Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: QYHb4kywsfC32JMVsU9r7JfQlyyVAmKI7ovDk7XliGc=
Subject key identifier: AF:07:8A:E0:81:9F:93:03:30:0D:E8:EC:4A:01:79:17:45:A4:BA:54
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019E314E308660A350A72335CA44D98EB5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 15D2
Signing time: Sat 16 May 2026 15:01:08 +0000
Manifest this update: Sat 16 May 2026 15:01:08 +0000
Manifest next update: Sun 17 May 2026 15:01:08 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: Iw2AN07wVV1JYB4+0OYn1YbGPdjMTaugLrgiuXjMb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:30:86:60:a3:50:a7:23:35:ca:44:d9:8e:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: May 16 15:01:08 2026 GMT
Not After : May 17 15:01:08 2026 GMT
Subject: CN=af078ae0819f9303300de8ec4a01791745a4ba54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:20:d3:69:87:31:13:78:c4:13:ea:e6:59:89:
8a:59:45:46:1a:1c:7c:5c:ba:10:9f:e4:85:19:dd:
31:aa:71:02:2e:bb:3a:e0:c1:f8:3c:40:fe:df:ca:
69:7d:ba:81:9d:5a:fb:9d:3c:af:7d:29:53:ec:f0:
5e:1f:85:3e:57:0a:68:85:92:60:22:ce:df:4c:05:
13:cc:3c:9e:c2:91:8b:f4:d7:14:76:22:73:20:67:
dc:dc:40:f5:5d:d7:32:17:a2:85:b8:6f:d7:78:a9:
4f:f2:1f:84:bf:e2:a5:a3:68:8d:80:7a:43:13:aa:
c6:ce:81:77:6b:7d:8d:dd:1a:cc:22:4e:43:28:32:
75:c8:5d:7f:ac:48:65:a0:a7:04:97:48:09:41:4a:
79:8e:f1:10:2f:0f:df:29:41:bf:a3:d8:ff:c9:db:
2f:fe:04:6a:ba:ba:d4:88:e0:62:0a:5d:c1:b7:64:
33:60:a9:77:5c:a9:25:99:d5:26:48:5f:d1:56:5a:
c4:ce:96:2c:2f:76:2f:a4:7c:ec:01:a5:b2:e9:3b:
73:ab:98:9d:97:77:b0:66:34:20:2f:99:0f:b9:29:
02:f1:53:32:37:07:20:02:8a:21:76:0b:eb:b7:e1:
2c:8f:25:12:10:a6:b8:13:3c:a5:bc:a2:07:5c:27:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:07:8A:E0:81:9F:93:03:30:0D:E8:EC:4A:01:79:17:45:A4:BA:54
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:95:f0:e2:36:88:7e:86:aa:f5:a7:5c:4e:7b:cf:1b:a3:63:
ce:b7:9c:c9:2b:71:69:9d:f8:49:d7:c7:cc:6c:7f:2c:48:ae:
9b:3f:67:97:b7:d6:ad:67:e5:6c:9d:15:0e:c8:8d:94:a4:c6:
08:f8:25:d6:7f:4a:8f:fa:47:03:86:6e:60:ed:71:c1:4a:e7:
11:33:86:8b:61:e3:38:4a:4d:72:9c:52:31:3f:a1:dd:63:2f:
13:e9:1c:8e:18:83:78:77:8b:01:14:2d:18:25:0e:05:d7:ca:
92:20:1a:fd:47:7d:a9:fb:de:54:37:ce:28:d4:02:7c:b2:92:
7e:43:68:f5:ac:2b:fa:6d:b9:f8:65:89:9c:8f:d9:0e:3c:ec:
74:32:5b:88:bc:46:71:a3:62:b4:da:24:9a:1e:36:43:33:90:
cf:68:64:83:49:f7:ef:83:57:d6:22:5b:3b:b3:08:9b:d8:a5:
d5:83:fb:29:68:6f:60:ae:9b:9a:a8:b1:df:3d:5c:d5:aa:f9:
bc:09:5f:f2:0e:7d:3c:22:08:9a:2b:8c:f2:f9:84:63:c4:33:
ad:93:48:71:eb:99:22:6a:50:c3:e2:5c:8b:39:9b:a6:9c:6f:
5f:12:c8:0a:b6:3f:ad:e1:14:36:8a:72:4c:70:a9:20:07:a2:
b3:0e:c4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTjCGYKNQpyM1ykTZjrXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm
MzVjMTkwHhcNMjYwNTE2MTUwMTA4WhcNMjYwNTE3MTUwMTA4WjAzMTEwLwYDVQQD
EyhhZjA3OGFlMDgxOWY5MzAzMzAwZGU4ZWM0YTAxNzkxNzQ1YTRiYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iDTaYcxE3jEE+rmWYmKWUVGGhx8
XLoQn+SFGd0xqnECLrs64MH4PED+38ppfbqBnVr7nTyvfSlT7PBeH4U+VwpohZJg
Is7fTAUTzDyewpGL9NcUdiJzIGfc3ED1XdcyF6KFuG/XeKlP8h+Ev+Klo2iNgHpD
E6rGzoF3a32N3RrMIk5DKDJ1yF1/rEhloKcEl0gJQUp5jvEQLw/fKUG/o9j/ydsv
/gRqurrUiOBiCl3Bt2QzYKl3XKklmdUmSF/RVlrEzpYsL3YvpHzsAaWy6Ttzq5id
l3ewZjQgL5kPuSkC8VMyNwcgAoohdgvrt+EsjyUSEKa4EzylvKIHXCdDTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8HiuCBn5MDMA3o7EoBeRdFpLpUMB8GA1UdIwQY
MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt
MmMwY2YyM2I0MjNlLzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl
LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJXw4jaI
foaq9adcTnvPG6NjzrecyStxaZ34SdfHzGx/LEiumz9nl7fWrWflbJ0VDsiNlKTG
CPgl1n9Kj/pHA4ZuYO1xwUrnETOGi2HjOEpNcpxSMT+h3WMvE+kcjhiDeHeLARQt
GCUOBdfKkiAa/Ud9qfveVDfOKNQCfLKSfkNo9awr+m25+GWJnI/ZDjzsdDJbiLxG
caNitNokmh42QzOQz2hkg0n374NX1iJbO7MIm9il1YP7KWhvYK6bmqix3z1c1ar5
vAlf8g59PCIImiuM8vmEY8QzrZNIceuZImpQw+JcizmbppxvXxLICrY/reEUNopy
THCpIAeisw7E6g==
-----END CERTIFICATE-----
Generated at Sat May 16 19:32:23 2026 by rpki-client