Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: U6wRPq2xeaLyRTIW4qlnxKoRe5FDvIwrVhGWlWf5hqg=
Subject key identifier: CB:E7:5C:D7:03:D8:AB:FE:27:B0:EF:73:4D:E3:66:B4:42:48:2C:E0
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019D37C10764E3A56BB0C97009E38FB6E8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0D97
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: bfN+NHbDH/wwprqE3jG4P4IBamF1saHWypnxSO/hk7k=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:07:64:e3:a5:6b:b0:c9:70:09:e3:8f:b6:e8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=cbe75cd703d8abfe27b0ef734de366b442482ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d8:b5:94:69:7f:f0:21:9c:e5:1e:2e:be:09:
b2:43:36:a0:ad:97:a7:a3:37:06:b1:96:6b:37:73:
3b:a4:23:64:b6:58:0e:28:27:9e:7d:9f:de:99:2d:
45:66:44:cb:d0:99:53:ce:3b:87:c5:5a:d7:7f:23:
e0:60:c9:f0:3b:ab:d7:11:58:88:fb:7b:8e:10:6b:
98:50:7b:da:60:a1:61:9d:3d:4d:6e:42:6e:8d:fc:
fc:cb:ec:10:17:89:f6:80:6a:1a:21:d9:03:08:43:
86:b7:35:51:11:56:99:ed:dd:d1:bf:90:32:88:60:
a5:8e:62:f6:04:81:20:d9:63:5d:c6:c6:02:e9:3c:
1c:26:21:fd:7f:fa:ab:81:cc:c0:83:dd:0e:64:6c:
5d:cf:14:6d:4f:26:99:82:ca:e4:c7:6e:ad:33:98:
27:ea:dc:c7:e0:c9:80:25:f2:78:e2:8d:5f:f7:39:
81:f3:6b:22:4e:af:62:9b:dc:a7:3b:f5:f1:23:c8:
2b:aa:9c:84:42:4c:a7:0e:06:f9:34:be:ef:28:92:
f4:16:e3:ec:07:7a:56:64:ab:ae:64:17:a4:b7:8b:
01:47:bc:05:70:1b:7d:0c:9d:3a:f8:13:a5:a5:0e:
f6:f7:1f:66:54:8d:c7:d7:10:fa:55:40:d1:52:c9:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:5C:D7:03:D8:AB:FE:27:B0:EF:73:4D:E3:66:B4:42:48:2C:E0
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c5:d5:51:4d:16:f6:ef:85:d9:e2:5b:28:82:74:cf:4f:b9:
d2:ce:10:57:cd:2c:ba:b6:9c:d8:d2:31:f6:24:d8:9f:cf:64:
55:87:55:21:13:ce:61:95:b7:f8:80:e8:ba:1f:0f:a4:d4:7a:
8d:b3:07:f0:bb:b9:f7:b2:62:c1:e8:b4:d4:36:43:50:e2:49:
6e:16:a2:00:e1:95:af:81:e8:a1:42:f9:fb:f7:21:60:aa:32:
8e:80:86:2b:c9:86:30:b5:43:3a:99:2a:87:25:56:62:ce:62:
bd:2d:e3:6c:13:88:a8:f5:fd:90:d8:73:fb:56:8a:04:bf:0c:
fb:ed:69:26:66:85:73:3c:c1:63:7e:16:4d:fb:9e:1c:a4:b9:
c1:92:d2:ec:39:c2:c5:69:55:ef:08:e8:b3:0f:74:a2:36:b1:
17:f1:44:fe:1d:e8:12:60:c9:7d:ac:40:b8:00:94:22:fb:0b:
b5:c5:22:48:de:31:ca:97:35:6a:71:84:24:9e:b6:db:5a:d9:
61:d0:b5:cf:2b:25:71:92:5e:f1:74:4a:82:9a:12:bb:b4:ff:
32:71:1d:d1:d0:00:b9:46:c0:ea:d7:42:f1:12:77:dd:a5:53:
f9:31:bc:b7:1d:51:6d:e8:0a:70:f7:ed:0e:81:ab:9d:74:dc:
82:33:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:43 2026 by rpki-client