Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: 7Oam4kouGganTM7ePS4mYMcODTxwV4+4xHCHla3u0r8=
Subject key identifier: FE:E9:57:15:47:FF:7F:2A:B2:9A:76:C3:00:2D:17:FF:90:20:7C:03
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019E30A9019E66C6ED0D988A14C77990D206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 160D
Signing time: Sat 16 May 2026 12:00:42 +0000
Manifest this update: Sat 16 May 2026 12:00:42 +0000
Manifest next update: Sun 17 May 2026 12:00:42 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: 8aW0nfQKgL2axT8Y+mAV6l2qaOmsN4DCtI2lsRbHqKQ=)
2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:01:9e:66:c6:ed:0d:98:8a:14:c7:79:90:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: May 16 12:00:42 2026 GMT
Not After : May 17 12:00:42 2026 GMT
Subject: CN=fee9571547ff7f2ab29a76c3002d17ff90207c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:69:5d:c7:df:81:ab:d0:b6:e0:82:e0:7f:
94:aa:6d:8e:2f:fd:62:5e:42:55:6e:de:3a:db:12:
97:7b:c3:7f:dc:ef:0b:4d:e3:14:94:3d:a9:3b:56:
aa:9c:8b:e8:4c:73:09:aa:b9:96:c5:d4:e8:2d:bd:
c0:f7:49:6e:01:57:9e:25:aa:78:d8:24:6f:97:69:
5c:75:b5:48:a8:3f:db:53:1c:55:c8:d2:bd:78:4b:
fd:14:d4:e3:9b:63:5b:28:06:ef:bd:51:8e:4f:ef:
81:27:42:1f:f6:aa:29:a3:85:4f:64:c5:73:fe:74:
e6:05:1b:0f:66:7d:2f:ad:ca:ac:e2:49:e1:e3:c7:
ad:ad:3f:76:1c:99:c2:80:66:ba:96:57:d4:4a:bf:
1b:40:0e:82:82:48:d8:38:a5:60:c4:bd:ab:3f:48:
35:60:ea:25:a5:31:51:d2:73:dd:14:54:aa:ca:5d:
07:c6:24:95:8d:25:40:b6:3d:2c:ec:a7:f6:c5:5f:
94:07:30:31:df:97:5d:35:12:d3:f8:98:9d:c4:f7:
d3:7f:cc:16:c8:5e:3b:b0:4b:03:24:5d:c4:66:97:
37:f7:3c:65:42:60:28:da:fa:16:1d:ab:ae:90:5c:
cc:2a:19:ff:b1:7f:9b:76:e1:4b:84:60:37:c2:28:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:57:15:47:FF:7F:2A:B2:9A:76:C3:00:2D:17:FF:90:20:7C:03
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0b:57:93:55:3d:e1:64:bf:52:1b:48:cf:7f:e8:1d:bc:06:
44:ce:74:4a:7b:18:01:10:be:fc:50:cd:f4:65:d9:16:85:b2:
39:0c:e0:d8:ea:cc:91:50:35:20:73:ca:d7:ac:24:c3:b6:e0:
5a:fe:81:e7:c0:49:ce:7d:3b:20:8a:7f:3a:3e:47:b6:4e:c7:
85:fc:b1:2c:f4:69:94:47:95:1f:e0:8c:89:e0:67:28:10:a7:
94:fd:16:dd:4c:fa:7a:8d:56:78:18:03:f6:92:ed:b5:1e:b9:
31:52:34:53:e1:da:55:5e:0c:e8:2c:eb:ff:fd:36:b0:3b:07:
b3:68:29:5f:50:bc:d1:cc:04:37:0d:b2:96:fe:14:19:ff:bb:
9f:17:1f:b1:62:c9:7b:75:84:63:bd:95:e4:66:9f:89:9e:3f:
09:53:8e:b4:51:08:8c:62:e3:ed:fa:85:33:49:a3:17:e2:6b:
06:c7:79:12:c1:d8:f1:8a:21:45:23:01:05:89:05:a5:0f:ae:
19:47:18:c2:da:74:dc:c6:09:96:9d:ee:41:9a:71:9a:ae:4d:
0a:ab:de:bf:e8:08:cc:ec:28:3a:8c:02:76:62:cb:cb:cb:94:
e8:c6:26:c9:12:3a:8f:d1:4f:0a:68:94:fe:d3:ed:f9:e0:e8:
92:f5:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:56 2026 by rpki-client