Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: HiXJzLgfh8agwHRBe5dzvz21yDa/GvStzO1J6S1/KjY=
Subject key identifier: E8:EE:6D:92:90:7A:5B:1B:E6:CE:0F:4B:11:75:EA:6A:C5:00:1C:18
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01A1DD5E15606DBE026D0F3FF2A039E7EDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0FFF
Signing time: Sun 15 Nov 2026 04:01:32 +0000
Manifest this update: Sun 15 Nov 2026 04:01:32 +0000
Manifest next update: Mon 16 Nov 2026 04:01:32 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: 46tSa0d/bb7EFnq1wm9YzKONficJ9/KKUlLt+R6rB6o=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:15:60:6d:be:02:6d:0f:3f:f2:a0:39:e7:ed:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Nov 15 04:01:32 2026 GMT
Not After : Nov 16 04:01:32 2026 GMT
Subject: CN=e8ee6d92907a5b1be6ce0f4b1175ea6ac5001c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:f2:60:e9:f2:75:64:e0:95:ca:fa:2a:ce:
25:a7:ed:42:f9:e4:46:b6:f8:cf:f1:cc:68:f4:24:
83:2d:50:15:02:ec:26:a1:40:43:89:36:94:c2:11:
42:39:65:03:f0:4c:94:34:6d:1c:aa:ae:13:44:b6:
3f:f2:53:7c:d6:11:04:e7:0a:15:e7:04:98:e0:31:
f8:c5:be:bf:c3:03:95:ac:e1:52:87:bd:ec:7f:0d:
80:c8:6d:ec:9f:1c:5e:da:3d:ec:49:21:0a:f1:d3:
67:14:e6:d1:68:d7:a3:e4:bc:77:52:5f:50:ac:e2:
06:da:2c:c6:25:3d:fb:01:1d:41:d9:d7:6d:cc:b3:
c6:40:2c:34:e8:26:6c:89:7c:7c:fb:e1:bc:5d:9e:
54:b0:ab:78:14:29:f4:1a:50:3a:65:c5:53:07:6d:
f1:dc:92:a3:db:40:0c:b9:05:3d:1c:c7:42:22:e9:
06:d6:dd:f0:4b:50:6b:3a:82:33:61:00:2d:d0:9a:
9b:93:f1:84:00:8c:6e:cf:64:2c:cd:8a:1d:c5:8d:
3c:90:89:d8:13:58:26:e8:33:64:a3:39:17:3c:42:
ea:76:36:a4:5f:be:53:85:1a:12:e4:9d:db:aa:0a:
88:ca:6a:6c:5a:88:17:73:30:7c:78:3f:b7:9c:86:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EE:6D:92:90:7A:5B:1B:E6:CE:0F:4B:11:75:EA:6A:C5:00:1C:18
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:58:95:4e:96:66:5d:48:b6:2b:d8:e8:91:07:ac:ae:54:
3f:c2:6e:c4:60:81:13:87:1b:1d:71:39:31:0d:3b:75:c9:b3:
bb:c9:af:65:5f:1e:ed:76:41:2e:47:40:59:61:f6:fb:78:14:
ea:2f:e0:e3:dc:03:c5:8e:a8:bd:76:d5:91:01:c4:63:8a:19:
0b:33:af:f1:04:39:2e:a2:88:08:32:65:f3:98:50:36:39:d6:
5a:f9:c7:a0:44:01:d2:1e:56:d9:8b:81:db:6e:5e:83:1b:e7:
52:52:a2:5d:a8:35:d7:ee:1e:95:c6:da:3a:f1:5b:4d:33:52:
a6:ef:f8:8e:b7:44:5f:86:05:bf:c8:8e:ab:74:2e:a2:f9:c2:
ba:b7:d8:16:37:43:be:a5:82:34:42:7b:5c:0f:7d:97:2d:aa:
98:cb:be:6c:85:19:47:dc:94:5d:4c:7c:67:9b:e5:0a:4c:24:
79:2c:45:ba:d1:93:bf:66:a8:30:f1:7f:22:ef:09:03:ec:ce:
05:47:72:df:3e:ce:36:0a:0d:82:79:26:3a:7d:68:d5:fc:ae:
1c:f3:38:ac:b2:dc:e1:d8:ff:50:d0:e4:bc:77:04:50:13:f6:
b7:01:fb:3c:45:3d:bb:ea:9d:3b:eb:b9:3e:40:8e:82:2f:36:
d8:44:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:35:26 2026 by rpki-client