Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: UNnlxrrxeVLX3u6Fv/XJI4Z3w6pnEgTaRTHW6mDuMtI=
Subject key identifier: 96:92:FD:9F:53:E2:80:FA:B4:F8:F3:FB:D1:6A:02:A4:20:54:F1:61
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 019EBFC880F59D5F90D9B13F8F7C484BB3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 128B
Signing time: Sat 13 Jun 2026 07:00:48 +0000
Manifest this update: Sat 13 Jun 2026 07:00:48 +0000
Manifest next update: Sun 14 Jun 2026 07:00:48 +0000
Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: UYJ9muQaDGQUgjZcc8qxDaKN5rr+bS2lZ8sTNjjuJCA=)
2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:80:f5:9d:5f:90:d9:b1:3f:8f:7c:48:4b:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Jun 13 07:00:48 2026 GMT
Not After : Jun 14 07:00:48 2026 GMT
Subject: CN=9692fd9f53e280fab4f8f3fbd16a02a42054f161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:0b:37:f5:48:6b:fc:89:60:73:7e:6b:d5:
8b:69:13:22:a8:c4:ef:c3:58:f4:6b:8d:87:b4:9e:
7a:ac:c1:d2:f2:12:b3:33:83:48:bf:01:ff:a5:36:
3a:28:f0:7e:59:33:d2:ce:a5:21:95:b4:2b:ae:7d:
4d:d4:c1:58:a9:64:13:ee:c0:2e:25:0f:f0:6f:3b:
f3:6b:64:fd:01:95:6b:43:bf:5e:dd:fa:17:39:29:
66:e4:83:41:fe:ff:e7:e5:d1:3c:7f:e6:77:c2:a1:
5a:d9:92:6d:23:34:de:42:d1:fe:b7:e5:07:2e:93:
56:dd:96:74:9c:9a:14:4b:cd:8a:76:10:2c:86:36:
e1:fd:33:91:f6:7b:de:3f:0c:94:24:a1:06:7b:fa:
df:8b:71:0c:b7:73:3a:b2:65:0d:1d:b9:19:d0:49:
fd:3c:28:65:54:94:d9:4c:78:7d:64:21:df:17:00:
b7:27:fa:78:f7:bb:bc:1f:91:c9:fa:55:14:c1:f4:
7e:b2:c0:d9:c2:3a:f7:27:7c:a2:96:92:21:bd:ca:
1c:b1:4f:57:49:4f:af:f4:70:51:75:58:37:bf:d9:
2e:5c:1d:07:3d:7a:39:e0:ed:d2:a0:cc:15:4d:aa:
50:d3:5c:97:ab:55:6a:24:bf:76:19:f2:7b:78:c1:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:92:FD:9F:53:E2:80:FA:B4:F8:F3:FB:D1:6A:02:A4:20:54:F1:61
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e4:52:ca:bf:23:c0:81:ea:6a:e0:28:7e:c0:74:18:80:56:
9c:2a:71:d4:de:db:2e:86:67:4c:e3:81:52:72:23:73:1d:35:
8d:bc:dd:b4:61:5e:28:43:24:48:22:6d:d2:cb:5d:38:b7:22:
10:77:9d:11:bf:01:ae:bb:d1:36:16:a2:1f:df:00:ca:28:49:
c0:08:b8:a1:4c:66:26:3f:93:23:70:0f:f7:9f:b0:4a:4f:19:
98:fa:6b:c2:21:6e:4d:a7:00:ae:97:34:ef:7b:c8:94:ea:06:
cf:df:c0:eb:e2:78:e9:ab:e0:23:ee:18:eb:7a:63:78:7e:23:
08:be:dc:be:1a:1c:6c:10:9c:dd:d1:4e:f5:4c:39:e2:20:c3:
53:00:07:59:3e:33:e4:76:6c:0e:d7:3a:9b:51:4c:00:c0:62:
56:c6:28:fb:d5:16:8f:1c:78:ba:55:85:7a:99:31:f1:af:b4:
8a:a0:08:c4:4c:5a:87:55:0a:cf:8d:4e:58:b1:4a:90:4c:fd:
b5:e4:ff:9d:a4:d7:60:7e:01:e2:d7:84:b5:d8:76:fb:78:6a:
64:9d:e4:9f:da:38:38:61:ae:44:dc:86:57:65:17:7a:20:78:
89:c2:09:40:01:ad:bc:3b:ef:e6:35:94:c4:c2:89:61:94:12:
96:6c:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:59 2026 by rpki-client