Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: ycFdXL7T5kGsiyjEvpJf0M0eSJZbdZsgNK9SeOPKayI=
Subject key identifier: E7:5C:0D:02:64:20:8D:9B:CC:79:7B:13:1F:53:6B:28:A6:DE:F0:AD
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019F905A5E107F2DC67C9E600CE6D3FF25AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0ECE
Signing time: Thu 23 Jul 2026 19:01:09 +0000
Manifest this update: Thu 23 Jul 2026 19:01:09 +0000
Manifest next update: Fri 24 Jul 2026 19:01:09 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: nlfmB8WH5C1SZCwwsmiUaYmh2J5Nm5ttCXlwDaKZCMc=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:5e:10:7f:2d:c6:7c:9e:60:0c:e6:d3:ff:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Jul 23 19:01:09 2026 GMT
Not After : Jul 24 19:01:09 2026 GMT
Subject: CN=e75c0d0264208d9bcc797b131f536b28a6def0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:07:50:ef:8f:cf:83:18:7d:35:27:c7:48:
ca:11:a8:2c:0b:af:a3:4f:a9:71:07:86:7e:30:f7:
38:08:51:a4:51:20:b9:ba:cb:94:15:1d:9e:cc:1c:
7c:e9:62:9f:a2:36:2d:7e:ef:87:08:af:55:f6:74:
41:68:b9:cc:2d:47:77:88:0e:2b:07:ff:53:f3:66:
6a:6c:55:99:0e:cd:56:69:7c:a7:df:55:ff:7c:28:
ad:1d:ea:16:9a:7b:41:f4:6c:d4:8a:45:b9:b6:10:
c4:55:5d:cd:6b:04:05:ea:a0:d8:0a:27:d8:83:ad:
64:51:f6:16:9e:b5:3c:09:c1:ca:81:36:c1:6b:dd:
e8:8c:1d:ba:5e:9e:7e:cb:d5:c3:8a:2a:c4:f3:72:
e7:64:8c:a8:ce:b5:68:04:8d:b2:8d:51:cb:1f:99:
6a:be:b1:7d:96:c1:90:04:b2:7b:66:04:2c:18:3c:
73:8a:4f:f4:cc:e1:b1:0b:83:14:6f:31:98:fd:08:
7f:59:45:97:f0:f3:dc:3d:78:5c:75:d9:b9:94:28:
1e:58:77:13:d2:9e:df:51:b4:a7:93:e5:9b:dd:8e:
aa:f6:8f:96:46:ff:98:99:8c:54:66:65:5f:88:4c:
be:23:06:9b:f0:06:7f:df:a7:81:52:2c:81:a0:33:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:0D:02:64:20:8D:9B:CC:79:7B:13:1F:53:6B:28:A6:DE:F0:AD
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:76:d4:30:67:c1:ab:03:51:00:d2:9f:ed:44:a2:3d:f7:6a:
19:2f:9e:62:db:dd:3e:14:bf:8f:7b:d3:74:99:6f:ff:38:ac:
3e:a8:11:65:a1:b6:4f:b0:df:d9:23:a7:0a:01:ac:6e:3d:08:
64:2e:e8:d0:2c:8f:46:d5:c0:ae:68:b6:86:8e:b4:d8:22:45:
b2:4f:14:f1:94:67:8e:eb:c1:43:14:d4:45:11:1f:f4:74:e5:
d4:b5:33:d6:60:e5:88:45:7f:32:6d:5e:7b:b9:32:81:5b:04:
4b:d9:51:b3:5c:b9:d1:a9:14:52:e1:36:19:b1:58:41:27:5b:
27:56:83:76:aa:11:72:b4:7b:ab:99:16:7a:f0:10:a0:55:8c:
a9:38:cc:3f:f2:2e:08:ef:e8:a1:b8:dd:52:03:6b:00:25:06:
0e:9f:62:3a:fc:94:1f:01:e0:f8:3e:44:ae:9e:2f:8a:93:d0:
89:59:2e:ca:6b:a6:49:ba:fc:6d:2c:33:f5:c8:1d:1e:05:a9:
6d:20:db:4e:c2:93:fe:55:b8:e0:60:a9:d0:fc:d7:40:2d:ca:
00:05:32:a9:3e:72:be:dd:70:89:38:63:af:50:8b:4f:fe:18:
34:4b:a1:c9:f0:67:27:0e:9e:ac:2c:ef:1d:7f:cd:b8:2f:3f:
89:11:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:32 2026 by rpki-client