Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: 4JgeRrv6rhVdt570xvGloGJAu/aDRDC24hvcsc1y6Zo=
Subject key identifier: BD:31:43:A4:D9:70:3F:F0:63:B9:BA:BE:F6:5C:C5:3B:FE:83:69:45
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019CAAC67C037B854CEF473F998D7B8BB821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0D4E
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: 1JuHfUUFpauFAuwMMvkDQrBI3ffJbk3j3CvPBRmWmCw=)
2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7c:03:7b:85:4c:ef:47:3f:99:8d:7b:8b:b8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=bd3143a4d9703ff063b9babef65cc53bfe836945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:b3:0f:4a:9b:32:c0:8c:4f:cb:d0:f7:d6:
2b:14:31:d2:4a:64:7b:4f:ec:c6:26:3f:88:e9:c9:
76:d5:3a:d4:c4:2e:c5:4e:06:2a:0f:a1:69:a9:6a:
c1:2e:b8:97:bc:64:3d:75:1a:d3:9f:de:34:02:37:
6d:24:56:a4:f3:5a:72:c7:38:8e:e0:84:a3:88:27:
6a:80:91:b3:fd:f2:cb:ab:db:b3:e5:fa:aa:ea:b7:
98:14:73:42:3a:70:ca:22:73:62:2a:73:30:25:bc:
5e:4e:c2:dc:2a:ac:cf:21:27:d7:67:f2:2c:1a:5d:
24:c4:51:a5:c9:66:7a:73:23:9b:1b:0b:b5:93:72:
85:9a:c2:bd:cf:6f:3e:f1:38:49:2a:d5:c0:a0:da:
e1:df:ce:1b:fe:7d:a6:04:cf:19:51:51:3d:9c:1f:
3f:d8:61:6a:2b:96:81:e6:d4:b6:14:a2:08:87:df:
18:ae:53:6b:e2:60:f7:7c:3d:42:e8:5d:59:26:d7:
ee:2d:38:21:f9:48:31:19:af:69:f3:b7:7a:b3:a0:
1f:d3:2c:19:18:38:b0:f5:c1:ad:0a:3d:a4:01:15:
9f:d6:48:28:12:50:76:91:1b:21:58:50:34:6c:b7:
9a:d7:a5:30:00:28:93:98:65:31:bf:b2:1d:5b:3d:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:31:43:A4:D9:70:3F:F0:63:B9:BA:BE:F6:5C:C5:3B:FE:83:69:45
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e6:e7:0f:5c:0b:e9:de:0c:85:2f:ea:c8:96:5d:5a:e1:e4:
37:7d:f1:34:2f:73:c2:51:81:1b:a7:a3:8a:87:b2:46:0c:5b:
16:ee:4e:4f:a3:fc:0a:29:f7:23:00:9b:c6:ce:4e:a8:49:21:
a5:07:13:e2:92:1d:bf:4b:31:42:49:1f:6f:51:f5:cc:4f:e6:
b7:72:4d:ea:7e:f5:81:40:e4:5b:29:81:36:2d:01:b3:19:1f:
c5:ae:12:86:08:75:a1:a0:6b:f7:d6:93:a6:f5:e1:2c:57:a9:
06:fa:20:08:48:cc:a9:3e:83:d8:a5:17:17:0c:73:09:46:b9:
75:f7:d4:24:bf:ab:43:0a:3e:96:1a:5a:eb:ce:ec:a5:a1:f3:
53:ca:73:51:d8:17:d0:cf:b7:5d:62:31:ea:8c:5f:b5:2f:5f:
14:b0:94:64:0f:2d:24:ec:74:9b:5f:ec:42:1c:84:49:69:a0:
4c:93:c6:5a:20:26:5c:34:d0:3d:b9:ac:d9:92:4c:27:59:e3:
96:44:f6:be:d3:22:66:6a:70:25:1b:4e:d3:0a:98:41:80:e3:
ae:dd:c5:ee:57:88:d6:c4:03:40:7c:75:88:ba:de:36:ba:0a:
64:21:70:65:d2:48:aa:9f:d6:7a:2a:e4:ff:9e:42:c2:9b:86:
36:3a:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:52 2026 by rpki-client