Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: pggGMafEoyTk1swQVNCmgtiCcqrMSKFZgN8TN0T/+Nc=
Subject key identifier: 4D:7F:70:12:13:1A:B0:63:45:94:FF:25:96:31:EE:30:46:79:3D:6D
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019F92B6A97267781321A7726F55B64425FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1689
Signing time: Fri 24 Jul 2026 06:01:12 +0000
Manifest this update: Fri 24 Jul 2026 06:01:12 +0000
Manifest next update: Sat 25 Jul 2026 06:01:12 +0000
Files and hashes: 1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: R4nCKt9hBzsCdBzIc7LZsyHRtUOy0DP5sMVaUMIRcZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a9:72:67:78:13:21:a7:72:6f:55:b6:44:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jul 24 06:01:12 2026 GMT
Not After : Jul 25 06:01:12 2026 GMT
Subject: CN=4d7f7012131ab0634594ff259631ee3046793d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:2f:79:be:26:8f:32:79:2a:a3:22:8d:db:
7c:42:b4:f8:90:b7:ee:f1:b8:98:42:11:e2:06:16:
d3:ac:97:2a:04:9d:ea:d4:53:8b:fc:bf:3f:47:d9:
40:76:ae:be:b2:07:83:bb:f1:f7:71:90:23:df:e0:
5a:43:1b:55:3e:c1:c2:b1:11:ae:fe:d9:08:21:78:
ef:cd:b8:59:1f:74:1a:e1:ef:89:69:bc:28:4c:4e:
c5:80:e3:3c:07:3e:0b:57:f8:c3:22:4a:27:11:82:
e7:e7:cb:4f:d3:eb:a1:ab:ba:16:b8:3e:b5:52:fc:
69:bf:3f:21:99:b0:7a:30:1e:04:34:de:17:59:ae:
f5:65:dd:47:8f:3b:58:b5:7c:6f:a6:e0:18:c7:65:
bd:c9:d3:a9:28:1d:81:94:a4:34:f6:ba:f5:44:cb:
29:89:e8:99:0c:58:6b:41:9d:35:39:82:3c:6f:b0:
7a:e1:a8:47:ab:1a:c4:3e:4b:65:13:21:58:32:4b:
3e:0c:8f:f1:e8:eb:28:dd:48:b9:ba:95:f7:7f:27:
f7:66:96:8a:37:5a:50:15:ab:e6:93:1f:d8:44:35:
56:44:a5:c6:37:4d:f7:b2:02:85:0d:b3:2d:1c:9e:
9e:92:e6:14:b9:6f:7e:e9:7c:1e:c8:f4:92:e7:fa:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:70:12:13:1A:B0:63:45:94:FF:25:96:31:EE:30:46:79:3D:6D
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:83:15:79:87:af:88:38:e6:34:43:e4:e3:a3:a9:f3:b1:ba:
3d:37:d9:3a:10:a3:ad:41:d3:1c:47:ec:ee:05:14:9e:f2:42:
86:d9:a4:2a:00:b6:50:74:6e:b6:c0:9d:dd:cc:71:b9:4f:12:
d7:e6:37:b1:db:2d:8c:84:cf:55:41:b8:7d:d0:fe:8d:d9:55:
4a:1d:d7:14:b9:fb:41:2a:a9:a6:54:ad:1b:b9:0f:c5:64:e0:
df:a9:38:a8:85:3b:11:fb:35:5d:36:a2:d1:e6:3e:41:6c:83:
0c:aa:75:fe:6e:de:f6:68:bb:4c:bb:4f:3f:2b:9b:90:af:c7:
80:7f:e4:b3:13:19:57:3c:4e:d6:d3:96:91:37:f3:db:ab:b9:
6c:7f:c5:ed:93:e6:fc:b4:f8:3e:22:7f:6c:c8:a6:aa:97:80:
b2:fd:1d:90:96:de:5c:5e:6a:e3:e1:16:f7:0e:d5:8d:11:61:
17:b8:10:e4:9b:cd:49:0b:1e:f6:6f:0a:7e:47:7c:b9:6b:04:
32:0d:a6:85:08:52:77:43:62:59:17:d7:28:1b:cd:c9:6c:94:
fa:aa:7a:c3:79:ce:9d:4d:49:3b:1a:8f:b6:1f:ee:51:b9:56:
21:d2:e4:78:53:36:ed:a6:fd:d3:fc:4f:6b:5e:73:9b:50:e7:
56:61:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:27 2026 by rpki-client