Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: kDXM2tvZBm8hHRfXo3ZimrOE2tv4Nm4UTbQ1oeNBBkM=
Subject key identifier: 84:B1:F8:87:50:27:9B:4A:6E:2E:BE:67:7E:74:95:85:B5:2A:DE:94
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019E1D592FF5594500BE16AAD6240001B9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 1603
Signing time: Tue 12 May 2026 18:00:44 +0000
Manifest this update: Tue 12 May 2026 18:00:44 +0000
Manifest next update: Wed 13 May 2026 18:00:44 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: 8r1HAz0rvmYeIU3NVWyHXIGpwxEewwHgCGtZzzO+FLw=)
2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2f:f5:59:45:00:be:16:aa:d6:24:00:01:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: May 12 18:00:44 2026 GMT
Not After : May 13 18:00:44 2026 GMT
Subject: CN=84b1f88750279b4a6e2ebe677e749585b52ade94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:ba:80:8c:dd:12:43:ba:03:9b:fd:0d:ea:
c3:8e:4e:17:6d:a4:88:94:4f:60:60:15:97:22:f8:
28:c5:99:7e:7d:cf:32:57:70:04:42:e2:ee:9a:68:
72:a7:5d:29:95:d1:48:ea:61:fc:e0:0a:96:8e:97:
cb:15:5c:b7:f6:25:6b:52:18:79:ef:7a:87:4e:7b:
52:46:7d:0a:c5:62:47:fa:f9:85:e5:bb:8d:ee:54:
14:db:b1:f9:88:c6:e2:4d:77:d4:91:57:78:76:56:
1f:3f:1f:72:ab:12:2b:8b:5a:e2:4e:82:22:0a:0a:
00:b2:a9:c1:73:6e:5a:32:d0:e0:9a:8e:85:ad:ce:
3a:ae:54:f1:dc:fe:14:44:83:90:83:7e:c8:3a:ca:
d8:6a:a7:10:9e:9e:40:13:81:b8:da:d0:60:fd:9c:
fc:90:37:32:54:63:a2:7c:eb:d4:64:27:f2:93:5a:
66:b7:9d:c3:c6:16:3e:f1:ad:40:fb:d9:13:16:95:
8f:7b:a1:69:bd:be:6e:a9:a3:b8:63:e4:e3:46:93:
81:36:5e:60:fb:c5:95:4b:3b:32:8f:d4:42:dd:85:
70:5b:37:9f:2f:ff:8a:99:d2:eb:23:31:0b:4a:9c:
0c:e9:0c:bf:83:77:02:e5:29:c8:56:37:4b:41:56:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B1:F8:87:50:27:9B:4A:6E:2E:BE:67:7E:74:95:85:B5:2A:DE:94
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:91:b9:4c:36:ff:c7:89:ba:f7:c1:aa:38:2b:b5:33:03:df:
90:3b:9d:4a:b4:61:ef:06:fc:2c:f9:f7:f0:0f:10:4d:4d:9c:
4c:cd:65:d2:f0:20:2d:c0:35:3e:8c:44:17:cd:d1:88:00:fb:
b1:f8:93:96:16:78:71:8e:56:54:a2:18:6c:f7:a1:fc:44:61:
02:3a:7f:1a:77:32:59:11:da:e3:03:47:b6:08:8f:08:24:e5:
bd:89:28:8a:fd:42:b3:f0:0a:48:6a:e8:dd:e1:b8:f8:07:26:
97:63:a0:15:d1:96:e8:11:d3:7b:14:84:23:dd:0c:53:dc:fe:
e2:cf:b3:91:48:c3:d0:e4:7a:65:3f:df:30:03:40:cf:24:12:
80:07:33:78:50:1d:2b:af:76:ca:13:33:07:59:a0:fb:88:98:
ab:7c:7c:18:5d:40:a0:4d:0d:7b:6c:ce:f4:f8:7f:b9:ab:f7:
14:8d:a4:bf:f7:d4:50:3b:03:75:6c:78:f1:1e:3a:7b:12:9a:
9f:47:87:71:c5:14:2e:e2:af:14:8e:ec:d4:de:60:5e:ac:ce:
86:cb:70:27:cb:e6:43:01:38:c3:2b:ee:32:5e:22:b1:1f:64:
86:2e:7d:b8:1c:37:a3:77:7d:75:bf:44:e8:1e:b8:d8:98:9f:
32:98:b1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWS/1WUUAvhaq1iQAAbnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0
ZDBjYTAwHhcNMjYwNTEyMTgwMDQ0WhcNMjYwNTEzMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg4NGIxZjg4NzUwMjc5YjRhNmUyZWJlNjc3ZTc0OTU4NWI1MmFkZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fu6gIzdEkO6A5v9DerDjk4XbaSI
lE9gYBWXIvgoxZl+fc8yV3AEQuLummhyp10pldFI6mH84AqWjpfLFVy39iVrUhh5
73qHTntSRn0KxWJH+vmF5buN7lQU27H5iMbiTXfUkVd4dlYfPx9yqxIri1riToIi
CgoAsqnBc25aMtDgmo6Frc46rlTx3P4URIOQg37IOsrYaqcQnp5AE4G42tBg/Zz8
kDcyVGOifOvUZCfyk1pmt53DxhY+8a1A+9kTFpWPe6Fpvb5uqaO4Y+TjRpOBNl5g
+8WVSzsyj9RC3YVwWzefL/+KmdLrIzELSpwM6Qy/g3cC5SnIVjdLQVbQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISx+IdQJ5tKbi6+Z350lYW1Kt6UMB8GA1UdIwQY
MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt
ZjkyMTI4YmU4Yjc5LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5
LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz5G5TDb/
x4m698GqOCu1MwPfkDudSrRh7wb8LPn38A8QTU2cTM1l0vAgLcA1PoxEF83RiAD7
sfiTlhZ4cY5WVKIYbPeh/ERhAjp/GncyWRHa4wNHtgiPCCTlvYkoiv1Cs/AKSGro
3eG4+Acml2OgFdGW6BHTexSEI90MU9z+4s+zkUjD0OR6ZT/fMANAzyQSgAczeFAd
K692yhMzB1mg+4iYq3x8GF1AoE0Ne2zO9Ph/uav3FI2kv/fUUDsDdWx48R46exKa
n0eHccUULuKvFI7s1N5gXqzOhstwJ8vmQwE4wyvuMl4isR9khi59uBw3o3d9db9E
6B642JifMpix+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:05:59 2026 by rpki-client