Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: /4XDLaRKVMQXXhDL2k5V3UwxqIQLrh5HNcZi978G6Gg=
Subject key identifier: DB:FB:D7:7D:5C:23:B7:B2:1D:47:B3:77:FC:82:79:AA:C5:BF:80:49
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019D382EAC9457008DEA8DD94C873251A81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1551
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: +NtnctepxNf0NKgBoj8P8vQ57SO5modgV7pmPfoBPnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ac:94:57:00:8d:ea:8d:d9:4c:87:32:51:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=dbfbd77d5c23b7b21d47b377fc8279aac5bf8049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:78:78:07:4d:7f:29:69:94:f7:79:64:90:e6:
1e:fc:a3:9b:fa:2b:95:74:37:fd:72:d8:d8:d5:6c:
2e:86:d7:16:d8:00:bd:9f:82:c4:7d:39:ef:73:a4:
81:55:e0:95:c5:0e:dc:ab:b7:2b:f4:2c:05:2c:86:
e8:6c:d5:b7:58:c4:b8:74:50:8f:31:86:e9:b8:d7:
aa:3b:fd:94:db:f2:0d:97:8c:90:03:a0:6b:b1:6c:
9a:ce:68:b0:a9:31:42:c6:e8:ba:dd:a8:80:81:8a:
75:e5:60:2c:5f:9c:eb:58:41:91:76:db:88:09:46:
f8:39:00:f6:52:9f:06:d3:2b:bd:b4:d7:75:4e:d7:
f1:ab:71:9d:9a:40:26:dc:28:5a:3b:ba:75:a3:4e:
f6:30:95:53:3d:bf:7b:0c:e9:25:76:03:97:e9:07:
19:58:0e:db:4a:01:0d:c1:e9:39:51:0a:19:65:13:
c2:66:76:91:35:29:1b:41:42:be:ad:8c:77:16:26:
6e:af:b8:f2:fb:2d:da:77:06:65:8d:85:42:14:de:
2a:ce:4e:8b:52:27:41:bb:38:a1:08:1b:39:0a:a3:
d5:18:2c:f0:7b:f0:e0:d5:22:1f:11:85:85:34:07:
ea:01:92:83:1f:26:b1:80:71:7d:56:f2:cb:8d:22:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FB:D7:7D:5C:23:B7:B2:1D:47:B3:77:FC:82:79:AA:C5:BF:80:49
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:f1:f9:27:66:05:3c:6b:78:18:cb:ac:89:51:3f:75:1b:
66:fd:cc:42:47:7a:b9:f0:07:c8:c2:2e:34:ed:5a:13:24:08:
ee:3a:aa:42:d5:2d:7f:d1:be:fd:bb:da:11:97:23:07:e9:a1:
43:48:f9:ce:e4:0f:a3:10:2e:b9:14:32:92:72:3d:b1:91:cd:
fb:43:3d:73:ba:8b:fe:98:ec:64:e1:b4:5d:50:22:cc:60:f3:
82:98:60:d5:98:8a:c5:30:1a:04:62:7b:6d:84:07:b6:d0:25:
be:14:a2:b4:50:bc:80:33:e3:91:f2:26:ed:ba:65:8a:a9:d2:
b0:f8:bb:97:e2:63:54:24:0f:27:e6:35:1f:4b:68:30:69:9b:
82:aa:47:d4:d3:b2:66:fb:b9:f3:eb:8b:0b:01:84:9d:ae:71:
cc:32:b7:09:44:05:92:28:2c:92:86:5c:68:c2:e5:17:a1:0d:
a0:5e:3f:57:c1:30:a9:56:79:0f:79:04:56:a9:1e:7a:65:3a:
38:30:54:2f:0f:bc:2e:9f:3f:d6:f2:eb:d8:cf:2d:bd:46:84:
c3:85:3b:c9:88:80:3f:7f:d5:49:6e:bb:2f:a0:9b:13:59:3a:
a5:3c:7c:10:54:ed:c8:b9:e1:2b:aa:a0:a6:03:ce:d2:6d:c1:
14:f3:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:40 2026 by rpki-client