Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: 5SxXrDEeDCvr24jwAWGqjWslQeY70eG5pQDPa9Zx0Ac=
Subject key identifier: 45:87:90:9B:31:AB:EA:F4:E6:51:8B:52:92:6E:A1:30:29:13:29:7B
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019E1ED99FFA438485BA7148B68DABFBA180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 13AD
Signing time: Wed 13 May 2026 01:00:39 +0000
Manifest this update: Wed 13 May 2026 01:00:39 +0000
Manifest next update: Thu 14 May 2026 01:00:39 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: n5YZJjBHrq0d4jZxhbH204IbvnpYCHLfLMjSXduQ274=)
2: bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (hash: W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=)
3: ctOHMPnfIdx6PydfkKnZ5gEcKQQ.roa (hash: qIj8QWfTmVSnfJJaltVtP4eb6W2W+l0cJ03A7Or6XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9f:fa:43:84:85:ba:71:48:b6:8d:ab:fb:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: May 13 01:00:39 2026 GMT
Not After : May 14 01:00:39 2026 GMT
Subject: CN=4587909b31abeaf4e6518b52926ea1302913297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:73:dd:60:49:de:e9:fb:14:db:87:0a:db:
f4:90:d2:6f:66:12:35:12:6d:56:f9:48:dd:e8:3a:
aa:8e:8b:da:0e:93:f2:a4:fe:ba:17:a2:cf:bf:35:
96:31:4b:d1:d4:71:4d:75:80:da:63:74:86:c0:63:
e9:e9:af:20:f4:83:6a:7a:6e:99:a0:9a:8d:b1:bf:
2d:d6:71:3e:80:21:01:62:98:1d:bc:f8:88:c1:8c:
2c:cb:e2:5b:9e:8a:4f:2f:2c:61:44:1b:fd:90:2e:
d6:49:33:b2:09:a1:42:ec:af:34:60:72:d1:fe:8c:
3c:74:4a:2d:57:e4:cf:49:3e:f1:96:43:73:af:b2:
e8:0f:f4:04:63:01:b9:a5:d7:c7:c0:05:02:89:f0:
17:5a:2d:63:e5:c1:f7:b6:6f:61:b6:77:9b:d2:35:
74:82:af:d1:7b:ad:34:75:28:12:87:a9:9b:1c:94:
4d:ba:00:87:83:78:8a:61:7a:55:0a:a1:78:87:8b:
da:1c:39:d1:53:21:d3:8f:5b:59:56:85:38:aa:e4:
67:cd:51:be:48:7e:d3:51:25:26:98:37:3a:40:3b:
23:e0:ee:3d:b2:d8:b6:ea:ad:87:5e:02:41:1a:51:
39:f5:ae:36:34:d7:98:11:07:47:34:6f:41:ac:ae:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:87:90:9B:31:AB:EA:F4:E6:51:8B:52:92:6E:A1:30:29:13:29:7B
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0e:fa:10:5d:eb:ee:6b:f1:4c:b8:11:34:b3:e1:30:da:83:
28:df:bb:8e:47:4c:e2:17:41:27:fd:ac:be:63:a1:eb:3a:b7:
5b:a3:63:7e:6f:3e:ee:d9:08:ea:f0:ca:e7:00:5c:4f:d1:2d:
ad:69:86:ab:be:db:9b:89:66:8d:b8:25:9c:08:79:fb:36:02:
b1:bf:bb:36:ab:76:f6:39:c2:96:b7:f9:97:a6:49:44:e0:92:
58:ea:dd:3d:48:97:34:4f:9a:31:2a:3d:7d:5f:27:7e:c0:20:
0c:44:64:de:23:97:b5:fd:d0:cf:f7:0f:d0:b9:ff:3a:6e:fb:
10:f3:a4:da:25:32:39:90:05:60:6c:33:3b:78:90:9c:9c:c1:
60:f9:ab:4b:d0:54:85:ef:46:6a:49:6c:b7:df:d1:50:cf:69:
6e:31:84:71:7e:bf:5b:7d:93:3e:78:90:03:c0:bc:66:cd:0d:
74:2c:3d:6f:88:bf:9a:86:9c:63:33:4b:4a:72:d9:74:46:4b:
96:a4:be:19:41:45:34:4e:b5:5f:7f:08:9f:4d:39:91:34:1f:
a1:4b:0d:e2:e7:87:94:61:a8:56:2a:47:ac:d4:b0:d9:99:72:
34:1d:a4:df:d1:51:af:ee:a1:99:97:24:ed:d2:e6:97:fc:0b:
f6:dd:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:39 2026 by rpki-client