Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: kQvMv4VyzNYUNGleEN6Yn6JK0tf/7OCrhHVx9FVgeuY=
Subject key identifier: 51:8C:51:A3:33:F8:1E:85:E0:37:09:AF:A3:96:DF:8C:4A:B8:47:67
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019FABD12125A9B3DB30E802780EF847EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1696
Signing time: Wed 29 Jul 2026 03:00:37 +0000
Manifest this update: Wed 29 Jul 2026 03:00:37 +0000
Manifest next update: Thu 30 Jul 2026 03:00:37 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: tZgVIu+hI99W10WcYLk6jldQiY7687EPnlteLgur/WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:21:25:a9:b3:db:30:e8:02:78:0e:f8:47:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jul 29 03:00:37 2026 GMT
Not After : Jul 30 03:00:37 2026 GMT
Subject: CN=518c51a333f81e85e03709afa396df8c4ab84767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:66:0f:9d:79:ca:50:46:79:7f:a5:19:d0:
ce:7c:b7:62:5a:53:5e:af:c2:03:cd:52:86:0a:2d:
17:c7:a2:63:a5:4f:70:ac:b3:2f:fb:a5:9b:a0:56:
1c:f1:27:46:38:02:af:a7:14:41:82:81:b3:f1:e5:
84:1e:d5:5a:7a:1f:be:d9:5a:ad:2b:7c:58:48:f3:
99:4b:be:ad:03:40:1f:dc:fd:dc:76:61:84:85:c5:
f9:8e:8d:09:1e:b9:34:6a:4f:10:aa:eb:2b:fb:ee:
08:c2:2b:8e:ce:4f:3d:bb:49:0d:93:0d:c5:77:b5:
cc:be:74:d6:a3:c8:83:d7:50:7a:3e:bd:2a:60:74:
a2:d2:50:23:6f:c0:be:32:b5:ca:83:eb:3a:6f:0d:
14:c4:79:77:bb:81:31:a6:f8:5b:91:7d:d3:94:62:
08:b5:70:b2:a8:42:37:7e:14:5e:93:b7:0f:42:35:
ef:47:ef:3f:d7:ae:00:79:3f:f3:f1:3c:f3:bf:00:
f4:4c:ca:bb:01:43:e4:72:e0:58:c0:99:67:a7:1f:
f9:b3:12:e8:a7:b8:f9:5e:f9:c6:5f:13:2e:68:bc:
b5:3a:31:89:5e:3b:6c:19:70:3d:03:39:bc:95:76:
55:d8:40:98:9c:82:69:40:48:d9:f3:b8:10:a9:0e:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:51:A3:33:F8:1E:85:E0:37:09:AF:A3:96:DF:8C:4A:B8:47:67
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2e:d6:57:49:83:f9:0d:78:2e:21:9f:53:85:f7:83:3a:ea:
4a:ae:8a:1a:fe:47:ee:66:ac:13:b7:b7:bd:d7:35:80:79:cf:
c6:a8:06:d4:a7:de:25:d5:fb:20:a7:39:01:1c:a4:94:c5:cc:
db:e1:da:3a:ae:ac:e3:4a:8d:c7:19:16:3e:ae:e9:fe:23:fa:
bd:3b:6a:01:c9:a7:93:0b:52:70:ab:23:6e:55:87:24:96:f8:
a1:03:fe:29:6d:c2:ed:14:95:83:ce:55:4f:9d:8a:88:d3:78:
21:f1:e1:ea:94:70:97:21:b7:2e:a8:5e:47:0b:5d:43:7b:4a:
22:8a:3b:1d:e3:e6:3b:f1:b4:70:cb:8c:3a:43:7b:c7:2b:ea:
aa:04:a5:a6:27:d6:9a:9e:e4:9a:d4:be:7d:08:7c:00:cf:f9:
85:40:41:3f:35:cd:14:5b:76:33:09:dd:ce:2c:0f:7e:70:e0:
e3:9a:66:23:c0:dd:00:21:4c:85:e7:d3:d2:f2:53:14:56:e8:
fd:65:8f:d9:bd:75:41:54:75:e1:7d:70:b1:dd:f8:0e:f7:49:
e1:10:04:5d:0f:07:9f:0f:d4:dc:bd:d5:5f:a6:53:48:c6:4c:
e0:96:42:7c:7f:70:5b:45:f6:97:ad:e7:8b:e5:84:42:cb:08:
1e:3c:05:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0SElqbPbMOgCeA74R+3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm
MzVjMTkwHhcNMjYwNzI5MDMwMDM3WhcNMjYwNzMwMDMwMDM3WjAzMTEwLwYDVQQD
Eyg1MThjNTFhMzMzZjgxZTg1ZTAzNzA5YWZhMzk2ZGY4YzRhYjg0NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10xmD515ylBGeX+lGdDOfLdiWlNe
r8IDzVKGCi0Xx6JjpU9wrLMv+6WboFYc8SdGOAKvpxRBgoGz8eWEHtVaeh++2Vqt
K3xYSPOZS76tA0Af3P3cdmGEhcX5jo0JHrk0ak8Qqusr++4IwiuOzk89u0kNkw3F
d7XMvnTWo8iD11B6Pr0qYHSi0lAjb8C+MrXKg+s6bw0UxHl3u4ExpvhbkX3TlGII
tXCyqEI3fhRek7cPQjXvR+8/164AeT/z8TzzvwD0TMq7AUPkcuBYwJlnpx/5sxLo
p7j5XvnGXxMuaLy1OjGJXjtsGXA9Azm8lXZV2ECYnIJpQEjZ87gQqQ4gPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGMUaMz+B6F4DcJr6OW34xKuEdnMB8GA1UdIwQY
MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt
MmMwY2YyM2I0MjNlLzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl
LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS7WV0mD
+Q14LiGfU4X3gzrqSq6KGv5H7masE7e3vdc1gHnPxqgG1KfeJdX7IKc5ARyklMXM
2+HaOq6s40qNxxkWPq7p/iP6vTtqAcmnkwtScKsjblWHJJb4oQP+KW3C7RSVg85V
T52KiNN4IfHh6pRwlyG3LqheRwtdQ3tKIoo7HePmO/G0cMuMOkN7xyvqqgSlpifW
mp7kmtS+fQh8AM/5hUBBPzXNFFt2MwndziwPfnDg45pmI8DdACFMhefT0vJTFFbo
/WWP2b11QVR14X1wsd34DvdJ4RAEXQ8Hnw/U3L3VX6ZTSMZM4JZCfH9wW0X2l63n
i+WEQssIHjwFRg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:35 2026 by rpki-client