Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: DhwfqpdY65NhEbYai0rKTgMMWD6Vv65qTfer1Vvsrzc=
Subject key identifier: 4B:57:68:1E:22:6F:4E:A2:3D:8D:BF:7C:E0:B2:00:B9:B2:2B:6C:ED
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019F122ED299C3B1865A8EA201CDB47BC977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 142B
Signing time: Mon 29 Jun 2026 07:01:26 +0000
Manifest this update: Mon 29 Jun 2026 07:01:26 +0000
Manifest next update: Tue 30 Jun 2026 07:01:26 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: dS669Md6NB5kV7M8pGPTkw/9ppWVcq4USad0AQvbd3w=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:d2:99:c3:b1:86:5a:8e:a2:01:cd:b4:7b:c9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jun 29 07:01:26 2026 GMT
Not After : Jun 30 07:01:26 2026 GMT
Subject: CN=4b57681e226f4ea23d8dbf7ce0b200b9b22b6ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:07:25:08:6a:91:60:2a:b8:3a:e5:23:8e:
cc:e1:11:4e:79:0e:68:b3:46:25:73:de:6f:7f:dd:
8d:a6:d7:ca:4c:c9:37:43:5e:ea:6d:08:e0:84:5a:
3f:be:43:47:cd:f8:51:8e:14:a4:b2:7e:4e:02:56:
8c:d6:ca:30:f0:86:c2:45:23:b3:a5:0d:67:30:c9:
f9:08:fb:3c:83:07:85:7d:22:aa:3b:83:ea:8e:4c:
17:d2:98:02:9b:e2:ee:c0:cb:6d:7c:c6:c6:32:b3:
86:84:64:2c:89:f3:d8:ef:0b:b2:ed:1f:03:c9:98:
08:1f:fd:2d:f8:9d:27:57:72:4e:21:86:fb:27:9a:
72:71:42:1a:d3:bb:94:a9:30:2b:7b:6e:a4:ee:ba:
4e:dc:df:22:9f:ee:e0:fa:75:56:20:d1:66:24:7e:
87:d1:3a:90:f2:4a:7c:24:dd:cd:20:8b:f6:fc:45:
2c:00:4e:59:ca:30:a7:ed:ce:15:09:80:f1:f6:22:
e6:6d:93:fc:a5:c9:db:45:69:2b:d2:fc:85:a2:24:
2c:d1:f3:28:8f:15:73:b6:00:f8:65:6b:65:7e:47:
05:46:1d:1a:3f:18:70:ba:61:fe:ba:8f:da:10:c4:
32:13:58:7f:65:a0:44:82:1a:8a:98:42:8d:73:14:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:68:1E:22:6F:4E:A2:3D:8D:BF:7C:E0:B2:00:B9:B2:2B:6C:ED
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:89:f9:9c:cc:06:14:d9:c2:0c:c5:cf:69:ec:a0:66:17:
5c:cc:6c:34:5c:09:79:84:c6:3c:b0:cb:c1:1b:4d:9e:b9:ef:
05:cf:ec:d1:a5:05:25:3c:08:e0:43:04:ae:dc:cd:b9:1a:43:
9e:86:81:6f:52:71:86:34:53:b2:24:1b:88:73:41:40:d0:51:
27:57:00:ca:3b:6b:72:15:f9:55:f5:ea:03:27:f5:ec:4e:0c:
5f:b8:dd:86:c7:21:69:7b:c0:a2:de:22:98:2b:63:b7:15:44:
bc:44:e8:8e:a5:b6:78:77:75:24:18:d2:c0:03:37:ca:43:f9:
04:7f:08:0e:32:da:66:dc:aa:79:6d:07:13:82:dc:7e:0f:74:
42:75:6f:3a:4e:c5:b0:e1:02:c2:65:df:85:90:af:67:37:87:
99:e9:24:8e:3e:a7:ab:1f:e1:4f:8b:66:49:81:02:59:76:b5:
cb:d9:e1:f7:b7:71:6d:47:5a:20:bc:ba:22:9e:67:7d:4f:5d:
0e:21:d7:54:6b:78:09:27:67:f1:50:2b:14:8e:a4:6a:24:22:
e2:8e:f9:9c:4b:f2:4a:01:f6:a7:18:a3:cc:9b:c1:5b:37:bc:
90:c1:c2:12:5c:ab:9b:a3:71:be:95:8f:7c:3d:22:43:ed:84:
74:46:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:22 2026 by rpki-client