Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: ncZ2Iv71FpmX7umtQBlStnnQA2lyU6kpur5vKP3SBpQ=
Subject key identifier: CE:56:5D:0A:B2:6F:0F:4E:DD:40:24:67:EA:6E:C9:46:4E:69:31:D2
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019D9A06FEFB2F7213E00CC67BEC4661AD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 15BF
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: E2/MYchFaj5dPfIEeJcdkIpwxgu8pfQDGGt9QIrQ7XE=)
2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fe:fb:2f:72:13:e0:0c:c6:7b:ec:46:61:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=ce565d0ab26f0f4edd402467ea6ec9464e6931d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:cb:38:6f:f9:2c:6b:58:8b:5c:66:15:d7:
e0:ba:82:a3:ea:ba:ed:59:f1:db:1f:4a:35:3d:51:
c7:c8:78:13:4e:f4:53:d9:2e:f1:a4:0b:25:56:5a:
87:48:24:f6:04:58:58:25:9d:c5:74:8c:51:fc:f2:
4e:8d:d5:73:32:13:6f:f0:e6:f3:a2:cc:6b:f0:6e:
b7:0f:ec:b1:93:cc:82:be:68:8c:95:41:78:6e:10:
16:38:62:87:6c:9f:5e:8f:fa:b8:98:c5:4f:5b:37:
36:7d:f0:9a:07:84:af:9d:2f:0a:4d:11:c2:34:2d:
81:71:23:37:5f:b3:88:25:38:29:89:a3:47:00:2b:
68:97:aa:6d:c7:46:18:b7:d2:71:6b:8a:b4:01:a2:
88:8c:57:16:09:3a:00:d8:f7:8d:86:86:4d:1f:bd:
8d:40:02:05:4e:aa:21:b4:8d:dd:94:63:0c:b6:47:
81:d5:33:51:6c:d0:5c:d5:4a:1c:1c:21:63:be:91:
b1:e6:1d:27:9d:f0:f6:d3:3d:63:c7:d3:42:fb:29:
06:17:77:c2:d1:f9:55:ec:c0:81:8f:5f:c1:81:53:
13:1e:cb:d8:f0:a3:11:7e:25:49:d2:d7:04:c8:46:
78:d8:e0:c4:3a:de:38:f4:fd:fa:d0:59:70:0e:e6:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:5D:0A:B2:6F:0F:4E:DD:40:24:67:EA:6E:C9:46:4E:69:31:D2
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:00:23:23:35:a1:89:f4:7e:e1:7b:81:16:69:e9:bc:19:ad:
41:3f:df:b6:aa:cb:e1:e0:ac:ea:71:4b:9f:2c:5a:b5:7d:9f:
dd:ce:87:2e:f7:31:3c:59:9d:ca:cb:3d:a7:20:82:30:f6:23:
5d:fa:ed:7e:ae:0e:08:24:95:00:b4:82:ca:cb:61:d0:b8:52:
c6:54:cc:d7:b2:1c:39:54:3f:07:d9:42:d8:b5:8b:81:2a:e6:
9c:0e:3a:50:30:6b:21:ea:87:4d:ab:ab:6f:62:87:13:96:de:
4e:7e:70:28:48:46:a3:db:5a:7d:8a:4d:23:78:ae:7f:c1:b3:
9b:42:66:e7:ed:e4:69:b5:0c:91:21:c2:aa:c9:de:0f:29:d6:
80:64:af:d5:76:b4:6f:9a:8e:16:64:76:65:8e:60:ee:9d:6d:
d7:5d:d9:07:d6:72:3b:29:47:83:c6:19:22:99:87:1f:78:b7:
40:d8:d5:c2:10:5d:fa:e2:74:c6:b8:6c:5e:41:52:51:91:e1:
02:a1:e0:fe:32:7d:ea:e0:34:28:37:09:0e:12:cd:22:c8:9d:
05:3f:ea:f3:68:06:a4:5f:8d:65:51:8d:5a:fb:6d:40:f7:17:
73:f3:b8:aa:18:01:32:7d:fe:e7:a3:7c:ab:79:1b:f2:1b:bd:
59:61:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:37 2026 by rpki-client