Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: bOQsUoBT3+aMHFLy10tnoKb8uNEsiJpJ9f2SXMliEqQ=
Subject key identifier: 82:66:7A:60:A1:07:A9:75:4A:74:3B:14:68:93:A6:B8:79:4A:04:84
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019E1C105EFD7D70267A6C40FAD67C0E1801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 15C7
Signing time: Tue 12 May 2026 12:01:35 +0000
Manifest this update: Tue 12 May 2026 12:01:35 +0000
Manifest next update: Wed 13 May 2026 12:01:35 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: po+5GuuJos4DHlys+UoGAjfiTfhCn9m2tdg3lKWCEHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:5e:fd:7d:70:26:7a:6c:40:fa:d6:7c:0e:18:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: May 12 12:01:35 2026 GMT
Not After : May 13 12:01:35 2026 GMT
Subject: CN=82667a60a107a9754a743b146893a6b8794a0484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:d2:b9:d5:9d:12:74:f2:43:20:8f:54:87:
9e:1b:99:f9:77:37:e3:07:85:90:de:00:dd:34:50:
aa:f6:57:6d:b3:c2:79:d3:71:57:21:eb:10:8c:7e:
2e:78:fa:91:00:0a:9f:71:e4:e2:ed:ca:ac:3b:4f:
f2:c9:6c:a3:28:90:7c:80:72:e7:79:2f:fa:f5:c2:
6e:b5:c3:65:9b:a8:c0:6e:72:b6:14:d0:d7:9a:9c:
de:c3:c4:15:0f:ca:fb:c9:48:b6:cc:36:e1:7f:5d:
51:fc:17:6a:88:06:67:15:e7:70:fc:6e:ab:c3:51:
70:82:39:40:c1:b8:63:77:0e:8a:8b:18:8e:fd:f7:
aa:e5:b8:2b:ec:e5:6f:39:99:37:c9:e9:e9:5e:6d:
4a:89:21:da:72:40:06:a3:61:c1:ba:58:c4:28:f8:
a1:87:72:ce:05:d6:a7:7d:7b:23:3d:df:74:f0:a2:
09:1c:20:e6:07:7a:2c:fd:e3:d3:97:b9:99:bd:0a:
41:be:49:98:43:c6:e3:4b:f3:3a:08:0a:a9:15:05:
fc:24:49:97:59:b8:8d:12:be:c5:92:5f:e7:79:5d:
1e:c1:40:d9:8e:bf:8e:97:f9:df:0d:56:28:b0:1f:
6e:01:19:00:5d:04:b3:2f:c6:66:81:e6:bf:f7:92:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:7A:60:A1:07:A9:75:4A:74:3B:14:68:93:A6:B8:79:4A:04:84
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:05:a6:2e:a4:b0:83:5c:c8:d7:38:ce:cc:4e:e0:4a:80:
8d:0c:89:16:dd:b0:ee:6e:ee:c9:b4:0b:64:0a:d3:dc:4c:ff:
20:2b:e1:a9:2c:4b:c8:a5:dc:74:2e:2c:2a:5f:71:a1:17:86:
58:02:33:88:16:35:a2:8e:f4:de:fe:c4:26:64:21:6c:10:a0:
ea:dd:be:f1:5c:0e:5b:47:5e:c8:70:b0:b1:b3:fd:26:1e:53:
9b:95:ae:06:6d:b4:4b:ac:aa:80:38:d8:fa:95:c3:84:4a:36:
f5:ff:3a:42:75:e9:e7:25:f7:fc:f2:6e:b0:76:59:76:a9:12:
ae:7b:be:36:86:0f:ef:c3:ec:63:47:35:49:38:ee:8b:81:de:
4a:19:e3:5f:ad:64:66:f0:37:60:d1:36:64:9e:61:65:65:51:
8b:64:fa:72:3d:fa:4c:04:99:12:e5:ef:fb:93:09:69:22:4f:
35:84:9c:f8:b8:fc:e4:1f:ab:8d:c7:04:b7:be:a0:3b:b5:23:
ff:64:59:05:63:17:7d:79:d4:ac:48:e0:43:58:fc:55:17:12:
f4:f8:c7:ca:f7:ad:3d:99:71:56:61:a5:c7:3f:1f:c4:26:98:
a1:bf:6b:47:b8:62:a8:b1:2e:48:92:22:37:e1:43:2a:6a:ac:
91:58:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:52 2026 by rpki-client