Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: pDONMXNUzLhwdeLnCfKzdqrOOf/RHWziUH7WX6lbLRY=
Subject key identifier: F0:25:37:95:07:0C:AB:9F:8E:0D:27:00:7F:1D:AA:AD:B8:E0:70:6E
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 01A0C93465C1A9DE6C1E3AC332E817D6388F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 1399
Signing time: Tue 22 Sep 2026 13:00:49 +0000
Manifest this update: Tue 22 Sep 2026 13:00:49 +0000
Manifest next update: Wed 23 Sep 2026 13:00:49 +0000
Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: HFUo4XMYJiROdv14wKZj42DGc2C3ME2GxPApnXMhtJc=)
2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:65:c1:a9:de:6c:1e:3a:c3:32:e8:17:d6:38:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Sep 22 13:00:49 2026 GMT
Not After : Sep 23 13:00:49 2026 GMT
Subject: CN=f0253795070cab9f8e0d27007f1daaadb8e0706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:cc:93:d9:bf:b2:31:b6:ed:ba:62:ab:41:
b9:d5:50:89:53:7c:ef:43:df:36:3d:0a:4d:8d:b2:
a9:06:ea:29:66:f2:83:e4:9b:a4:17:2b:53:db:2f:
92:08:68:1c:d1:84:81:7e:8f:01:91:a0:12:b1:c1:
c4:ca:9b:c0:a6:d3:45:bd:81:8d:1a:46:b5:82:8c:
8f:bd:63:70:5d:72:33:11:87:71:4a:a0:92:74:27:
f2:da:07:83:a1:8c:06:71:56:20:31:be:cf:56:6c:
bd:55:c7:4b:41:d7:61:b4:09:5c:d3:0f:2b:6c:7d:
92:ae:77:42:6b:d3:db:e1:c3:5a:41:eb:e1:21:4c:
2a:19:57:22:28:ff:cc:6f:7a:b1:b6:4e:bc:35:35:
26:3d:8c:29:f4:d5:67:72:56:94:00:f9:ac:8f:b2:
3c:86:b5:69:8f:47:12:2d:3b:fd:bf:e8:67:84:59:
c8:b2:cb:e6:b8:70:57:61:22:8f:36:71:20:e4:9e:
c5:ab:d5:7f:78:cc:e5:2b:43:b1:35:f2:a9:6b:30:
05:e6:0d:aa:f4:7c:7b:23:cb:6f:41:ae:c4:86:7e:
86:5d:f7:7a:65:f1:16:0c:22:3e:70:49:2b:bf:24:
80:3f:0c:11:cb:68:89:c7:5f:22:91:4f:62:80:bd:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:37:95:07:0C:AB:9F:8E:0D:27:00:7F:1D:AA:AD:B8:E0:70:6E
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:15:0a:8d:8a:88:94:ef:f3:c2:7f:c7:fb:a8:0b:66:14:47:
9b:d3:af:d7:8d:6d:f0:ab:72:8a:e9:75:58:fc:81:b2:e5:d4:
42:61:0f:fc:12:b7:0c:d2:f4:0b:85:0f:07:42:dd:aa:be:27:
20:33:49:85:40:27:d3:3e:d6:44:bb:df:16:30:02:3d:bf:88:
5e:6c:ae:49:2c:47:83:5f:4b:2f:a6:2d:ca:e2:d7:30:50:dd:
7f:be:99:9a:f1:62:81:70:b7:e7:73:6f:9b:c0:94:af:1f:a7:
a4:f7:31:68:f8:08:c6:43:b8:9b:c6:80:39:cd:0e:fe:1e:6f:
c8:0d:9f:d2:81:17:97:18:6e:c2:60:86:b3:74:8a:ba:a9:c4:
30:da:8c:9f:2b:44:28:e2:6e:7c:1f:a9:24:0b:38:a9:d5:d4:
27:17:e0:db:b3:e1:8e:80:5f:15:a6:54:30:ef:f8:2b:36:e8:
b6:17:6e:99:b9:2a:8a:9c:aa:c8:81:18:e7:93:da:3a:63:59:
f0:7f:93:2f:9e:78:04:c2:5c:c2:6f:b7:bd:28:99:f2:63:ef:
a0:8d:69:a2:71:94:94:bd:15:ce:c6:43:4a:6e:9d:b8:7a:2b:
2d:ba:e3:bc:36:90:47:f9:65:39:9d:31:cf:4d:3c:c4:ec:25:
45:eb:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:29:42 2026 by rpki-client