Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: XVZjz9qZHBBixAoC5z7c8pRI+o8NoNj7ik5sUFiStro=
Subject key identifier: D3:CF:F6:65:A2:43:79:FC:9F:77:94:20:8B:C5:58:B7:9C:6A:0B:2C
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 01A0C7B39FFD5329049EC3411F47B514B766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1729
Signing time: Tue 22 Sep 2026 06:00:32 +0000
Manifest this update: Tue 22 Sep 2026 06:00:32 +0000
Manifest next update: Wed 23 Sep 2026 06:00:32 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: 5yw2D3Uf83tTuTrYYAaBnm1z0zcf4s2DUkIFmOizjmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:9f:fd:53:29:04:9e:c3:41:1f:47:b5:14:b7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Sep 22 06:00:32 2026 GMT
Not After : Sep 23 06:00:32 2026 GMT
Subject: CN=d3cff665a24379fc9f7794208bc558b79c6a0b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:b8:25:e1:18:05:6e:3a:83:08:dd:ca:2e:
a6:5c:94:28:33:38:66:ec:58:a2:74:16:af:6a:50:
03:e1:ff:09:9d:39:8c:7e:7f:60:06:14:fb:ce:5b:
19:8a:82:4e:ec:41:8c:93:ae:aa:04:01:61:a3:c7:
81:9e:50:bc:01:e3:1c:b5:59:0e:56:22:7f:91:46:
90:41:99:12:5a:c9:1f:8c:67:bf:b3:b8:b7:5d:5e:
84:94:4c:9f:f5:41:5a:7f:de:df:ab:01:bd:fc:e5:
0b:11:71:45:6a:95:c5:b1:ca:ea:20:0d:f2:c5:61:
92:1d:db:cd:3b:03:9a:f4:69:54:66:c8:24:66:c7:
35:39:65:96:a7:b8:b8:d5:05:cb:83:ac:5b:08:43:
b1:bd:52:07:71:d3:a2:78:d8:48:b5:a5:32:63:25:
79:9e:63:29:7f:ca:2a:4d:62:a3:3e:61:b9:f1:a0:
b2:87:58:58:c6:6e:71:ad:b9:eb:2a:11:8d:f8:42:
3b:15:b3:54:7d:33:ea:eb:66:75:e7:f8:e5:e6:4b:
df:54:3c:5f:b9:48:2a:e9:52:8b:a7:bc:0b:5b:74:
54:97:5a:a9:95:0c:a1:a4:b0:24:2e:34:e8:1a:e3:
37:22:ba:95:f8:43:cc:d2:1d:9f:dd:ed:50:2b:e5:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:F6:65:A2:43:79:FC:9F:77:94:20:8B:C5:58:B7:9C:6A:0B:2C
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:62:cf:a6:26:7b:a8:80:ea:d8:56:c2:f1:01:7a:4d:d8:9b:
02:d1:7b:30:96:f7:64:2b:76:06:28:68:aa:f6:7d:8b:1c:ed:
a4:61:c5:7a:49:89:d2:50:42:2b:3d:86:39:cd:54:28:6f:86:
6d:b8:ab:6f:d8:0d:81:92:ea:60:07:31:9a:bf:58:a3:b5:f6:
b7:29:28:5e:39:c8:fc:91:fe:fc:4f:2e:cd:3f:50:89:08:f0:
ee:fd:74:21:e6:c1:dd:d2:60:2d:be:d4:7a:1c:7c:49:58:5f:
dc:07:8f:84:f8:f1:91:3f:18:99:b6:9f:77:78:9c:6a:73:32:
2c:d5:76:7b:45:92:b1:2a:06:e5:d9:87:93:95:73:2a:dd:25:
6b:9f:60:99:b7:54:c8:5b:70:73:7c:36:fa:d0:3e:b7:ac:0d:
a5:78:67:f2:11:0e:d3:65:e7:bc:b0:e6:fa:69:94:65:dc:e0:
77:fa:15:55:7a:c1:06:3b:a0:98:e2:16:2b:51:a2:0e:30:1e:
85:81:a9:9b:b0:87:83:d7:5e:97:5d:41:fc:90:af:c8:d9:d3:
e9:d8:e4:a1:51:7b:0c:5b:43:8b:0b:af:7d:2f:9e:64:42:c5:
e6:02:7c:f5:04:ae:9a:dc:8f:ac:09:e0:a9:8a:1b:6e:cb:73:
dc:77:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:38 2026 by rpki-client