Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: 4MENeboZKiJi7FsvbW5pXvAkwxgYPPK5r5HjW3aFmks=
Subject key identifier: 6E:66:83:72:18:8B:0C:94:00:A7:2B:D1:01:1D:6E:9C:5C:C7:1B:01
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019D9AAC3B5CEDD45739B262A1BA5B642D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1584
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: x4U6Md2MArKct0K5FYPL6f3Ge8s7CX5ziyPPcgfDlD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3b:5c:ed:d4:57:39:b2:62:a1:ba:5b:64:2d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=6e668372188b0c9400a72bd1011d6e9c5cc71b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:42:b7:71:d5:7f:ec:76:3e:a1:be:eb:cd:
cd:45:3e:90:0c:96:7f:e3:1a:0b:0f:50:45:b0:17:
01:f4:5a:d1:21:48:93:0d:17:82:38:0d:55:e3:a5:
0b:78:45:6a:3a:66:cc:c2:2f:f1:a5:f4:91:48:66:
2b:82:3b:ca:59:b2:3f:6a:f0:ba:58:22:3c:3f:1c:
f0:df:4b:c4:21:dd:ca:0c:f6:5a:bb:e9:b5:65:ca:
88:67:36:62:49:54:72:eb:f9:1d:43:2a:ff:3e:10:
7c:c5:7e:35:86:28:3b:48:db:3a:85:71:f2:01:d7:
f5:24:a5:00:cf:7f:fd:27:bb:1c:ae:10:67:7b:a8:
44:61:83:46:8f:39:d9:ae:bf:b7:db:16:d8:3f:2e:
bc:9b:7e:b1:9b:21:96:1e:88:4b:c0:66:3d:d7:dc:
a5:6a:b9:d7:38:e2:a6:28:79:ce:cc:51:b1:c0:49:
27:76:fa:97:95:12:25:27:e8:00:2d:38:bb:4f:0d:
ab:12:85:c5:1f:16:16:83:bf:af:aa:70:67:06:5a:
0a:eb:b4:29:a5:7a:80:95:9b:40:f0:13:2d:03:0d:
b1:e6:a5:f2:86:9e:bf:f4:01:71:ed:0c:b1:2e:5b:
22:cc:d4:15:58:fb:0c:8a:2a:97:be:e5:ac:1a:91:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:83:72:18:8B:0C:94:00:A7:2B:D1:01:1D:6E:9C:5C:C7:1B:01
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:78:65:cf:4c:33:96:e8:18:a3:4e:aa:9a:d1:4a:08:11:
7c:98:c8:5b:2e:ee:47:cd:98:70:a2:15:5a:6e:bc:4e:89:d2:
13:a6:3e:a0:f3:55:da:4d:8d:95:21:6a:23:ee:08:d5:da:8b:
57:24:c5:96:b6:e5:ca:b1:02:e6:f0:97:f8:1a:88:51:ae:81:
06:aa:10:e7:b8:fa:9d:25:d8:d6:d3:59:ce:b9:6d:75:e4:09:
1d:5f:53:4c:e4:2e:52:03:8b:f5:a1:5d:a8:10:dc:90:b1:d3:
98:d4:c5:ae:83:79:51:df:71:0e:99:2a:5a:e0:49:a7:7e:e1:
cd:8c:f6:7c:c5:59:cc:5e:05:bb:c1:ba:53:84:92:5f:3c:ab:
45:e1:8d:bd:dc:8e:24:a0:15:bd:29:73:2e:a5:9e:e6:be:7e:
83:42:87:ee:29:2e:f1:e1:92:b0:19:3d:71:f8:5e:2d:c7:a3:
37:d7:46:31:05:0a:04:52:7b:b8:42:c0:70:81:3f:df:6d:6a:
f7:ba:4a:17:50:12:67:0c:53:93:18:ba:ef:2f:a3:3a:76:9d:
48:7c:fe:32:97:9e:29:ba:86:16:0a:3a:f9:54:9d:55:69:f7:
40:4e:a3:8a:dd:73:7a:dc:d7:a3:c4:19:5b:eb:2a:47:0c:9a:
4f:d3:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:50 2026 by rpki-client