Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: P97Pl4J3J2HYNu9q5gCng1t1U9emLVnl3yu94tpTuYk=
Subject key identifier: ED:4E:C7:62:0E:E7:B1:90:82:33:D6:A4:F7:9C:AB:3F:F6:0F:F1:2B
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 019D985013C0B120202EF207A39C9D99166B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 11F2
Signing time: Thu 16 Apr 2026 22:01:17 +0000
Manifest this update: Thu 16 Apr 2026 22:01:17 +0000
Manifest next update: Fri 17 Apr 2026 22:01:17 +0000
Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: P6Qq9/vRanjQhZYu0fc8WnqWO1szgnTWEv4sLdSbgHI=)
2: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (hash: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A=)
3: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (hash: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY=)
4: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (hash: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:13:c0:b1:20:20:2e:f2:07:a3:9c:9d:99:16:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Apr 16 22:01:17 2026 GMT
Not After : Apr 17 22:01:17 2026 GMT
Subject: CN=ed4ec7620ee7b1908233d6a4f79cab3ff60ff12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bf:1f:69:09:92:7f:38:b1:7b:60:53:77:28:
09:b7:fa:19:50:34:b5:22:93:18:81:94:53:fd:6e:
04:ef:62:b0:be:e4:63:94:a2:9a:8b:4a:2f:10:9d:
ee:dc:06:af:33:e8:e4:13:58:b9:1b:f2:16:5a:1f:
d5:d5:2c:df:cc:f6:92:12:5f:59:8e:62:c2:78:74:
1f:de:98:83:66:1b:90:7a:e1:49:d9:25:e4:7d:8c:
3f:81:d7:f6:70:9e:20:e1:bd:0c:b6:41:44:4f:aa:
59:78:d8:80:7e:f9:56:30:90:ea:c6:c3:8e:06:71:
ef:c7:d4:71:a2:b4:bc:cb:8f:21:24:ea:ab:8f:3f:
be:06:f0:f1:0a:10:d5:fa:28:b4:e5:fc:12:3c:31:
2c:02:e8:75:7e:26:b7:d6:cf:d8:8f:2c:2f:49:55:
9f:90:07:35:ef:3e:f3:fa:38:37:92:39:e1:a5:2d:
d2:86:a6:c1:ee:6c:b2:fd:56:57:77:a7:8e:02:53:
d5:03:7a:c6:33:3b:cc:53:46:16:9e:04:dd:01:67:
53:6c:2e:c4:23:60:19:34:29:0a:82:8a:1c:e2:22:
a4:ed:b6:b8:79:4b:01:d9:32:d6:20:9c:1c:eb:0c:
5b:15:5b:91:6f:a5:78:ed:65:9d:bf:2f:3d:c5:52:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:C7:62:0E:E7:B1:90:82:33:D6:A4:F7:9C:AB:3F:F6:0F:F1:2B
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d7:b9:92:6e:82:19:a7:cb:04:20:4a:46:14:10:e5:45:24:
55:08:12:93:29:d8:d8:e8:f9:88:d9:7f:8b:9d:02:a2:4d:3b:
dd:c6:ba:49:a1:11:58:04:80:36:52:9e:3b:80:77:91:2e:38:
1c:df:5f:e5:2c:c0:38:8a:15:23:01:27:ff:dd:41:f1:7b:f8:
af:81:6e:b8:fd:2c:54:42:8e:c9:3f:76:3f:43:5d:cf:f6:95:
e8:f4:19:c5:30:ec:f6:f1:d0:64:ec:40:e0:f2:10:06:61:5b:
b0:ad:af:f0:c5:f4:0d:aa:c4:c5:fc:3c:8d:57:2e:21:be:45:
35:45:23:5d:a3:95:c8:30:12:14:5d:1b:af:0e:2b:1c:6d:14:
23:42:c3:fc:d8:f3:58:3b:ee:4d:bc:cf:eb:54:d5:ad:8c:1f:
70:77:2b:4e:37:cf:ca:05:a2:00:79:e8:7c:12:af:8b:20:d5:
4d:5f:93:2a:6e:f4:bd:82:e1:59:ff:29:60:56:50:e3:6e:f3:
24:c8:6c:1f:23:0d:56:f0:3e:56:a4:22:a8:08:78:42:a6:76:
66:ca:66:14:46:8e:6f:b7:80:33:3f:71:51:78:37:18:ce:1f:
09:01:5c:28:95:b7:bd:a4:c3:47:a5:2f:d8:4a:77:0a:3f:fd:
2c:18:41:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:32 2026 by rpki-client