
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: xNRtn3EfiimF0IWC5fuUjHM8xmJ7sK4FNOSFClXTukg=
Subject key identifier: BC:9E:29:A9:CA:0C:0F:CA:02:AC:E6:BF:FD:D0:A7:50:19:0E:63:A0
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019FA9754F0E9077A31F9804146411151CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0EDB
Signing time: Tue 28 Jul 2026 16:01:05 +0000
Manifest this update: Tue 28 Jul 2026 16:01:05 +0000
Manifest next update: Wed 29 Jul 2026 16:01:05 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: 9CQn89UlWgDmjBYpiwbEuQeWprjvifY0T9e+0/80z9U=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:4f:0e:90:77:a3:1f:98:04:14:64:11:15:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Jul 28 16:01:05 2026 GMT
Not After : Jul 29 16:01:05 2026 GMT
Subject: CN=bc9e29a9ca0c0fca02ace6bffdd0a750190e63a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:09:d1:3f:58:d4:e1:a8:7c:a9:53:19:13:
79:31:ae:e6:5b:f3:ce:56:18:d0:cc:dd:eb:3f:7c:
05:ab:f6:08:e8:6f:81:41:31:8b:06:d7:10:4f:66:
7a:0d:c6:95:72:a5:d7:7e:99:37:3b:ac:85:02:64:
b1:cf:79:26:61:b3:fb:2d:9c:42:33:d1:f5:27:be:
9d:27:d0:f1:75:9b:5d:13:64:cb:64:49:d9:5c:db:
ff:76:ed:87:58:a0:21:ae:a4:31:55:9a:eb:39:2f:
a1:e7:d0:95:6b:04:1f:7d:99:3c:4f:b8:5c:d1:9a:
48:e1:db:69:d4:cd:d4:ff:6b:ec:cf:31:60:a2:34:
3e:c1:4b:b8:ab:fd:76:bd:34:a0:e3:c0:71:dc:f3:
b7:15:56:66:d8:b6:ca:0a:fa:85:12:b4:35:9c:d8:
9a:bd:5b:c8:bf:be:ca:22:25:f8:a2:25:c6:9b:a4:
6a:ff:b2:9a:3f:58:20:24:4f:32:99:44:e6:de:5f:
e4:04:3a:35:05:b8:89:ac:cf:40:be:be:75:76:ed:
b7:6c:d4:c0:3d:bc:b5:43:45:d8:20:41:ed:6f:b9:
48:02:e3:59:51:ae:92:0d:9d:0f:27:99:93:11:35:
14:ab:5c:12:fb:ca:9c:4d:b7:1a:1d:54:db:7a:db:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9E:29:A9:CA:0C:0F:CA:02:AC:E6:BF:FD:D0:A7:50:19:0E:63:A0
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:13:a0:ff:0b:5b:57:31:82:d5:91:1c:2d:c2:a6:b1:9f:52:
a7:da:67:73:41:ca:9f:10:9d:70:43:81:d3:5a:af:2f:c3:0b:
37:49:23:ff:7e:92:42:7d:5e:96:91:89:96:1b:0a:55:2f:22:
38:13:d4:14:6d:e1:c1:bd:2b:c1:54:a7:d9:6a:9f:1a:41:74:
dd:77:c7:a0:b6:a2:f8:b7:28:05:45:2a:c0:3a:7c:0e:6f:67:
61:18:fa:c5:b3:de:df:93:ea:23:22:97:81:67:b9:38:66:4c:
f9:29:94:07:d5:c4:20:d9:2b:e2:07:f2:87:5e:ef:8f:95:dd:
05:c8:26:26:c0:3e:7e:82:65:ec:50:2f:a9:b6:bf:59:62:99:
11:81:31:02:7e:1d:a0:0d:42:df:37:e8:6a:3e:77:79:42:c8:
f6:8f:64:54:3b:00:ae:64:2d:a3:b0:9f:be:7c:4f:8e:0b:eb:
ae:05:bf:a5:28:85:a8:f9:3f:66:6a:19:21:39:25:63:d0:35:
71:5a:30:20:51:d4:28:21:77:eb:36:df:78:54:b6:49:48:b4:
81:0d:ca:2b:09:ff:ea:da:76:d3:87:63:36:8e:3e:9f:40:87:
14:f7:70:37:da:f9:4d:07:28:5b:bd:fd:05:59:c9:6f:da:88:
3c:eb:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:37 2026 by rpki-client