Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
File: 338uDqUtnkbtcQSFPG1RRlqso2c.mft (raw, json)
Hash identifier: UjxYvumaPWOhVmZl9lDBmulNnuT8/u1nzmyCWyKpMrs=
Subject key identifier: 5D:EB:4D:B3:3D:23:0D:9C:0B:95:B6:DC:68:C5:23:CF:40:D7:25:24
Authority key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Certificate issuer: /CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Certificate serial: 01A1DD9532F104D90A81E164B2D86F270B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
Manifest number: 0219
Signing time: Sun 15 Nov 2026 05:01:44 +0000
Manifest this update: Sun 15 Nov 2026 05:01:44 +0000
Manifest next update: Mon 16 Nov 2026 05:01:44 +0000
Files and hashes: 1: 338uDqUtnkbtcQSFPG1RRlqso2c.crl (hash: DQDNBXoFY6JMWII4UKJvDCn9IRh1gKKENUQR1DGRRl8=)
2: rkqbD4HeLY4fECgG4UCjCwTiZaY.roa (hash: rtmOzCRpMS+pQkVbuV9E2mfbRX0MvxLvH1ZciUH4P8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:32:f1:04:d9:0a:81:e1:64:b2:d8:6f:27:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Validity
Not Before: Nov 15 05:01:44 2026 GMT
Not After : Nov 16 05:01:44 2026 GMT
Subject: CN=5deb4db33d230d9c0b95b6dc68c523cf40d72524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:af:8a:f1:cc:51:2e:34:17:53:5c:ed:5b:
05:ec:90:db:22:7b:d4:4e:da:64:75:8f:d5:10:9a:
b5:cf:a0:ce:6b:22:67:ba:d4:29:db:00:2b:26:92:
9c:11:43:3f:47:00:05:f0:c0:9a:9e:9f:aa:2d:ca:
4f:5f:c2:47:7b:05:85:71:11:e5:e6:fe:f5:5b:1e:
05:f2:bc:8b:c4:e4:2f:bb:2d:14:e5:cc:e9:9e:4d:
46:3c:d5:64:76:34:03:1c:b1:28:d5:f5:bb:ad:17:
4d:c6:53:d1:ad:70:41:f6:53:f8:b4:d9:4e:7e:41:
71:6e:8a:60:63:2f:fd:69:97:5d:80:97:ff:4b:3f:
4a:20:ae:18:94:b5:73:de:ef:d1:9f:8c:a3:27:df:
91:2f:31:57:03:7b:1c:88:d8:87:0a:23:34:fd:87:
98:11:68:b7:9f:b3:77:e9:cb:0c:c1:87:0d:b7:67:
7d:79:5c:d0:57:ad:fc:12:7e:62:fe:bb:a4:bb:3f:
49:6d:3a:33:30:a9:c2:77:ec:e8:73:ca:69:ea:49:
95:94:08:d1:e2:f4:bc:3c:ad:bf:d6:93:23:39:ce:
c0:79:2a:01:f0:ac:9e:14:c2:b4:99:13:f3:b6:b5:
9b:1f:c1:34:65:cf:ec:5b:51:03:a1:83:14:db:e2:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EB:4D:B3:3D:23:0D:9C:0B:95:B6:DC:68:C5:23:CF:40:D7:25:24
X509v3 Authority Key Identifier:
keyid:DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:2c:01:e4:0e:ec:49:11:f7:d5:5e:c7:57:26:04:8e:49:
89:02:d3:a7:c8:36:16:6d:52:9f:a4:8c:69:ff:11:06:fe:54:
77:6d:2f:d1:9d:93:c4:06:d7:ff:b5:7c:8f:53:85:0b:55:5f:
34:08:ee:b1:02:a9:87:82:f1:f1:35:b9:a6:b5:4e:67:68:5d:
c3:e5:21:0f:7d:f1:a9:34:34:90:3e:e2:2b:ab:03:63:d2:4a:
ca:d6:c4:52:45:78:f6:19:4d:21:ba:df:5f:98:2c:0c:2a:32:
33:21:29:22:7f:b4:e4:f7:f3:9f:19:6a:07:01:65:4e:38:29:
eb:fc:07:9c:08:6f:c4:7a:c3:d4:3e:71:a4:5b:1f:99:21:93:
22:b1:ad:12:b0:95:d9:55:90:a3:0c:16:9b:60:84:e7:48:92:
c4:41:f5:91:36:17:d3:6f:bb:da:6a:6d:0e:a4:5a:1d:fb:55:
e4:69:72:c2:f8:37:56:fe:fc:63:63:79:d2:56:71:a0:1a:19:
4d:51:f9:9b:72:a3:b7:cd:ea:ca:8d:26:3f:b8:db:d3:96:41:
78:4e:4b:e1:99:99:8c:9a:3f:9c:e4:10:ed:e8:88:1f:97:2e:
6f:dd:db:ad:00:93:e4:8e:d7:af:ab:07:25:e6:b0:15:aa:a1:
06:e1:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:55 2026 by rpki-client