Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: QWGmU7kVhlEPStgJdSRKgJiZkYZr5g/XzqTbMogscyg=
Subject key identifier: B6:FD:6A:E9:11:44:CC:5B:11:BB:C6:D3:CA:BD:0C:95:5D:D5:3A:67
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01A13D138F6D6F540ED9AF0D9E00C56A07CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0FAC
Signing time: Thu 15 Oct 2026 01:00:54 +0000
Manifest this update: Thu 15 Oct 2026 01:00:54 +0000
Manifest next update: Fri 16 Oct 2026 01:00:54 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: n9TPi3VH9ulnkUHOF+F1tGL3m8/5UGJAZGqA86JnAUg=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:8f:6d:6f:54:0e:d9:af:0d:9e:00:c5:6a:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Oct 15 01:00:54 2026 GMT
Not After : Oct 16 01:00:54 2026 GMT
Subject: CN=b6fd6ae91144cc5b11bbc6d3cabd0c955dd53a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:f0:d6:b4:c2:7d:f7:3b:82:95:57:18:40:
84:65:a7:0d:8d:6c:10:8d:96:89:68:a3:ad:ee:ad:
a1:86:9e:e9:b8:f6:85:bb:fa:43:84:08:f6:b4:8b:
32:5f:44:a3:f4:d2:5c:b7:00:c4:88:eb:75:4c:e7:
ba:f8:93:60:07:3e:2f:bd:ff:98:e8:d3:41:ad:93:
8b:20:bd:da:0f:da:34:21:a8:a3:19:65:8c:34:53:
87:41:02:02:91:70:da:bc:3f:56:d0:a6:6e:3a:ea:
67:98:49:1b:28:53:15:52:6f:4d:3e:a7:88:92:89:
4f:f4:6d:bb:ff:b9:70:cf:60:37:cd:8e:e5:1d:aa:
cf:c9:90:fb:e1:31:75:6b:43:ed:89:10:4f:a0:5c:
f8:7a:8b:05:d7:27:8f:01:b5:e4:c6:cb:27:4d:6e:
81:30:39:61:73:39:78:58:c2:ac:b2:8d:20:c4:f0:
8e:4a:c6:7f:ec:bf:9c:c1:11:3b:24:58:fa:ff:e7:
d2:53:42:0f:8b:01:67:71:0b:87:8f:33:b6:bc:a4:
85:d9:9a:54:99:c4:35:20:2e:84:17:d9:3b:df:af:
ec:07:92:92:04:9a:23:ae:3c:1c:84:e6:b0:f1:7f:
57:c5:5f:9b:71:cf:44:f8:bd:36:48:92:41:c7:83:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:6A:E9:11:44:CC:5B:11:BB:C6:D3:CA:BD:0C:95:5D:D5:3A:67
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f2:50:f8:8f:b0:3b:95:f5:92:22:85:e3:3b:1a:19:a2:9c:
f5:d9:f7:33:39:af:33:65:e7:43:33:bf:8a:a1:9c:84:43:98:
c4:52:d1:34:55:2a:71:ff:d0:ef:93:32:4d:29:3b:50:3d:77:
3f:e1:22:09:f0:6d:07:17:8c:54:4b:40:0a:8c:36:09:fe:d9:
5c:34:62:a8:28:02:b2:c2:a7:ad:77:93:3d:db:ae:78:d6:b5:
1f:6b:91:1e:3a:bb:35:cf:33:e2:3c:c8:fe:8a:4a:2f:cd:68:
d0:65:a3:37:f0:b2:e0:9e:01:2c:9e:00:e6:4b:e9:c9:6a:3a:
9f:62:f0:d7:4e:7c:64:be:d5:52:35:52:50:68:3d:f8:43:12:
a5:c2:3d:8c:6b:f8:9e:83:cb:ec:20:e0:be:18:1d:e1:74:0f:
93:2f:c1:ab:f6:de:d4:3e:67:4d:df:f2:ec:79:2c:57:ed:c2:
cd:c6:08:66:1e:31:1a:f4:84:6d:d6:5c:d3:36:40:b7:04:d1:
8e:26:0d:18:60:51:00:82:41:d4:2f:2f:c6:c0:4f:7f:55:a1:
ab:12:60:82:a8:75:22:92:10:31:e6:70:50:a9:33:ff:1b:49:
69:ce:f6:78:74:35:d7:97:cf:8e:61:64:66:f6:bb:c9:78:82:
5b:3a:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:03 2026 by rpki-client