Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: L+B45ZpjrS2q78Xa7EfceQ5gNoNs34hHxDZHxF+3HN0=
Subject key identifier: 40:08:9E:94:E9:63:ED:29:1A:77:A0:1E:9E:AB:B8:82:BE:D0:59:70
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019E30DFF1E8B8C91C7D06A2ED126DFEBE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0E18
Signing time: Sat 16 May 2026 13:00:43 +0000
Manifest this update: Sat 16 May 2026 13:00:43 +0000
Manifest next update: Sun 17 May 2026 13:00:43 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: TJ4DpTm4GQCCRuJxNQPDb+gCqqJny15cUY0jY10ItsM=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:f1:e8:b8:c9:1c:7d:06:a2:ed:12:6d:fe:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: May 16 13:00:43 2026 GMT
Not After : May 17 13:00:43 2026 GMT
Subject: CN=40089e94e963ed291a77a01e9eabb882bed05970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:3d:2b:8e:14:1e:a0:e0:45:bc:51:1e:c8:
db:da:34:d9:78:90:ab:2d:2e:d5:b9:1c:a8:7c:e5:
df:15:77:7a:0b:81:7c:90:8b:1e:2f:a8:a3:f7:84:
a7:c0:03:a2:4f:c5:f7:0a:91:0a:2d:1d:64:81:89:
fd:9b:0d:8c:7c:6e:3e:a7:48:ea:57:08:95:68:7b:
94:81:e6:a0:86:9f:84:7a:be:01:b9:cd:8c:98:5c:
e4:c5:42:69:7c:6c:45:2d:8a:99:a7:2b:08:55:11:
c2:ea:82:ec:56:20:54:89:1d:f0:68:82:45:db:ad:
18:ec:45:3c:a4:36:dc:b3:28:a0:83:bd:fb:dd:c0:
f7:6e:09:8c:43:23:73:4c:bc:e8:8f:c9:2d:89:fc:
b9:c1:38:09:f2:3b:bf:53:1c:8d:18:25:c7:76:36:
3c:a4:62:9f:f4:85:24:76:b7:14:66:52:36:39:5d:
39:b7:2a:88:84:6f:0f:05:a7:35:80:c1:be:4c:d4:
86:1b:50:88:b3:f5:ef:54:e9:93:16:19:e4:f8:c9:
58:d0:3c:1c:71:d3:02:91:e4:12:3b:90:fa:81:27:
a6:75:8b:2b:e0:60:f2:26:d2:ed:89:d9:1f:9c:fa:
f9:a1:f2:b1:a5:93:d4:90:9a:23:a3:86:f8:4a:75:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:9E:94:E9:63:ED:29:1A:77:A0:1E:9E:AB:B8:82:BE:D0:59:70
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:52:88:1b:2d:2f:cd:97:2e:a0:61:29:be:e2:21:6e:fb:81:
45:6b:07:e2:94:5a:b2:45:e3:ab:d5:b5:3f:db:2b:a3:c0:e8:
94:eb:d4:d2:b9:df:80:50:03:cf:2c:57:7a:8f:b1:be:e7:9e:
4d:3d:7c:82:dc:46:3e:2a:db:d5:9a:54:a5:90:92:8b:0a:e1:
85:3e:79:3b:ae:41:69:fe:3c:0a:cb:c2:ff:4e:8b:d8:59:fb:
d6:3a:33:59:29:e3:0e:8d:fb:b3:9b:58:9a:5a:7e:1b:e6:95:
5f:ad:72:db:6c:da:b8:76:60:36:10:40:56:3f:01:03:02:c9:
eb:7e:6d:8e:dd:89:24:03:d7:63:e8:87:55:8d:70:04:4a:54:
b7:7e:61:d3:cf:58:df:ca:62:99:a9:08:96:3e:ea:97:1d:93:
48:fd:9f:82:a4:ac:51:61:09:7e:bd:5b:b1:ee:c7:19:4a:9b:
01:16:b7:1c:4e:fe:a6:7a:58:cf:fc:90:f1:7c:bf:01:93:06:
fe:aa:fb:fb:6a:b3:9b:20:0e:22:f7:e5:d0:46:12:b6:bc:dc:
f5:62:97:ab:5d:f2:31:76:ef:44:9b:f3:62:a9:6b:07:c2:92:
11:ad:92:cb:a8:c5:a1:89:d0:62:d9:a2:23:e0:80:f2:fd:61:
cf:97:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:49 2026 by rpki-client