Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: qIPA4X8ULU1QdDm1HeM8OsXC5trfx+MY4eRAmb4xuNU=
Subject key identifier: 37:E9:58:74:D2:53:09:04:D1:B9:91:18:92:E4:DA:2D:C5:3C:DB:69
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019D284E4A17B99D81586571B15785831684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0D8F
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: ZxP+pSVtQ/sPCrhLopBB3WehTAanYHx5Dmvw3hcgtPM=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4a:17:b9:9d:81:58:65:71:b1:57:85:83:16:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=37e95874d2530904d1b9911892e4da2dc53cdb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:aa:5b:b4:95:7e:e5:df:b3:f5:7b:ed:84:
ce:46:f6:07:a3:cd:cf:c4:7e:24:b4:a9:0f:65:3f:
08:41:57:74:19:3b:bc:8b:ff:5c:62:f0:b5:b7:b5:
58:5c:f8:12:0e:f6:a0:3b:d2:88:db:c7:ea:ea:82:
16:e4:dc:46:73:dd:ac:97:e2:b8:43:1c:f6:63:57:
f6:c4:cf:54:a6:97:c2:1e:b2:af:ec:c2:4b:b8:db:
e6:bf:d7:c2:6b:2a:8b:94:0e:b0:b7:70:b4:d9:3b:
91:e6:f2:32:1c:b8:a2:ec:82:3b:e0:9e:cc:76:37:
2a:32:7b:13:ac:93:99:c9:2e:bd:4a:d1:52:4a:1d:
b0:5a:4d:3d:9b:bd:f3:5c:bd:9c:dd:5d:9f:89:b6:
ab:16:e3:8b:36:2c:b9:17:76:a3:2c:57:bc:f3:9d:
f0:c5:c3:e8:85:8e:2a:ef:7a:cb:e3:df:f5:c6:4b:
5e:99:8c:92:c8:e3:5c:d5:e3:8f:2b:b9:bd:4e:48:
2f:f9:b8:19:cb:b3:c5:52:9b:d6:94:e0:d3:e8:d7:
96:99:d2:87:ea:ab:89:bb:a6:da:cf:fc:cb:ce:f0:
ff:a6:9b:0b:d6:aa:33:6a:88:1e:6f:46:08:8c:c6:
51:c2:b2:1e:b9:a0:c9:06:c1:aa:2b:d0:32:4d:00:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:58:74:D2:53:09:04:D1:B9:91:18:92:E4:DA:2D:C5:3C:DB:69
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:4d:68:6a:24:89:9c:68:3f:76:d2:76:8e:d0:96:bb:68:
67:a2:e2:90:a3:54:9d:bc:be:47:47:89:a8:b8:3d:66:ec:b6:
d2:47:cb:06:36:af:93:4d:f9:b3:fd:a0:7e:d9:e1:6b:d2:52:
61:27:a1:e9:80:1e:10:8a:62:f8:2b:ad:06:d4:2a:69:dc:69:
1c:85:9c:4f:ca:a5:07:ce:d7:3e:d8:7c:3c:fb:03:24:f2:9e:
05:ed:f0:17:c2:e3:5e:7b:cc:79:55:48:15:c5:28:26:b2:29:
61:bd:3c:0b:8e:65:02:dc:46:d2:83:62:08:39:20:bb:93:5f:
99:7c:0d:f9:9d:52:1c:69:14:b4:f5:73:b2:98:51:99:2e:88:
2f:97:18:db:61:78:47:29:2b:be:a8:d1:ec:d9:2a:c5:cf:6a:
47:48:df:ca:39:a8:e4:38:bc:f4:9b:92:64:1e:7e:bb:63:26:
95:be:8e:72:e6:65:80:4d:20:3c:41:f3:af:a1:9d:c8:fd:46:
a7:12:f4:ad:4b:48:f7:f4:c4:3c:5a:63:b4:7e:aa:42:d7:fa:
9a:c2:ec:e9:e8:d5:a3:2d:7b:eb:80:a5:e5:dd:bd:7b:b6:d9:
5d:8f:a5:b7:e8:f5:9a:5d:ac:8a:66:6c:2c:c0:24:c0:04:a7:
82:87:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:05 2026 by rpki-client