Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
File: 338uDqUtnkbtcQSFPG1RRlqso2c.mft (raw, json)
Hash identifier: 6gPG8KHzTPgmHuklYkf9GfbSUTdyaTeZa3UzS8HJ/2M=
Subject key identifier: 80:21:82:FB:08:9F:CF:07:A3:0C:0D:D2:4C:BB:0C:02:36:B2:76:63
Authority key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Certificate issuer: /CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Certificate serial: 019E1DC7AEC3E56CBACA9600AAB3659F6659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
Manifest number: 28
Signing time: Tue 12 May 2026 20:01:26 +0000
Manifest this update: Tue 12 May 2026 20:01:26 +0000
Manifest next update: Wed 13 May 2026 20:01:26 +0000
Files and hashes: 1: 338uDqUtnkbtcQSFPG1RRlqso2c.crl (hash: jX6NnLOa8+VZmyF0DxXHYrBhq79Fdoh7HRG490tWZys=)
2: rkqbD4HeLY4fECgG4UCjCwTiZaY.roa (hash: rtmOzCRpMS+pQkVbuV9E2mfbRX0MvxLvH1ZciUH4P8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:ae:c3:e5:6c:ba:ca:96:00:aa:b3:65:9f:66:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Validity
Not Before: May 12 20:01:26 2026 GMT
Not After : May 13 20:01:26 2026 GMT
Subject: CN=802182fb089fcf07a30c0dd24cbb0c0236b27663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:46:8e:5e:65:a9:b0:61:35:a3:34:5b:51:
90:85:e6:ac:8f:13:ca:d7:9b:d1:49:b7:b1:6d:70:
d3:05:17:56:aa:44:9e:87:2c:ef:e8:ef:94:1e:4f:
56:82:d4:28:4c:c7:02:6e:e8:8f:4c:11:db:91:b5:
9a:08:bd:cb:af:12:39:1b:67:6d:01:9b:a3:96:6d:
00:39:7b:29:30:84:f8:e9:b8:1e:3e:70:7e:e6:81:
2e:01:91:51:5d:d7:3e:46:d3:b2:06:02:87:e0:1d:
3e:5d:e4:a2:5b:fb:b4:71:3e:10:a1:81:2c:41:1d:
37:dd:a2:17:0d:1a:67:63:0c:dd:c7:54:fe:33:3b:
2f:26:b8:92:60:bd:ef:b4:8e:4a:5c:18:cd:b1:2d:
1d:2d:f5:29:57:bb:40:fd:2d:a6:a5:c4:c7:2d:40:
0f:d1:6d:f8:38:37:3e:52:cb:54:48:b1:fd:6b:6f:
4b:3f:61:68:e8:63:9f:4e:41:c3:0a:b8:e3:d4:cf:
d7:58:31:e1:67:c2:eb:47:1a:03:11:8d:cf:b8:6f:
16:73:f2:51:90:b9:92:d1:ad:10:88:3f:aa:34:45:
31:3a:7e:00:ce:43:bc:c1:6b:79:05:37:d2:ea:b2:
fb:2d:23:4d:33:44:e5:5b:3f:74:81:de:36:cd:8e:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:82:FB:08:9F:CF:07:A3:0C:0D:D2:4C:BB:0C:02:36:B2:76:63
X509v3 Authority Key Identifier:
keyid:DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8c:72:7d:b2:cc:ec:8e:55:7b:13:74:0a:3d:80:d4:ff:5c:
69:8a:b7:53:9f:5b:bf:f9:00:d0:3e:26:16:e6:10:7d:d3:44:
f8:a3:42:3d:76:10:da:a2:b8:ba:2e:86:40:e3:01:a6:ea:83:
2c:a5:90:a1:8d:9c:28:54:a0:50:1a:a3:03:55:15:34:05:4e:
9a:93:d4:51:c8:c1:d6:35:ec:50:be:0a:04:70:8b:5c:ca:38:
19:a9:f2:2f:24:26:e6:27:b4:39:7e:70:23:2b:06:d7:56:62:
35:9c:3a:2e:e5:93:58:f7:f6:2e:19:e9:e7:5f:83:49:ff:44:
e5:3e:d4:37:36:6c:08:cc:45:9d:01:8c:f6:2c:14:cb:53:89:
f4:87:d3:7a:5d:f8:f4:d9:e1:72:00:9f:c6:18:f0:f1:7a:f4:
50:b8:02:e9:7f:5e:7a:95:5e:82:46:ff:e6:6a:70:a6:ab:bc:
c0:dc:87:1d:2e:17:28:eb:97:b7:dd:0f:7c:3c:c1:57:b9:42:
ea:29:8e:0b:e5:cb:bf:6b:a5:d6:5f:97:44:0a:f8:01:85:41:
1f:74:c4:77:6c:e5:58:2f:27:70:34:65:33:e4:b8:5d:20:b1:
2e:26:19:81:7c:95:35:b4:2b:7f:0b:24:4b:25:0a:1c:d0:bc:
40:7e:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:54 2026 by rpki-client