Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File: 333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier: kUn1y2P3KL9xe63W14bwuN+Rx59vDhy4sgVC5qaT+kY=
Subject key identifier: 3A:E5:47:BF:58:D4:F8:A1:14:69:D5:3C:AF:5C:C7:D7:BB:8A:EC:E1
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 019F92115503C560C032DB22F51D758D940D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 03:00:37 +0000
Manifest this update: Fri 24 Jul 2026 03:00:37 +0000
Manifest next update: Sat 25 Jul 2026 03:00:37 +0000
Files and hashes: 1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: i92ZQ0jvbJWHWiLhutzT1SQ5n4LAAHT+tqgyErUVGoY=)
2: WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa (hash: vaSwxp0zpLMK2TP7PC86d2QeKmyhSzZL++9S55/WavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:55:03:c5:60:c0:32:db:22:f5:1d:75:8d:94:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: Jul 24 03:00:37 2026 GMT
Not After : Jul 25 03:00:37 2026 GMT
Subject: CN=3ae547bf58d4f8a11469d53caf5cc7d7bb8aece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:87:68:fe:2d:37:bd:18:d8:ee:03:43:73:
b5:e8:e1:dd:cf:76:42:98:ad:02:1a:b3:06:6a:b2:
76:5f:75:bc:44:dc:fb:94:c8:ca:75:17:42:24:c7:
44:b3:4f:45:c1:c6:e2:1a:7d:f7:a3:a9:72:7a:fe:
b6:eb:2f:43:da:6a:b6:fa:66:25:a7:a9:b1:7d:59:
ad:08:a6:26:7a:9f:7b:a9:71:ac:02:f8:37:b8:9d:
42:8c:42:a3:54:98:7a:62:dc:a2:09:c2:37:72:5a:
d8:ad:00:a6:28:4e:1e:8c:bc:02:07:c0:91:16:81:
a1:93:b2:ef:9b:d3:fb:92:51:e4:e7:35:f6:6d:ec:
83:c3:ae:58:41:02:39:07:09:9b:d5:2c:66:b9:c4:
1d:23:fd:67:a2:f8:76:01:45:27:9d:8b:8f:12:94:
db:49:99:2a:ea:fb:a0:00:46:b1:0a:bf:f2:cb:91:
a1:82:d2:cb:5e:c2:84:77:82:51:08:f8:96:47:c7:
a7:41:0f:6b:4e:23:1d:a9:e4:68:9f:f1:ae:32:57:
70:64:3d:17:f2:28:27:2e:09:35:6e:28:b1:a8:ad:
7b:a8:b4:ba:6d:1c:3f:c0:92:85:42:26:aa:94:01:
b5:4a:c7:e8:67:5b:56:45:1a:b7:8d:a9:3a:75:9c:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:47:BF:58:D4:F8:A1:14:69:D5:3C:AF:5C:C7:D7:BB:8A:EC:E1
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8a:47:fe:a1:47:31:e1:84:63:51:8e:22:65:fc:22:eb:bd:
02:85:ac:05:16:43:4d:d4:db:c5:db:2e:c4:98:06:00:48:b3:
2e:86:64:66:45:f2:5d:14:58:4b:ac:87:bf:a3:ce:64:aa:11:
36:a2:a5:dd:81:03:5c:47:4a:27:e9:c7:84:68:78:bc:e2:87:
b2:c6:d7:4a:ac:f5:46:7c:22:aa:ed:5c:35:9e:26:d2:44:03:
6f:00:86:7f:7e:f3:b2:15:ec:a0:71:4d:b9:43:1a:7e:5b:74:
f1:d0:21:56:b1:69:b9:90:b1:2e:47:75:fb:5e:50:1a:40:70:
dc:7a:07:05:d2:76:c2:f1:7c:7c:22:f7:86:ad:e4:38:9d:e0:
7d:6e:6d:dd:d0:d6:fb:07:ea:14:37:0e:53:10:48:1a:4b:5b:
54:27:25:62:fc:e3:a6:db:55:66:48:65:cb:14:8a:f8:2c:73:
42:99:04:0b:e9:5a:f8:fb:5b:6a:86:97:56:51:ba:ae:a7:bd:
80:18:f6:b5:a9:75:79:c2:39:8e:00:29:2d:18:92:d6:97:9c:
41:7f:58:38:ea:01:6f:c1:2c:ad:e2:9e:24:ba:11:8d:90:f6:
af:0e:24:91:92:7a:42:75:f5:e0:68:a7:34:6e:e8:c1:b5:08:
1a:c9:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:29 2026 by rpki-client