Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: SPZeZ0UXdWx8kNBhmTRz1mEoIqxpyrCAfK/3+4oVlRg=
Subject key identifier: FF:83:14:8F:E8:5C:79:EA:D9:8B:C7:77:D2:7E:B3:05:89:FC:FB:5A
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 01A13C6EAA6918FDBF381C65BBD8AD918D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0CB0
Signing time: Wed 14 Oct 2026 22:00:47 +0000
Manifest this update: Wed 14 Oct 2026 22:00:47 +0000
Manifest next update: Thu 15 Oct 2026 22:00:47 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: S0k6h3y1DYElZKFYE+PTx+e8kFpJ2rl0PQOm0EACKxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:aa:69:18:fd:bf:38:1c:65:bb:d8:ad:91:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Oct 14 22:00:47 2026 GMT
Not After : Oct 15 22:00:47 2026 GMT
Subject: CN=ff83148fe85c79ead98bc777d27eb30589fcfb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:44:23:b2:39:2f:2f:b3:3a:dc:fd:95:db:
e3:98:de:89:2e:84:de:52:14:68:3e:0f:ff:5e:fe:
14:fe:71:17:0b:53:34:0a:fc:ec:eb:0c:c3:6f:2b:
f2:a2:8a:7b:e0:25:0c:a0:ad:b0:18:51:15:45:35:
05:d6:1a:12:6e:63:ac:7d:0c:3d:14:37:66:2d:5d:
f1:b4:75:f3:e2:89:97:e7:aa:8a:9d:46:1a:7c:fe:
33:c0:d4:14:e1:37:e9:52:9d:12:d4:9a:2e:82:31:
2d:02:6c:8b:b1:1b:3d:aa:50:96:c7:36:55:c3:81:
44:91:96:ba:c7:68:66:93:24:94:3e:fc:11:59:9c:
e7:eb:a5:27:b5:52:b4:c1:af:c7:dd:63:60:fd:d3:
7e:73:4d:d4:9f:be:60:a2:a0:8e:62:e7:61:f5:16:
fe:54:a7:14:c0:e5:d2:63:c9:ff:a4:9b:18:67:5b:
4c:87:d7:c0:7a:9e:5b:86:03:be:d0:96:cc:c6:0e:
49:be:d7:33:b1:9f:49:ce:80:38:f6:40:fe:6e:25:
3b:0c:51:67:a2:18:73:1e:ca:bd:b6:0e:cb:b0:5c:
d7:30:dd:7e:af:af:71:80:95:85:c6:fa:93:de:87:
37:de:d3:9a:68:d0:53:92:f3:f0:d8:b7:bf:c0:0b:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:14:8F:E8:5C:79:EA:D9:8B:C7:77:D2:7E:B3:05:89:FC:FB:5A
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:93:35:eb:6d:00:1e:26:df:dd:c7:a8:f6:d3:89:aa:54:b8:
93:21:b3:e0:8c:ac:56:22:14:fb:46:6f:d1:60:e1:5d:82:51:
db:c9:eb:cb:85:ce:04:8c:43:f4:03:57:89:dc:55:65:bc:67:
0b:ad:f4:fe:a8:46:fe:98:cd:56:20:6f:1a:ec:fd:31:4e:86:
84:26:1a:80:bc:a2:64:46:e0:9b:0a:3e:4a:01:a9:fb:5b:d3:
6b:3a:09:70:01:96:d6:48:fc:5b:0d:f5:dd:c5:b6:dc:e0:ed:
76:89:8b:50:67:fb:9c:9b:98:3e:5f:f1:2f:a0:87:95:c8:a5:
7a:c6:7c:56:19:ba:85:e4:a0:bd:d0:be:ff:e6:e9:e8:e1:ef:
ba:0a:31:65:7b:02:ad:1c:0d:13:94:72:d9:50:5e:83:7d:9b:
b2:b4:71:5d:ef:7b:92:ec:c4:17:41:4b:c1:28:f3:eb:1c:51:
bd:e5:75:4c:bc:b4:77:23:e5:a7:3b:f4:54:c3:a5:70:bd:b3:
e7:80:eb:69:0b:08:a7:de:22:ed:aa:fb:21:8a:1c:c1:24:3c:
6e:ca:f6:b1:12:5f:fd:e9:56:2e:86:dc:4f:02:cf:75:c9:4c:
fb:25:1b:aa:58:02:9d:49:58:67:d7:03:66:c9:d6:1f:79:98:
ec:e7:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:25 2026 by rpki-client