Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: S2SgdS7gSQXBvSfkZYB7E9bqHOmCljVVnaTPo94utpE=
Subject key identifier: 63:35:B8:FA:83:BB:B5:78:09:42:12:B4:96:1C:ED:46:76:2B:1F:56
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 01A0C2C469E1F31F4C69D311848BE706D103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0C71
Signing time: Mon 21 Sep 2026 07:00:47 +0000
Manifest this update: Mon 21 Sep 2026 07:00:47 +0000
Manifest next update: Tue 22 Sep 2026 07:00:47 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: B0pPMtmbDpboBRHTg2vCWjI9dVHgXDRAnVr+l05kH5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:69:e1:f3:1f:4c:69:d3:11:84:8b:e7:06:d1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Sep 21 07:00:47 2026 GMT
Not After : Sep 22 07:00:47 2026 GMT
Subject: CN=6335b8fa83bbb578094212b4961ced46762b1f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:ee:5b:ed:5e:4e:53:4c:41:74:d8:69:d4:
a6:51:e5:e9:e6:bd:22:00:fd:7c:17:33:27:8c:95:
0f:69:89:66:a6:58:38:6f:33:08:8e:e3:ca:8b:c4:
bb:c3:b4:92:07:33:75:42:a7:f2:da:51:cf:06:41:
9e:2f:c3:2b:95:6b:cc:67:e1:f9:ca:e0:5b:e7:61:
5f:0d:6f:9d:e4:59:a2:42:3d:cb:e4:ba:94:58:e9:
1d:4a:ce:60:85:15:df:41:fc:0b:1d:fb:b1:11:6a:
70:ab:3a:70:0f:e8:14:82:66:a9:ce:c9:b6:5c:55:
92:65:8a:d8:13:17:77:b3:08:37:20:be:e7:a8:c4:
49:8f:e9:c4:a2:79:d5:4a:ed:35:bb:c5:f5:a4:fd:
45:4a:a3:9e:c0:fd:46:31:17:84:a0:52:14:ff:66:
74:93:1a:87:aa:7a:af:4b:65:b7:33:fd:de:3b:a2:
4e:da:36:96:c8:c5:b3:96:fa:fa:93:0f:01:28:5e:
44:a1:b7:58:d4:09:8f:ae:a4:e3:69:7b:7d:bd:0d:
2e:48:ac:4e:bf:68:53:cd:fc:e3:20:01:9a:fb:7d:
f6:02:d0:8e:df:a4:a6:c2:23:33:d4:0b:97:3b:54:
ce:4c:6c:75:53:92:a3:ca:58:27:ff:ad:d2:0f:b5:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:B8:FA:83:BB:B5:78:09:42:12:B4:96:1C:ED:46:76:2B:1F:56
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:95:cf:18:dd:4a:71:10:3e:5d:0f:70:e8:37:8e:fe:7f:d9:
12:62:40:c9:09:3b:58:fb:5e:f4:a7:45:77:7c:ad:d4:a2:fa:
ca:fb:72:46:27:47:f0:3d:52:c5:8e:ab:af:95:bc:82:73:68:
e9:a3:08:3f:44:b5:e5:5a:a8:02:f5:3b:a2:7f:5e:d7:a5:6b:
c0:c3:0f:7c:7a:a5:46:a6:5b:cc:e4:3f:30:e1:ad:9b:de:96:
7d:b5:02:f3:54:ef:58:a5:42:98:11:7a:5a:0a:c9:f7:e4:2a:
ef:d4:31:a0:39:b9:3d:2c:6d:74:89:df:c6:57:b0:0d:06:0a:
1a:4c:23:ef:41:d2:59:db:6b:24:39:71:0f:b8:71:1d:81:08:
59:18:b1:c5:c3:a1:9a:b2:67:57:3b:2b:09:3d:a5:7f:11:ee:
00:e4:f7:ee:c5:dd:86:5a:17:1f:7b:9a:9b:65:eb:20:90:67:
0a:95:1f:cc:c2:16:5e:74:cd:cb:7e:7c:62:8f:aa:cc:56:ad:
b0:9b:95:00:80:f0:b3:78:8e:69:63:ea:63:38:c1:e5:c7:81:
6c:b3:b4:82:01:93:e4:03:b7:04:04:6f:50:f3:13:a0:3c:e5:
7e:e0:57:60:76:81:d0:7c:8c:1d:a1:c6:d4:49:de:f0:77:e4:
0a:25:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:37:44 2026 by rpki-client