Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: t7yMRZDQuzSql0mHoGWvs+hClg7tEcW07YAU2ZTTApA=
Subject key identifier: D0:C2:6E:15:F9:B6:B3:09:75:40:29:9B:03:71:21:A9:B7:40:61:DE
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019D390A1F437E9E7AC0E1A6144ACDC52B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 1336
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: ZPJxCr5iD0qhPoveIfoG8b8weabEeBVjlKHV1lfX00s=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1f:43:7e:9e:7a:c0:e1:a6:14:4a:cd:c5:2b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=d0c26e15f9b6b3097540299b037121a9b74061de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:fb:85:4d:bd:e7:73:8c:18:21:81:70:99:
8f:36:1f:9f:d8:c4:6e:4e:95:a5:e5:24:f1:2c:a3:
8c:20:d7:f1:7d:3b:73:8e:df:ae:1f:19:2a:d2:87:
78:a2:71:6f:b3:52:dd:b6:c0:9f:f2:91:e7:c7:1a:
69:27:a2:c2:bb:d5:8d:bc:fa:d6:b1:c7:66:e4:b1:
d2:fe:5e:ce:2e:e3:91:dc:91:2c:39:40:4a:79:52:
db:f3:da:df:cc:c0:72:ae:8b:1e:80:87:c5:0d:ce:
6e:aa:be:d0:b9:87:72:b6:f5:4d:15:0f:67:7b:5a:
5a:11:b4:af:0e:68:9f:46:89:c3:1a:eb:12:e9:06:
ee:c0:90:3d:f3:6a:99:fe:af:f6:21:ae:39:67:47:
5a:eb:5f:bb:c4:35:66:1c:90:c6:04:24:db:84:12:
0b:cb:0d:40:7d:8a:66:9b:25:c7:07:79:ce:fa:40:
6d:71:1c:69:35:c8:6a:32:ad:04:9c:de:82:73:f4:
0e:1c:93:00:22:e3:b9:86:00:eb:11:f5:29:c4:83:
c6:aa:2b:6e:03:a9:89:d3:6a:ba:94:d2:98:8a:79:
cf:a0:ed:b1:60:59:4f:a5:8e:c4:af:f4:8a:94:04:
1d:68:79:aa:23:9f:6d:16:33:b2:89:09:8b:38:c0:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:6E:15:F9:B6:B3:09:75:40:29:9B:03:71:21:A9:B7:40:61:DE
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:f3:54:36:0f:8b:79:b6:0f:fe:80:17:52:81:b2:4b:d8:
2b:bd:bb:db:7f:4f:0b:6c:97:4c:af:78:3d:05:87:65:78:a3:
50:1a:d7:1a:74:1f:41:07:23:10:42:f6:8f:fc:31:f6:c6:e8:
28:0c:7f:c3:db:c7:68:e1:fb:50:7e:e7:09:4c:f1:5e:ad:84:
d5:48:ba:4b:57:7f:63:c3:bd:12:18:f7:3a:6f:34:f2:57:c5:
ed:cc:7a:de:31:d2:d9:14:f2:1b:a3:85:b7:7c:2a:ea:a6:00:
c9:cc:3a:c9:27:9a:4e:ce:53:60:33:9a:af:c5:fb:48:76:74:
12:b0:c6:43:6c:51:be:37:68:a5:95:e8:fa:94:8b:68:42:e4:
3e:32:76:8f:97:a6:43:71:85:a1:26:e7:02:f1:20:77:6f:95:
a0:25:89:e5:9b:bf:ce:65:f0:43:2c:82:55:36:0e:48:fd:c0:
7e:40:6f:26:29:bd:0b:2b:01:bd:e2:95:8f:68:bd:57:23:a6:
be:55:31:cb:0e:d8:14:e0:0c:57:ff:f9:f4:80:79:cb:88:3c:
57:2a:ba:76:af:b1:f4:1d:12:60:28:2c:f0:4c:84:3c:12:82:
a4:16:9c:23:c5:a0:6d:ad:a0:6d:16:a1:75:93:cf:dc:d1:6c:
b8:fc:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:46 2026 by rpki-client