Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: KsWcT/dsiO1QVMQqCQRQV+UpTDDUNJimZKkREUFWChc=
Subject key identifier: 3C:86:90:64:06:40:E7:D0:C0:93:D3:B4:35:40:55:0C:F2:0C:78:91
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 01A0D23797101926852879FB4E420AFE8600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 1513
Signing time: Thu 24 Sep 2026 07:00:53 +0000
Manifest this update: Thu 24 Sep 2026 07:00:53 +0000
Manifest next update: Fri 25 Sep 2026 07:00:53 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: l+9M4n/ILGybvZxSuHAbNiCUzvk3i5Dq/1RAT6nmgNY=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:97:10:19:26:85:28:79:fb:4e:42:0a:fe:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Sep 24 07:00:53 2026 GMT
Not After : Sep 25 07:00:53 2026 GMT
Subject: CN=3c8690640640e7d0c093d3b43540550cf20c7891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:3b:96:5f:29:f5:b1:b8:1a:8a:d4:f0:4a:
db:81:74:76:ed:6d:24:51:b4:79:c3:73:72:e3:78:
f5:cd:8d:89:b9:bb:34:cb:55:6d:14:f5:7c:36:64:
f2:c4:5e:7d:d5:c0:8f:3a:b1:c8:36:d9:6d:2d:c1:
b8:4b:27:ad:b2:96:12:53:dd:0a:3d:3f:4c:c7:59:
af:60:a8:8a:7e:34:eb:de:b8:9d:3b:ac:5b:26:23:
a0:ac:af:e3:8d:36:d6:c3:d1:3d:9e:5d:67:e4:1f:
55:c9:58:6b:41:4b:bc:18:02:31:b8:46:d2:91:4f:
4d:1b:28:f7:cf:df:8c:4e:f6:42:6f:b0:a6:67:62:
4b:07:08:65:c7:94:31:f0:9a:38:ff:f0:e1:98:ff:
fb:3c:ca:ae:53:75:a0:5c:92:73:3f:4c:85:f0:20:
c7:dd:bf:24:d8:11:f9:f0:d7:c1:ff:d8:3e:6e:a6:
53:de:48:75:7f:60:4a:57:ac:32:4b:92:9b:ae:26:
42:df:19:8c:a1:6f:03:13:90:c0:00:be:21:61:39:
aa:c6:29:d8:1d:a0:5f:56:dc:ad:f6:e5:a1:9d:92:
1b:08:c5:91:5e:ec:c5:a1:66:d0:00:07:10:5b:e4:
c3:90:f2:fa:dc:07:75:10:65:1a:99:ef:c9:b9:18:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:90:64:06:40:E7:D0:C0:93:D3:B4:35:40:55:0C:F2:0C:78:91
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:a8:58:10:b4:30:e6:0d:a6:20:65:ef:88:ef:fb:2f:c6:
e8:04:67:c3:e1:ce:42:df:e6:97:49:15:1b:13:b8:1f:48:13:
40:17:50:5d:53:d9:1e:ee:03:18:2e:07:93:cd:a7:62:97:d5:
94:31:be:7a:c1:78:ec:58:57:23:3b:ae:59:7e:78:b3:ff:7c:
7e:06:e3:43:24:2c:a3:57:29:3d:7a:31:47:57:4d:d5:05:f6:
7e:84:92:f5:15:e8:41:1c:fb:b6:0c:00:85:45:d5:85:c0:bf:
6f:75:8c:3e:a7:c2:51:1b:13:f4:16:30:40:fa:30:cc:73:77:
6b:10:a1:03:37:2a:df:82:4c:99:56:ec:a1:38:03:95:7b:2a:
83:24:a8:b1:bb:24:0a:2c:71:11:ff:38:72:95:26:cb:1f:96:
0f:ca:0c:90:d5:f9:e3:65:1c:5d:96:ce:08:01:60:1b:0a:15:
83:ef:36:c7:0e:25:6b:50:81:92:2c:8b:43:ed:1c:eb:ec:9b:
2a:11:d4:28:4b:ce:74:90:b0:65:b6:ea:65:78:1e:26:67:13:
86:88:fe:04:c2:b1:2d:55:11:f4:71:41:bd:9e:3f:7f:f2:dc:
3f:77:65:e7:f9:a4:61:a7:c6:ef:33:4f:92:c9:78:b5:8e:f7:
bd:82:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:36 2026 by rpki-client