Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: sykN83hz8+gTRmtAS3y4h/cD0KPFcxNXtJsJzq7rnqI=
Subject key identifier: 55:58:CC:33:EB:10:66:8C:00:97:17:A2:6B:CA:07:9B:C4:4D:12:69
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 01A001A683EDB90F930F56FE913F24484265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 14A7
Signing time: Fri 14 Aug 2026 19:01:24 +0000
Manifest this update: Fri 14 Aug 2026 19:01:24 +0000
Manifest next update: Sat 15 Aug 2026 19:01:24 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: ZU3/5os+7DdAx3hHyOQMrunv/KoI+PyIDdiE4pV+Q2g=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:83:ed:b9:0f:93:0f:56:fe:91:3f:24:48:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Aug 14 19:01:24 2026 GMT
Not After : Aug 15 19:01:24 2026 GMT
Subject: CN=5558cc33eb10668c009717a26bca079bc44d1269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:72:b6:9b:49:6b:0f:39:28:fe:3c:d0:fc:
3a:e6:6e:91:8a:dd:eb:60:44:7b:4b:5d:59:8a:94:
1d:6a:0f:41:d5:13:1c:03:53:58:1c:43:2b:37:77:
d3:2c:b5:5a:b8:af:59:3c:8e:0f:c8:b0:fa:47:7f:
95:1e:fc:27:a5:94:06:ac:be:19:f5:74:4f:05:a2:
bc:1c:f9:32:10:91:77:d3:e3:13:60:d6:4f:9b:5f:
95:50:70:ff:12:a4:1d:ff:ba:78:12:88:05:4a:83:
ae:5b:48:51:7d:7a:0d:3f:9f:95:7e:62:f8:5b:65:
39:58:4c:85:e4:6e:a5:13:70:1e:a0:b7:54:3f:05:
58:1b:ae:8b:ea:6e:3a:77:f5:07:98:43:07:be:de:
22:ba:af:19:ba:65:1d:11:68:4b:1d:9f:74:8e:3c:
74:b5:b9:98:53:d8:0b:46:b3:3b:37:83:1e:69:7e:
ef:1c:f2:e8:5a:69:28:dd:d4:f7:64:7b:fa:0e:d7:
4f:dd:59:61:6e:e6:1e:09:5c:63:f6:1d:7c:32:b1:
59:fc:1b:06:f1:80:d1:4e:a0:22:58:6d:d8:35:99:
f2:50:72:2d:f9:db:4c:63:86:48:85:c4:02:61:3f:
df:4a:63:32:2a:ab:4b:71:80:b1:41:d5:70:fc:a2:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:CC:33:EB:10:66:8C:00:97:17:A2:6B:CA:07:9B:C4:4D:12:69
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:37:72:b1:db:c8:b9:bb:08:b3:ba:39:73:8c:10:50:bc:eb:
ab:4a:7c:5f:b4:32:09:a2:8d:b6:1d:fc:fb:21:96:48:35:77:
3d:94:ec:6b:4c:e5:5b:09:bf:e9:b5:84:e4:83:14:6f:d1:d2:
98:ab:16:39:fb:42:8a:45:b1:55:65:2b:3f:72:38:41:69:f2:
eb:ec:71:00:b5:1a:56:c0:2b:36:3d:b5:72:95:0f:db:a1:ae:
37:a3:f7:80:c7:62:18:97:f5:ba:a5:bb:5f:48:80:ec:65:69:
5c:df:28:e7:a9:d2:31:ae:d9:2b:34:a8:03:b6:6b:b5:97:4e:
e3:c3:a7:e5:14:3a:2f:3c:e3:44:6b:8d:dd:7c:33:af:c1:30:
88:e2:1c:6e:ba:af:02:96:a7:c1:f7:fa:7f:97:c8:37:d2:14:
e3:b4:c1:74:2d:56:3d:f8:80:82:31:4b:43:e7:c4:35:68:03:
48:2b:5d:60:cf:46:f9:90:f4:f9:69:fc:e5:8d:60:8a:dc:4a:
9c:1d:46:73:cc:14:3c:77:13:23:42:9a:cd:b9:57:7d:af:65:
c8:38:b6:a1:95:89:1e:3d:f2:6b:a7:91:02:c5:e6:a4:34:5c:
99:d5:5a:e5:43:1d:94:cf:85:44:11:ea:92:da:d0:fc:24:16:
36:88:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:14 2026 by rpki-client