Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: As64vXGwbrR0Zf3bb0vPjX0csD/ZdnWjMWiFbPZk/Kk=
Subject key identifier: B6:39:C2:73:8F:11:0C:EA:AF:75:0F:B9:3E:3E:CC:78:F2:E2:0F:04
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019D27A8C90368BD7973A027D0849CDE7DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 132D
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: rYyCnMNkEyDiZpoH5/EFLFZSe1AV/zqxrY7TiqtMSuI=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c9:03:68:bd:79:73:a0:27:d0:84:9c:de:7d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=b639c2738f110ceaaf750fb93e3ecc78f2e20f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:6a:83:3f:9c:b1:e3:41:52:33:d4:85:04:
25:57:26:e9:c1:7a:06:d1:a8:ae:77:13:dc:cf:5f:
3c:53:4d:fc:65:b6:cc:cb:5a:07:9d:db:06:49:fd:
d6:c2:d0:a5:2e:7f:48:b5:a3:15:51:2b:49:ba:59:
c0:b5:ee:37:11:98:75:cb:6f:9f:88:28:43:e0:d3:
ce:e7:d3:e8:39:ef:67:25:e5:36:89:95:1a:0f:06:
75:37:12:fb:b8:b2:c2:2e:c1:00:c7:0c:2b:be:39:
b5:d0:08:97:6c:ea:de:5b:ec:41:7d:5b:21:46:1a:
d4:a2:8f:76:62:32:d1:82:82:a0:ee:5c:a4:c5:b9:
04:c0:48:76:39:3d:dd:88:cf:fb:d9:df:3f:5c:08:
95:79:ea:31:62:04:f6:d4:0c:b3:5b:a8:f4:3e:79:
78:f9:82:15:48:c5:16:75:0b:f3:12:3d:95:09:98:
3d:cb:1c:cf:87:4c:67:9c:d6:ff:98:29:b7:23:d0:
db:c5:c9:9f:8f:a0:64:c2:22:54:28:8d:54:5f:e5:
5b:fc:a8:ff:2b:97:9e:5b:dc:a4:0c:eb:b2:3b:71:
4b:8c:ff:62:d6:bb:63:10:f7:14:bb:74:41:18:5f:
e9:09:de:64:82:b4:d1:fa:5e:e5:29:d7:2f:64:8b:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:C2:73:8F:11:0C:EA:AF:75:0F:B9:3E:3E:CC:78:F2:E2:0F:04
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:16:cb:8d:9e:e4:46:59:44:53:34:73:a0:9b:14:99:32:eb:
f9:20:66:2c:a3:af:50:f6:54:da:36:2a:8f:82:2c:a8:cd:ff:
e9:b1:05:7e:32:d0:5a:d8:9c:06:bf:31:9b:3d:0e:cf:d2:fe:
3c:ba:fc:26:9c:5a:cf:0d:fb:35:ac:4f:0a:26:ca:0d:f6:ec:
32:27:e8:63:a7:92:69:19:92:f5:56:92:c8:85:e9:41:f2:db:
3c:db:40:62:e7:a7:d1:ae:2a:8f:62:6f:c9:bc:6e:36:5d:31:
b6:0a:0b:dc:d4:2d:44:ee:64:5f:d5:20:13:c2:70:a4:4d:08:
d5:83:01:b0:4e:4b:a8:fa:02:5b:15:79:35:4b:28:72:f2:01:
c2:fb:fe:a3:f7:1d:02:e5:7c:4f:f5:ca:a6:c6:67:5e:b9:5f:
0f:df:d3:27:73:6a:01:17:d9:9d:55:79:7f:39:86:bd:2c:3c:
d4:58:17:4e:92:e2:ef:2e:ad:e5:38:20:af:ef:4d:cf:41:d0:
91:c6:60:ab:9e:87:f9:22:3e:39:8e:50:47:3e:2c:d1:52:e7:
bd:c7:99:58:85:8b:e2:56:1f:21:81:81:7a:f4:ec:5a:ee:69:
a2:18:97:fc:f2:a8:c5:98:1a:e2:3b:da:21:25:10:7c:ef:c4:
46:d5:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:53 2026 by rpki-client