Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: 2K6FwEiASbxt2PcMjM/0fCNb19zHyy4UWTaOIULhqi4=
Subject key identifier: 76:D3:1A:7F:DC:43:A2:A1:9B:3B:67:46:85:1E:FF:CE:95:F1:F3:E7
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 01A001A5A599B183A25E8F9C2BD71FC375FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0C0D
Signing time: Fri 14 Aug 2026 19:00:27 +0000
Manifest this update: Fri 14 Aug 2026 19:00:27 +0000
Manifest next update: Sat 15 Aug 2026 19:00:27 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: Oti+SAFdpoVknvuUgCuzhCNlq9eubkwmJSFp6i5Dc/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:a5:99:b1:83:a2:5e:8f:9c:2b:d7:1f:c3:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Aug 14 19:00:27 2026 GMT
Not After : Aug 15 19:00:27 2026 GMT
Subject: CN=76d31a7fdc43a2a19b3b6746851effce95f1f3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:38:d5:83:bf:ee:82:01:c5:41:a3:25:47:
57:5d:74:a8:5a:1a:9f:aa:31:cf:f9:1e:37:e7:3d:
cd:47:d6:5f:59:0a:ac:af:f4:f6:f9:d9:c7:63:f8:
c3:de:7b:9f:4f:1a:28:43:fb:4e:31:dd:a8:ef:e3:
a3:61:58:fa:5d:97:a1:ff:57:ff:73:4e:68:69:4a:
95:f8:f0:4b:e2:1f:f5:09:17:91:7f:86:7c:c5:bf:
bf:0c:74:d6:8e:50:1e:92:15:76:09:f1:35:c8:77:
e2:70:4d:e6:76:e7:df:b7:31:17:58:e4:60:7e:ef:
ed:23:ac:2a:bc:54:2a:b7:0d:d2:4c:f5:37:76:e7:
ec:a5:a0:0e:e8:2d:c4:99:10:2f:c0:f2:57:da:f1:
e9:84:ab:d3:4d:43:da:53:74:57:25:92:19:6e:f5:
0a:1d:e8:d0:4b:0d:a4:21:fa:46:6b:ec:62:37:a5:
07:a9:6a:03:aa:c9:35:df:42:e3:a9:4b:87:ce:a3:
80:56:fd:33:aa:aa:31:cd:cd:41:91:12:55:6a:c7:
a9:08:2b:3d:be:95:4e:89:d0:61:d4:dd:6f:ac:b8:
8f:a0:41:81:f6:bc:84:0d:18:8c:5a:fd:6e:48:50:
e8:24:b8:41:05:4b:91:e8:89:3e:55:03:1f:6d:5e:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D3:1A:7F:DC:43:A2:A1:9B:3B:67:46:85:1E:FF:CE:95:F1:F3:E7
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:53:fd:78:a3:a7:02:30:1c:58:81:16:8f:ae:ec:37:13:f2:
41:91:fd:72:e4:19:88:b0:55:d1:6b:28:1e:7b:54:e3:f6:1a:
ee:45:5c:a8:33:2e:45:bf:dd:7b:ae:a7:87:de:1b:e7:dc:98:
3c:27:80:3d:34:c7:e9:42:e7:26:89:dc:37:c5:77:a8:64:e9:
33:bd:7d:70:c0:7d:b1:97:74:f5:74:50:ce:da:88:9a:b1:35:
83:8a:c7:fc:30:14:fd:5c:df:25:57:c4:1d:c1:f9:da:42:73:
f6:60:56:91:27:9b:7a:c8:c4:65:30:6d:dd:53:4b:86:29:c3:
3e:c4:4d:d2:87:3e:ec:4f:d8:d3:ff:b4:37:1b:e4:9a:bc:66:
d9:1f:fc:c3:f2:60:f7:75:4f:75:66:5f:9f:bd:91:69:42:c0:
ab:b9:bd:50:08:e8:07:b7:0f:f9:4d:8a:ce:95:0c:c1:bf:cf:
80:24:99:37:c9:1c:a1:f2:62:24:85:91:e3:d2:c8:e6:b1:5f:
24:33:ce:56:d0:4a:8e:67:87:62:ae:d6:ac:15:5e:89:7d:63:
e9:c5:ff:93:71:a3:69:5f:b9:f6:b3:78:da:3b:b0:90:47:84:
d6:fa:75:e5:aa:84:b3:db:36:4d:20:46:21:4d:66:c5:38:4f:
dc:5d:76:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpaWZsYOiXo+cK9cfw3X/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U0MmExNDZiOTBiYTdjZDMzMWFkNmExM2VlZjFkYTJm
YmE0NDAwHhcNMjYwODE0MTkwMDI3WhcNMjYwODE1MTkwMDI3WjAzMTEwLwYDVQQD
Eyg3NmQzMWE3ZmRjNDNhMmExOWIzYjY3NDY4NTFlZmZjZTk1ZjFmM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZU41YO/7oIBxUGjJUdXXXSoWhqf
qjHP+R435z3NR9ZfWQqsr/T2+dnHY/jD3nufTxooQ/tOMd2o7+OjYVj6XZeh/1f/
c05oaUqV+PBL4h/1CReRf4Z8xb+/DHTWjlAekhV2CfE1yHficE3mdufftzEXWORg
fu/tI6wqvFQqtw3STPU3dufspaAO6C3EmRAvwPJX2vHphKvTTUPaU3RXJZIZbvUK
HejQSw2kIfpGa+xiN6UHqWoDqsk130LjqUuHzqOAVv0zqqoxzc1BkRJVasepCCs9
vpVOidBh1N1vrLiPoEGB9ryEDRiMWv1uSFDoJLhBBUuR6Ik+VQMfbV5tDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbTGn/cQ6KhmztnRoUe/86V8fPnMB8GA1UdIwQY
MBaAFON+QqFGuQunzTMa1qE+7x2i+6RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYt
MDYzMjlmNmUwNDc1LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYtMDYzMjlmNmUwNDc1
LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1P9eKOn
AjAcWIEWj67sNxPyQZH9cuQZiLBV0WsoHntU4/Ya7kVcqDMuRb/de66nh94b59yY
PCeAPTTH6ULnJoncN8V3qGTpM719cMB9sZd09XRQztqImrE1g4rH/DAU/VzfJVfE
HcH52kJz9mBWkSebesjEZTBt3VNLhinDPsRN0oc+7E/Y0/+0Nxvkmrxm2R/8w/Jg
93VPdWZfn72RaULAq7m9UAjoB7cP+U2KzpUMwb/PgCSZN8kcofJiJIWR49LI5rFf
JDPOVtBKjmeHYq7WrBVeiX1j6cX/k3GjaV+59rN42juwkEeE1vp15aqEs9s2TSBG
IU1mxThP3F123g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:13 2026 by rpki-client