Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File: 333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier: l5SePX36dI5Nro0cQ8Qr4jpH3Pkq5CQuQcz77JImNzM=
Subject key identifier: 75:D3:07:58:70:77:40:48:CE:72:C0:89:AD:F7:7E:C8:9D:92:A7:FD
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 019D397799F53C4A692DAB5C7AC8AB553CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: y3m0uBtaIWYRnv7xYDwDVOekcoxW6p/rtb1uHNqYuIw=)
2: WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa (hash: vaSwxp0zpLMK2TP7PC86d2QeKmyhSzZL++9S55/WavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:99:f5:3c:4a:69:2d:ab:5c:7a:c8:ab:55:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=75d3075870774048ce72c089adf77ec89d92a7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:2d:fd:44:1f:d9:72:92:16:62:27:6e:94:
2b:6d:c5:57:59:93:d7:8c:fd:d7:96:7f:99:45:a0:
ea:33:14:c2:2e:5f:a4:5d:f7:a8:50:62:4b:81:e3:
2b:d8:76:e3:59:ba:ba:18:a1:09:84:64:51:a0:0c:
3f:cf:24:b3:cb:fc:5d:ed:27:6f:25:68:63:a7:8f:
92:a6:9c:a4:d6:a1:1d:49:c2:3e:72:cb:f1:31:d6:
ec:1c:8a:c3:b1:4b:01:55:90:cf:37:29:1b:36:df:
8b:63:a7:9a:dc:7b:e3:af:9c:2c:0e:5d:e9:36:a7:
37:e0:0c:6f:6d:72:41:12:22:e1:31:5a:db:16:01:
cb:fe:39:c6:f4:5c:42:fc:d1:0a:e9:fb:6c:d8:28:
85:d2:e8:03:1a:0b:78:f9:7f:93:7c:54:0a:4f:a7:
22:93:ad:17:06:88:67:16:1f:c0:eb:39:32:ef:da:
46:a9:e4:90:44:ba:5a:de:95:59:e2:8f:79:e0:fc:
88:ad:40:07:f1:72:9a:71:92:69:24:22:be:d8:75:
61:1b:40:a9:57:60:de:fc:79:33:39:82:b7:00:3a:
39:33:37:d2:39:3f:86:1e:79:d8:45:10:b6:11:33:
24:fd:f0:b2:0d:13:13:7c:2e:d1:9d:e9:7a:b4:ff:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:07:58:70:77:40:48:CE:72:C0:89:AD:F7:7E:C8:9D:92:A7:FD
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ed:85:3d:21:40:e0:d0:66:d4:06:69:c1:3e:2c:ee:0d:c2:
17:f9:40:c8:8a:9d:34:17:e2:fa:a2:04:70:89:f8:81:95:44:
aa:3a:7d:59:40:11:c8:d8:1d:0b:47:7d:45:39:ea:50:63:17:
63:aa:ca:58:d9:85:95:a8:1f:f3:5a:20:f1:5d:19:de:1f:08:
c7:44:9b:55:6b:bb:8d:f3:fc:36:a6:38:c9:43:19:f7:ef:21:
1e:7c:e1:c3:2b:86:5a:3d:36:e7:c8:3b:6f:85:d2:11:46:8a:
d5:33:a2:81:30:d2:8e:f5:f2:91:68:1f:ad:1d:93:46:50:49:
21:5c:41:51:b7:b3:ac:b1:33:a7:df:57:b8:25:cd:5b:38:9a:
3e:5b:4b:04:47:e4:45:81:8b:32:6e:9d:d3:a4:e2:0c:6d:da:
43:9e:e6:97:64:b8:64:9d:2e:55:0f:44:f7:db:4d:db:5b:e2:
3e:9a:97:15:d7:da:00:0c:b3:f3:1d:43:de:e4:28:3f:1e:96:
95:08:84:95:11:e9:9f:03:2f:0b:74:62:ba:71:3e:83:cb:8a:
4c:26:b5:6e:0c:c6:fa:8b:bd:c2:f9:44:3a:8c:ca:b9:70:68:
70:0e:0b:4b:d6:63:34:d5:b2:df:d3:2a:75:aa:26:31:7c:6c:
e1:ed:d6:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d5n1PEppLatcesirVTzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2RkNjU5NjY3MzdjZThmNjVlNDBlZjJmZWExY2ZmYWZi
MTYyYjAwHhcNMjYwMzI5MTIwMDMyWhcNMjYwMzMwMTIwMDMyWjAzMTEwLwYDVQQD
Eyg3NWQzMDc1ODcwNzc0MDQ4Y2U3MmMwODlhZGY3N2VjODlkOTJhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWgt/UQf2XKSFmInbpQrbcVXWZPX
jP3Xln+ZRaDqMxTCLl+kXfeoUGJLgeMr2HbjWbq6GKEJhGRRoAw/zySzy/xd7Sdv
JWhjp4+Sppyk1qEdScI+csvxMdbsHIrDsUsBVZDPNykbNt+LY6ea3Hvjr5wsDl3p
Nqc34AxvbXJBEiLhMVrbFgHL/jnG9FxC/NEK6fts2CiF0ugDGgt4+X+TfFQKT6ci
k60XBohnFh/A6zky79pGqeSQRLpa3pVZ4o954PyIrUAH8XKacZJpJCK+2HVhG0Cp
V2De/HkzOYK3ADo5MzfSOT+GHnnYRRC2ETMk/fCyDRMTfC7Rnel6tP+FnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXTB1hwd0BIznLAia33fsidkqf9MB8GA1UdIwQY
MBaAFN991llmc3zo9l5A7y/qHP+vsWKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMt
OGFjODk2NTcwOGJjLzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMtOGFjODk2NTcwOGJj
LzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbe2FPSFA
4NBm1AZpwT4s7g3CF/lAyIqdNBfi+qIEcIn4gZVEqjp9WUARyNgdC0d9RTnqUGMX
Y6rKWNmFlagf81og8V0Z3h8Ix0SbVWu7jfP8NqY4yUMZ9+8hHnzhwyuGWj0258g7
b4XSEUaK1TOigTDSjvXykWgfrR2TRlBJIVxBUbezrLEzp99XuCXNWziaPltLBEfk
RYGLMm6d06TiDG3aQ57ml2S4ZJ0uVQ9E99tN21viPpqXFdfaAAyz8x1D3uQoPx6W
lQiElRHpnwMvC3RiunE+g8uKTCa1bgzG+ou9wvlEOozKuXBocA4LS9ZjNNWy39Mq
daomMXxs4e3WVQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:09 2026 by rpki-client