Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: 8h5eJ+ZhhCKqFuUNJYjOQWaXfEZFZMRV40jaaJE8ar0=
Subject key identifier: 58:22:6C:CE:52:24:E1:78:B3:4A:1B:9A:EB:A3:15:B0:6F:B5:88:58
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019F8FB51CD022F40769EC34685312547B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 146C
Signing time: Thu 23 Jul 2026 16:00:39 +0000
Manifest this update: Thu 23 Jul 2026 16:00:39 +0000
Manifest next update: Fri 24 Jul 2026 16:00:39 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: mXqH0QBaY9q2spalloHqu4LBre6xtBKkjhlUKwn3b3w=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:1c:d0:22:f4:07:69:ec:34:68:53:12:54:7b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jul 23 16:00:39 2026 GMT
Not After : Jul 24 16:00:39 2026 GMT
Subject: CN=58226cce5224e178b34a1b9aeba315b06fb58858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:9d:70:5f:d8:a8:e4:b9:b9:b5:ad:0e:15:
cb:ea:e9:04:30:ef:19:b4:1e:55:fb:0c:8c:f2:39:
e6:31:a9:14:9b:55:ba:c4:f3:93:57:24:df:0f:9e:
15:31:16:12:ef:24:a8:c0:f6:b8:d4:28:a5:3a:4e:
f7:b2:e2:da:ef:18:1c:ea:b5:63:a5:90:9f:95:d5:
c2:a7:2c:bc:52:f3:f6:18:69:57:51:da:2b:4a:ef:
2f:e3:f9:e3:ca:16:2a:11:73:a9:0c:9e:d4:75:95:
d1:4e:6e:ba:77:b7:61:bf:2d:45:c2:51:ea:ed:e5:
64:a0:f8:75:7b:97:47:1f:ac:4a:41:f6:93:f8:c2:
f4:8a:10:1b:b0:31:f0:d0:fa:22:dc:18:6e:70:fc:
70:37:c0:5c:86:6a:fa:7a:81:16:aa:1d:09:ff:58:
59:31:38:40:80:2e:eb:e8:0e:83:5d:57:11:60:98:
44:7d:56:9f:8a:64:5e:48:d4:be:d9:17:44:d2:7c:
6b:60:a6:7d:44:35:a6:0e:52:ed:4d:23:ea:7b:06:
96:04:19:3e:5a:bd:3d:cb:5c:7b:9f:f2:d5:a7:90:
63:8c:3b:6c:25:49:67:5e:d2:0e:fb:35:10:6a:35:
5b:a1:54:20:94:dc:3c:a3:85:bb:40:16:8d:9c:48:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:6C:CE:52:24:E1:78:B3:4A:1B:9A:EB:A3:15:B0:6F:B5:88:58
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:cf:14:57:5f:04:91:9c:53:08:55:af:41:db:57:51:b8:
65:76:f7:7d:ea:b7:9d:ea:15:28:76:5c:d0:ac:40:b6:d3:64:
aa:1b:c6:20:6f:48:44:e7:06:00:06:7d:4b:53:dd:19:c4:d3:
87:d0:33:dd:53:60:39:2e:57:80:b4:6e:08:e2:fc:e1:23:8f:
8e:0e:ee:a1:b9:b0:f3:75:e2:f7:44:33:b1:58:a3:c8:24:4d:
66:b4:60:62:cf:ba:bd:78:c9:24:3c:a3:d9:08:65:a1:a0:9c:
a8:b1:8e:c7:d7:8d:0f:33:86:56:8b:99:c6:2d:f2:3c:68:54:
56:fa:7b:56:40:94:9c:83:34:3f:0f:54:5e:c4:9b:50:72:e3:
8b:1f:94:5f:04:0a:43:44:d6:17:38:a0:0e:a5:54:a3:9a:88:
95:30:67:8f:b6:8c:97:8f:c9:38:80:f1:55:c2:03:ef:e3:5a:
45:9a:ce:71:5c:d2:e2:14:a9:ae:f8:83:d4:02:a9:60:38:49:
ae:da:90:b3:fe:9a:e8:50:ed:9f:bc:aa:ba:0f:9c:ff:a0:9f:
21:b0:02:3d:b8:12:b2:81:57:01:78:ba:30:97:4f:ec:bf:f3:
49:8d:4b:45:0d:1c:7d:ac:5e:84:1f:5f:ce:65:bb:ac:87:5b:
29:d5:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:49 2026 by rpki-client