Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
File: 338uDqUtnkbtcQSFPG1RRlqso2c.mft (raw, json)
Hash identifier: NXbLvUExlPEXhtiY/ZmEWqjJIBolFOgf33iyOmryRp0=
Subject key identifier: 5A:1D:71:D4:3A:73:59:FE:7B:C9:3D:0C:B8:3B:79:0C:C7:D5:BC:CC
Authority key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Certificate issuer: /CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Certificate serial: 019F927ED9516C792ACF3EB00F3182EE96BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
Manifest number: E9
Signing time: Fri 24 Jul 2026 05:00:14 +0000
Manifest this update: Fri 24 Jul 2026 05:00:14 +0000
Manifest next update: Sat 25 Jul 2026 05:00:14 +0000
Files and hashes: 1: 338uDqUtnkbtcQSFPG1RRlqso2c.crl (hash: 8hQwMOWXJkZR3yPqjcwB0lB9Rh0eEQXEWU/misX1gN4=)
2: rkqbD4HeLY4fECgG4UCjCwTiZaY.roa (hash: rtmOzCRpMS+pQkVbuV9E2mfbRX0MvxLvH1ZciUH4P8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:d9:51:6c:79:2a:cf:3e:b0:0f:31:82:ee:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Validity
Not Before: Jul 24 05:00:14 2026 GMT
Not After : Jul 25 05:00:14 2026 GMT
Subject: CN=5a1d71d43a7359fe7bc93d0cb83b790cc7d5bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:e2:f6:68:62:f9:f5:90:d9:3d:31:19:c1:
80:da:42:c4:3a:f7:43:b2:cb:a2:bc:90:71:e9:78:
eb:17:b0:fc:25:93:62:c9:5f:83:6f:68:cc:d3:f5:
5c:24:f3:f4:03:9f:e4:5a:12:7a:fb:ba:a2:8c:e1:
6c:10:37:c8:4d:dc:e9:44:fe:f0:c4:05:9b:fe:89:
e1:40:e5:45:2a:12:22:33:2f:d2:96:c1:d8:87:bc:
8a:fa:e1:25:fb:df:39:41:07:68:6d:74:4d:f1:29:
74:cb:5a:86:7c:a1:50:50:03:35:27:3f:0d:75:48:
1e:f4:2f:7f:61:87:a8:d8:90:97:2b:98:fe:03:8e:
c0:d0:40:3d:18:84:c5:2e:7a:04:4c:9e:25:b6:ac:
f0:8d:79:2c:62:25:32:64:ab:3a:04:5b:c6:6e:ca:
30:a6:97:0f:2f:8a:31:fb:fb:85:1c:5a:0d:2b:43:
26:45:55:98:32:60:eb:08:45:31:93:14:14:7a:60:
3d:fb:9c:50:43:b1:10:28:42:21:28:22:c0:24:39:
5c:95:be:b7:ee:4d:5a:26:d1:f7:26:c6:c5:10:d8:
78:9f:24:44:3a:7e:d9:0b:8a:96:01:75:c5:d9:03:
13:25:99:be:4c:3e:f7:46:df:fd:ae:dd:98:e4:c9:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:71:D4:3A:73:59:FE:7B:C9:3D:0C:B8:3B:79:0C:C7:D5:BC:CC
X509v3 Authority Key Identifier:
keyid:DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:58:a2:26:0d:ee:45:50:a1:a2:c0:7b:39:ca:ea:11:12:8b:
fc:5c:34:eb:e5:c6:d3:50:71:ee:cd:d3:db:81:b7:f0:6b:76:
90:d2:17:71:0d:b8:03:6f:4e:1c:51:f1:b9:54:4e:76:59:1a:
9d:64:0c:b3:57:b7:94:71:6b:86:30:e1:34:9a:cc:f1:25:cc:
a1:02:28:b6:48:96:f2:90:be:49:47:c1:3e:4d:35:40:93:27:
e5:fb:85:f0:53:a2:02:e9:49:39:df:23:0e:82:54:fb:e5:19:
a3:f9:b1:fc:2f:63:0d:7f:46:af:a4:f3:b5:f6:af:5d:e2:22:
8c:ab:03:a7:00:a6:71:31:ed:a8:43:2b:4f:91:51:e9:90:18:
11:09:1a:40:e7:01:e7:9d:1d:39:b7:15:32:be:ec:77:dc:68:
3d:5a:8d:56:92:3b:ee:4a:0b:2d:32:0c:21:51:4b:15:f5:84:
6b:d5:4d:0f:4b:71:25:dd:66:64:16:0e:c2:3f:86:28:64:fe:
8e:a0:f1:89:30:88:d1:e8:c4:71:cd:d8:ca:8a:12:96:0a:0a:
f9:cb:44:ef:d9:b8:55:ef:cc:e1:69:fb:b8:71:f4:af:e0:a1:
e0:9f:60:01:88:03:5f:6e:0e:34:f8:76:dd:f9:86:75:10:69:
42:c0:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:16 2026 by rpki-client