Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier: vkUc6vgHM+8GPAHPhD0gyvxVAuBUBxVS5EJEpLz7tZU=
Subject key identifier: A9:0C:AC:E1:27:F8:92:27:8C:8E:F3:BB:AC:1B:33:34:1C:36:6D:5B
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019D281689A178CC4FA72E527EA2D5659FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number: 1584
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: copchdueIS2zIvpSdPLunnKwSSQaSs8O8yZhC7Fgus8=)
2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:89:a1:78:cc:4f:a7:2e:52:7e:a2:d5:65:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=a90cace127f892278c8ef3bbac1b33341c366d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c5:30:2b:0b:dc:02:eb:de:15:c3:ce:bd:49:
cc:d7:1e:50:8c:4a:05:30:9c:51:8a:19:9a:5e:65:
64:ec:b5:62:2d:45:93:8f:f7:74:ca:f7:91:c0:f2:
d8:0e:ba:00:15:46:e0:f5:47:ac:22:79:46:09:5e:
67:c7:e4:e1:18:56:3b:11:95:32:0b:7c:aa:de:df:
6a:6b:43:c9:5c:d9:a8:11:ee:9b:b5:3a:a7:5f:3b:
14:da:b4:ae:e7:9a:b5:49:6d:89:59:a1:29:93:49:
db:56:74:12:67:ca:ab:b7:67:6f:1a:ad:9c:c9:63:
c7:d4:04:42:59:75:09:d8:01:cc:8e:6a:3f:3a:e5:
9f:dc:14:da:76:bd:25:86:df:a1:ef:fa:9e:bf:0a:
11:2e:85:1c:d7:5b:fd:3a:4d:c9:cd:46:a4:93:36:
2f:e3:de:0f:db:e3:33:89:06:39:97:54:9f:18:e8:
4a:08:74:d6:31:aa:05:76:d7:e9:81:00:5a:49:7a:
9e:62:7c:12:6d:be:8e:cf:23:59:d3:e1:5c:d7:0c:
58:9f:77:33:ed:ea:2c:dd:a3:7e:45:cd:2c:3d:63:
bd:35:dc:4b:93:e9:de:df:db:b7:97:0f:b1:df:f3:
f2:e0:b2:cf:80:81:70:38:fa:67:6a:df:69:e2:d7:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:AC:E1:27:F8:92:27:8C:8E:F3:BB:AC:1B:33:34:1C:36:6D:5B
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:2d:4b:55:e3:bb:38:3c:70:fd:32:6c:bc:e3:4e:f8:16:
e0:33:f9:be:dc:af:29:a3:4c:c6:f6:13:d8:7a:e5:07:e7:ee:
5b:76:89:d5:29:99:f1:d7:7a:d2:35:10:d8:0f:f9:95:14:1f:
5d:6d:ae:90:d9:16:28:25:be:f7:60:7d:3c:ff:1f:d4:16:dd:
6e:e1:90:44:6b:63:74:7f:94:94:ec:23:43:dd:64:a2:46:42:
27:2a:4c:e5:01:40:7a:16:de:20:4d:c2:10:35:24:1b:7d:07:
8f:44:a4:43:de:32:6e:6c:3a:e6:b9:08:09:da:4e:dd:f0:ae:
e7:8a:99:59:84:a0:a6:3c:4b:2f:b2:c8:e8:41:2c:d0:ac:eb:
ab:d1:8f:30:df:26:c9:a0:29:fc:4e:95:2c:6d:28:74:bf:68:
24:3a:7b:a4:98:7c:db:75:db:7c:a8:a8:7c:27:20:c7:13:8e:
ba:18:ac:41:17:6c:b4:d0:15:d6:fa:27:9f:81:73:6a:16:35:
5d:9a:38:45:66:d4:9a:ed:50:52:51:0e:fe:48:4c:a5:88:5d:
3f:62:f2:c9:6f:69:dd:98:13:81:4d:fe:12:99:09:b8:fc:99:
d2:7f:0e:a1:a7:f9:34:dd:d5:d7:09:21:97:33:6e:2c:0d:9b:
54:e2:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:50 2026 by rpki-client