmjlP065tR0Gxo=
Subject key identifier: F6:03:08:AD:1C:D2:A2:C9:D4:16:59:51:F6:44:32:D5:AA:6C:D6:96
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019CAC4692916EFA9D92DD976CF29FF45723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0F50
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: zbRDDzw50bHfaSEjTkZb4v6l9ViqRx8j7V85ujj6x5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:92:91:6e:fa:9d:92:dd:97:6c:f2:9f:f4:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=f60308ad1cd2a2c9d4165951f64432d5aa6cd696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:7c:78:c3:f0:8a:b0:ed:4c:1a:c5:68:cf:
08:7d:a7:5d:6a:65:ef:8d:7f:80:92:45:2c:4d:82:
74:ba:01:4c:85:71:4b:44:6f:00:89:46:d9:81:6e:
bb:b0:e6:af:b3:4a:d7:ba:65:de:e0:63:1f:45:2c:
1d:d5:bb:ae:01:37:a9:a0:0c:20:4f:74:c4:d9:d6:
e1:c1:cc:5c:dc:5c:c4:c1:b7:ec:e1:c7:68:0a:72:
63:33:25:a4:f7:5f:47:6c:d0:86:dd:59:24:84:1c:
6b:c8:3c:72:f1:af:87:f6:22:e1:36:ae:0f:70:74:
2a:47:7e:51:1e:11:09:08:85:28:79:9a:4b:bc:5f:
5a:cc:b0:3e:65:fa:a4:3c:b4:6f:7a:58:c4:91:c1:
f2:ef:3e:cd:0d:6d:2a:00:a6:1b:7b:04:24:d3:94:
92:92:26:9d:8d:8e:e2:15:dd:93:47:c0:db:a7:e3:
34:18:87:88:da:87:b4:a1:34:b4:93:28:c6:4b:d3:
52:1e:9b:61:1f:ad:b6:84:22:71:9c:05:e2:f5:55:
2b:44:22:de:64:ce:14:10:e1:d0:7c:b2:4f:27:cb:
f7:3f:db:18:64:c1:c6:6f:09:5f:01:ab:e1:74:94:
75:34:eb:ba:de:f3:03:99:a7:e2:a9:01:10:26:6a:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:08:AD:1C:D2:A2:C9:D4:16:59:51:F6:44:32:D5:AA:6C:D6:96
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:07:6b:0a:f3:2d:77:7f:6d:77:fb:49:48:ec:89:04:22:
4d:30:b1:c4:81:b3:49:2c:61:c6:4f:f6:7f:f0:e7:e5:06:25:
90:f0:1a:5b:55:09:58:b8:a4:7d:ce:1e:a6:46:09:88:8a:84:
3f:41:36:23:dd:f9:6b:69:37:ec:a1:00:3e:e6:54:4c:97:5b:
b8:09:f2:fe:40:ea:cd:fb:a8:b0:7b:3e:35:f6:e8:bc:2b:9c:
54:15:80:8e:51:17:4a:83:73:47:39:52:b7:80:0e:0d:b4:95:
ce:61:2a:59:2c:88:71:b4:92:ec:98:9a:c1:e5:60:f5:c4:22:
75:95:76:6f:37:70:bc:61:69:f0:83:54:86:a7:06:80:c2:08:
f6:f4:bd:6f:24:99:cb:33:7a:d0:be:9e:f6:85:e1:60:86:01:
52:ae:a1:eb:cc:b6:46:7c:24:68:50:e9:fe:92:8e:3f:4d:e8:
34:bc:c4:dc:71:8e:ac:48:e8:14:6f:f7:63:66:11:5c:7f:04:
03:b1:f0:88:34:46:17:8b:f6:a1:b7:2a:fd:56:9b:11:bd:83:
63:b9:83:41:30:14:a2:0c:e5:4a:2f:13:12:d8:b6:ad:94:fc:
23:48:29:a1:7a:c9:c3:ce:d3:6a:3d:d6:f2:2a:b4:46:1f:64:
52:30:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:38 2026 by rpki-client