Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File: 333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier: L9pHgLwVyhN0GUFZ9UBqyFgNMFK7i4+54SwoLsovC3k=
Subject key identifier: B8:7D:4D:95:D9:FF:37:AC:BF:AF:01:0C:14:74:5F:88:94:4C:BE:81
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 019D2816ED163EA82784E7D1F8F76E48E5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: BNmu35wJRLMAYmmBYYzj/+E1g/uEGrr0J9f16oMnX8k=)
2: WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa (hash: vaSwxp0zpLMK2TP7PC86d2QeKmyhSzZL++9S55/WavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ed:16:3e:a8:27:84:e7:d1:f8:f7:6e:48:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=b87d4d95d9ff37acbfaf010c14745f88944cbe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:f1:50:80:04:22:47:12:1b:3b:20:16:3c:
29:76:f6:07:55:f1:9b:7f:ce:01:2e:8d:bd:91:5a:
1d:e3:f8:f7:c1:d0:42:3a:76:02:eb:32:b5:02:e4:
a7:bf:03:5c:39:71:f6:76:d0:8b:24:ef:9c:35:00:
74:ff:1a:8d:80:bb:67:ee:cc:e8:c2:37:d4:81:fb:
2b:90:47:9d:3c:2e:15:ca:be:af:5e:be:72:44:4f:
fb:f1:1f:60:76:12:41:62:90:1f:0e:23:f7:c6:35:
fe:55:5a:52:21:29:00:3e:e6:8f:2f:0e:cb:0a:4f:
05:c4:3d:cd:7c:6f:2b:6d:07:0b:65:91:4f:e4:81:
53:94:de:53:82:3e:be:f5:03:c4:a9:d6:a5:c3:f4:
07:1b:35:c9:5e:e5:1e:d3:a8:ee:57:b6:fc:11:a7:
2a:db:d0:ef:4c:95:eb:75:f8:a6:fe:04:29:bb:8b:
91:96:c6:3c:6e:77:1e:4c:fa:a0:9c:b4:ba:88:39:
86:1b:9e:dc:ca:0d:f4:af:8a:e8:f1:d7:47:89:9c:
52:65:95:2e:a5:17:e6:4d:78:87:9f:53:83:8e:6e:
7e:bb:6e:8f:ad:1d:00:c2:34:ca:da:7b:9c:f3:cb:
bf:da:b1:77:50:cb:fc:d3:97:3e:aa:04:82:34:65:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7D:4D:95:D9:FF:37:AC:BF:AF:01:0C:14:74:5F:88:94:4C:BE:81
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e6:06:c4:5c:aa:25:6b:56:cc:8d:af:74:9a:24:62:da:5e:
6e:5a:18:65:b8:ad:0b:21:59:e4:07:92:f5:98:7b:3f:a5:fc:
7e:4c:8b:f6:4d:d0:38:e5:99:d4:56:9f:a8:0a:75:c5:68:41:
3b:ef:4c:f5:e8:0f:30:c7:33:c8:f2:3a:02:16:29:4b:5e:a0:
36:16:2e:0b:9e:0d:e3:9d:71:9b:5c:96:1b:de:05:d1:fa:01:
47:1d:f6:ab:34:07:e6:01:8c:26:6b:e8:94:45:94:8e:29:d3:
2c:65:2f:d1:e1:5b:f8:71:de:6e:83:b3:b0:fc:8f:ba:01:57:
60:47:78:35:67:54:50:40:ad:73:4e:2a:5f:1b:0b:1e:ad:67:
ee:0c:19:1f:68:46:11:3f:97:5d:24:5a:ad:38:cb:b3:d8:c8:
2d:da:8f:56:53:54:61:ef:a3:90:75:9d:8f:bb:3e:b4:a1:23:
6b:02:96:d7:36:ad:54:44:2f:e7:86:fc:14:7a:53:97:1e:85:
2a:e9:5e:e8:ed:02:14:bc:36:61:ed:b2:b7:dd:96:bf:c7:3d:
b8:ff:a7:cc:18:5e:95:13:89:a2:42:df:78:bb:68:b3:2f:fb:
ec:ec:a0:33:38:33:3f:73:37:f2:2b:c3:b2:d5:b5:2e:52:62:
06:1b:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:47 2026 by rpki-client