Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File: 333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier: +FemypZwDyTNGDyCdowlCMNySLBH0P6HlO8umUKyVqo=
Subject key identifier: 28:10:8A:9E:8F:51:7B:6F:AE:E3:31:5E:EF:5E:6A:FD:AB:EC:E3:2F
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 019E1D596C9ABA02C21FE8F9D5A284239489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 18:01:00 +0000
Manifest this update: Tue 12 May 2026 18:01:00 +0000
Manifest next update: Wed 13 May 2026 18:01:00 +0000
Files and hashes: 1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: KpO9qYuLLIkDSlrDjBSfWKGEUnyB02wdHbf1UTvUECY=)
2: WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa (hash: vaSwxp0zpLMK2TP7PC86d2QeKmyhSzZL++9S55/WavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:6c:9a:ba:02:c2:1f:e8:f9:d5:a2:84:23:94:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: May 12 18:01:00 2026 GMT
Not After : May 13 18:01:00 2026 GMT
Subject: CN=28108a9e8f517b6faee3315eef5e6afdabece32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:b4:d1:ae:1f:7a:a3:fd:23:ea:fd:54:dd:
35:21:fc:59:4e:92:41:1c:a4:32:de:85:f2:55:c2:
80:fb:e8:60:0b:08:cd:51:c6:6a:c0:27:a0:ac:b7:
73:07:1c:2a:37:33:f3:db:3f:17:d4:5b:7a:e7:49:
ef:03:23:ee:ea:94:b7:e3:ef:67:50:0d:f3:d2:29:
c7:f9:d6:1c:af:80:5f:4f:48:7a:c8:59:34:d6:91:
8a:13:60:b1:a2:2e:ca:46:5b:bd:45:de:73:3a:44:
c6:aa:c1:57:d8:cd:9e:2c:98:0c:80:3b:41:f6:4e:
d8:7b:09:5a:cf:73:a9:ed:d6:24:30:a8:58:73:d1:
75:56:a2:6e:bf:4d:fc:ed:e3:f0:5f:47:ef:1d:3f:
15:7d:06:6e:bd:a0:1e:4a:97:15:ec:79:fb:e9:05:
c6:e4:6e:36:2b:df:66:a6:27:df:5f:2c:c1:bf:12:
9e:2e:44:7c:0d:53:78:2d:74:f8:06:23:7b:50:ea:
94:3a:6b:b0:63:79:b7:45:13:4d:14:20:3a:d3:a1:
7b:91:09:f7:f6:51:b4:b7:9a:22:80:17:a1:47:4a:
57:67:9b:7b:10:22:9e:b9:54:63:6d:ea:d5:2b:dc:
79:c2:a0:33:84:8e:fa:9c:b5:1b:ee:ed:2d:81:af:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:8A:9E:8F:51:7B:6F:AE:E3:31:5E:EF:5E:6A:FD:AB:EC:E3:2F
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:f9:44:d0:40:68:30:89:c4:db:7a:02:bd:de:6c:e2:72:
4c:74:d4:f6:1b:4a:3d:71:e9:b7:bb:40:c6:b3:41:81:43:4c:
a8:c6:ab:17:ee:0f:13:68:25:85:5b:6c:3f:2e:72:41:73:0f:
1f:af:55:76:57:5e:33:48:f7:51:f7:53:98:e5:20:d8:4f:75:
75:00:f0:b5:5c:f7:a4:f3:e6:71:74:be:f0:19:93:e8:4b:3a:
12:3f:92:40:ee:d6:07:b7:fb:a8:9f:17:6a:03:4b:c9:50:b9:
1d:64:51:f3:d2:58:5f:c9:0d:d9:5d:97:af:fc:4a:e5:29:98:
e0:f6:99:52:d2:a9:75:d1:03:0b:72:21:41:00:a0:6d:58:43:
65:66:84:0e:44:f4:62:d0:19:d8:0e:0c:08:45:87:29:61:9a:
f4:ae:33:75:98:b1:fd:e0:a2:15:09:ba:b9:f0:18:07:b2:1d:
79:1f:1b:7a:14:56:94:88:b1:b9:4e:c1:fc:68:36:04:56:a0:
2e:64:2d:4b:68:9e:0d:90:92:be:24:5f:e3:50:b2:7e:ab:eb:
6f:c2:32:13:7c:7f:f2:27:26:91:8c:50:96:c3:fa:6c:16:75:
93:01:a1:5c:03:2b:e2:22:69:35:a7:58:28:16:9c:ea:9d:67:
ea:20:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:31 2026 by rpki-client