Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
File: 338uDqUtnkbtcQSFPG1RRlqso2c.mft (raw, json)
Hash identifier: 1Do7gfOwamMmfNZvZJChh6xEbcCBnGuF0kwnGaTqDSY=
Subject key identifier: 72:B2:EC:A8:71:24:70:08:51:6C:14:7C:5F:A6:5E:56:B5:5C:66:33
Authority key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Certificate issuer: /CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Certificate serial: 01A0C96B71C178D2FA2EDA29387E8A565E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
Manifest number: 018A
Signing time: Tue 22 Sep 2026 14:00:56 +0000
Manifest this update: Tue 22 Sep 2026 14:00:56 +0000
Manifest next update: Wed 23 Sep 2026 14:00:56 +0000
Files and hashes: 1: 338uDqUtnkbtcQSFPG1RRlqso2c.crl (hash: 2OyiSLSTAkzn8+e2Yx8Uta83z6S7z/hpL15myb/H7CE=)
2: rkqbD4HeLY4fECgG4UCjCwTiZaY.roa (hash: rtmOzCRpMS+pQkVbuV9E2mfbRX0MvxLvH1ZciUH4P8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:71:c1:78:d2:fa:2e:da:29:38:7e:8a:56:5e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Validity
Not Before: Sep 22 14:00:56 2026 GMT
Not After : Sep 23 14:00:56 2026 GMT
Subject: CN=72b2eca871247008516c147c5fa65e56b55c6633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:38:e2:b8:3e:41:1f:ac:ad:31:3c:e0:8a:
38:20:d7:15:ad:85:38:35:79:10:bb:80:75:6a:f5:
9a:86:f6:5f:6d:3c:ea:e7:2a:cb:a5:83:c4:48:f3:
c9:9f:0f:35:29:05:2a:16:51:92:e4:77:85:cb:4c:
1a:e9:82:f2:44:12:68:0b:09:fc:69:75:5c:bf:d1:
1e:17:01:48:07:bd:fb:ac:2a:c0:36:54:1c:0f:c8:
4d:e1:2e:10:01:e4:c0:b5:91:f9:69:2c:5a:4c:7a:
9c:a3:53:e9:c8:4a:92:cb:21:f8:a4:e3:68:15:6e:
d7:09:cd:ef:2c:b0:81:ec:dc:50:4e:77:f5:ea:26:
56:ff:c3:69:7f:15:36:d2:cf:42:fe:70:1d:53:fc:
92:66:d1:1c:ff:d4:b0:63:81:27:fe:dc:b4:7d:8a:
d9:78:09:83:f2:08:d5:0d:59:09:a4:4e:08:09:33:
bf:7d:8d:b9:8d:1d:86:36:c5:4f:31:76:90:39:ae:
00:45:8b:67:69:81:66:24:43:b0:bd:1f:22:04:a9:
85:6e:6d:e0:f8:70:d1:7c:a5:bf:2e:33:d3:ed:5e:
f3:ca:f4:4e:64:fe:60:80:15:06:96:d1:b8:4c:8a:
69:42:ba:14:39:71:ee:cc:4d:18:ab:bf:0a:30:85:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:EC:A8:71:24:70:08:51:6C:14:7C:5F:A6:5E:56:B5:5C:66:33
X509v3 Authority Key Identifier:
keyid:DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e1:61:9b:5b:41:c1:a5:5e:4d:55:85:a5:d9:17:14:f9:df:
6f:ef:a5:f2:b6:d2:cc:78:a7:62:38:c5:92:4a:17:94:0b:2a:
2b:6c:26:99:2d:87:f5:7c:87:f2:de:24:42:09:7a:cf:ae:66:
12:c2:ee:55:91:cf:2b:59:52:62:5b:ce:51:e5:a6:b1:5c:5b:
4c:a6:d9:12:f4:2d:a3:5c:32:e8:6d:81:64:18:fd:1d:96:61:
54:ad:e7:a1:cc:1f:1a:0d:62:f1:9a:de:11:64:b4:3c:da:f0:
ac:2a:a1:2f:98:e9:4d:85:80:8a:52:0a:52:4e:cf:ef:81:c6:
77:fe:d4:89:77:f5:aa:0a:d1:d0:47:ce:ee:ac:93:1e:ca:80:
b1:a3:cb:c1:00:5b:bc:57:59:fc:08:18:24:84:6d:86:ca:5a:
3a:68:39:dd:a7:38:12:0c:f2:5f:a0:d4:b6:f5:66:71:8e:58:
5d:2d:85:f9:f9:c6:f6:b7:2f:b4:ed:c2:e0:a0:ae:d8:1b:17:
31:89:6e:2d:a7:3b:16:5b:78:cf:b5:b6:d7:b3:9f:7f:74:ba:
53:72:95:4d:bd:e3:c8:68:ac:bc:5a:68:8b:7f:2e:0f:e6:63:
a7:ca:b4:c4:e5:5d:6d:17:28:04:9a:a5:7b:d1:70:13:0f:90:
f2:1e:3d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa3HBeNL6LtopOH6KVl54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2YyZTBlYTUyZDllNDZlZDcxMDQ4NTNjNmQ1MTQ2NWFh
Y2EzNjcwHhcNMjYwOTIyMTQwMDU2WhcNMjYwOTIzMTQwMDU2WjAzMTEwLwYDVQQD
Eyg3MmIyZWNhODcxMjQ3MDA4NTE2YzE0N2M1ZmE2NWU1NmI1NWM2NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklc44rg+QR+srTE84Io4INcVrYU4
NXkQu4B1avWahvZfbTzq5yrLpYPESPPJnw81KQUqFlGS5HeFy0wa6YLyRBJoCwn8
aXVcv9EeFwFIB737rCrANlQcD8hN4S4QAeTAtZH5aSxaTHqco1PpyEqSyyH4pONo
FW7XCc3vLLCB7NxQTnf16iZW/8NpfxU20s9C/nAdU/ySZtEc/9SwY4En/ty0fYrZ
eAmD8gjVDVkJpE4ICTO/fY25jR2GNsVPMXaQOa4ARYtnaYFmJEOwvR8iBKmFbm3g
+HDRfKW/LjPT7V7zyvROZP5ggBUGltG4TIppQroUOXHuzE0Yq78KMIWV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKy7KhxJHAIUWwUfF+mXla1XGYzMB8GA1UdIwQY
MBaAFN9/Lg6lLZ5G7XEEhTxtUUZarKNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84NzllNDEtOWExZC00OWFiLTg1NDct
MDVhZGIwOGY5YTY5LzEvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84NzllNDEtOWExZC00OWFiLTg1NDctMDVhZGIwOGY5YTY5
LzEvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuFhm1tB
waVeTVWFpdkXFPnfb++l8rbSzHinYjjFkkoXlAsqK2wmmS2H9XyH8t4kQgl6z65m
EsLuVZHPK1lSYlvOUeWmsVxbTKbZEvQto1wy6G2BZBj9HZZhVK3nocwfGg1i8Zre
EWS0PNrwrCqhL5jpTYWAilIKUk7P74HGd/7UiXf1qgrR0EfO7qyTHsqAsaPLwQBb
vFdZ/AgYJIRthspaOmg53ac4EgzyX6DUtvVmcY5YXS2F+fnG9rcvtO3C4KCu2BsX
MYluLac7Flt4z7W217Off3S6U3KVTb3jyGisvFpoi38uD+Zjp8q0xOVdbRcoBJql
e9FwEw+Q8h49FA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:40:37 2026 by rpki-client