Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: LTTNTYG7kQnrhmA8J6fjAEgsh6H7PweuATgbhVAQ5gY=
Subject key identifier: E2:59:E4:1C:3D:AA:6D:5E:E5:69:2C:07:92:2C:FB:F7:95:7E:BD:60
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 01A0016EFD2C3AF8FAAC042CBA27CE58D53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1857
Signing time: Fri 14 Aug 2026 18:00:45 +0000
Manifest this update: Fri 14 Aug 2026 18:00:45 +0000
Manifest next update: Sat 15 Aug 2026 18:00:45 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: 21iInw2Rty6tiQUGg4WBw8vp1GHiAEcUw1Zn7NBvs0I=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:fd:2c:3a:f8:fa:ac:04:2c:ba:27:ce:58:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Aug 14 18:00:45 2026 GMT
Not After : Aug 15 18:00:45 2026 GMT
Subject: CN=e259e41c3daa6d5ee5692c07922cfbf7957ebd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:11:a8:a0:7b:38:0b:18:89:9e:7a:a7:3a:
35:d2:f5:70:d1:f5:68:d1:a2:be:11:80:0a:c2:e1:
27:f4:65:65:84:c7:4b:92:27:44:61:b8:94:21:e1:
0c:df:4a:c2:80:34:db:f7:1f:48:59:35:1c:fd:11:
e0:43:b7:2c:70:1d:d0:42:cc:a4:1a:42:23:9b:3e:
a5:b7:54:65:c6:f6:27:be:ef:4b:e1:0e:a8:19:97:
ba:b6:a8:4d:51:ae:95:9e:d4:a0:c0:e3:da:76:e4:
77:c3:88:02:39:45:e8:4c:77:88:da:d6:fb:99:8b:
77:b6:98:4e:4d:47:fe:c1:40:0f:f5:b9:f0:23:53:
fa:1d:d8:1d:3d:62:a5:9a:2a:b7:da:6d:a7:e9:72:
3d:e7:cc:d0:7b:b9:36:fc:6b:4a:87:84:d5:4b:d1:
53:df:e1:e5:d7:74:dd:97:73:81:b3:f0:61:e0:aa:
3b:0c:00:de:2f:25:e9:6a:32:0b:dd:65:fc:d6:2e:
1e:ec:a5:d7:35:7a:4b:9d:98:00:7f:a1:df:4c:cb:
03:71:93:50:3f:cd:d3:da:45:a3:ce:11:d0:b1:de:
3c:01:03:09:c9:c1:01:b7:55:a3:99:8c:43:86:49:
09:f0:71:56:61:8f:ec:ec:25:92:9b:b1:ca:1c:6e:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:59:E4:1C:3D:AA:6D:5E:E5:69:2C:07:92:2C:FB:F7:95:7E:BD:60
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9b:43:10:90:da:be:17:36:32:ff:84:df:09:b6:5d:d2:5a:
c1:e9:d5:de:78:b7:b8:76:64:a7:58:e9:45:20:e7:bc:ae:f1:
7f:ab:2d:78:d4:39:0b:85:6d:8d:02:99:66:f2:98:44:73:bf:
b4:7e:62:73:cb:00:9d:32:8f:d4:12:dc:56:e2:5d:c7:91:e8:
28:2d:1c:40:8c:56:c8:b2:8a:9f:ed:96:82:0b:26:9e:96:99:
ce:36:20:b1:6c:25:12:d1:85:c2:8f:09:83:d3:30:23:db:4d:
e2:26:58:f8:44:6c:5e:2d:c7:dd:cd:9f:4c:c8:14:e1:ca:cc:
00:5d:b9:94:c2:24:be:74:30:bf:96:16:c8:c0:3a:72:31:cc:
23:36:b9:d0:92:29:12:90:19:1e:52:4e:66:3f:b0:0d:fe:df:
e7:93:12:49:26:1b:dd:87:0c:82:46:1d:44:a9:e4:48:62:75:
64:08:f6:52:a2:cd:9e:78:9d:fe:94:f7:94:05:63:9e:a5:6d:
40:8d:6b:86:e6:c0:16:33:a2:91:e3:74:67:63:04:d5:aa:08:
63:b7:7d:dc:9c:66:bf:58:51:2b:a9:cd:c0:2e:54:12:9f:d0:
d4:d7:31:bb:27:8e:95:e0:53:f4:4f:9b:c1:31:3d:4b:6b:7d:
d2:7f:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:10:19 2026 by rpki-client