Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: cxgIRgLoP2uhCIP8TDE8jMBb3b339Dfgzlheyf9YzTc=
Subject key identifier: AC:29:C6:5C:F5:56:57:B8:63:53:3E:BF:17:FC:25:E6:79:45:0A:C5
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019F17C26DCD958094C1CEEC2866B7E7CB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 17DE
Signing time: Tue 30 Jun 2026 09:00:45 +0000
Manifest this update: Tue 30 Jun 2026 09:00:45 +0000
Manifest next update: Wed 01 Jul 2026 09:00:45 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: lT7/xagN8cnRL627LGbKjGdkyf4rZsrO1WhPJWn3o40=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:6d:cd:95:80:94:c1:ce:ec:28:66:b7:e7:cb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Jun 30 09:00:45 2026 GMT
Not After : Jul 1 09:00:45 2026 GMT
Subject: CN=ac29c65cf55657b863533ebf17fc25e679450ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:f9:6f:a3:c4:c2:f7:34:1f:ca:8c:04:a3:
43:0d:9e:a9:00:95:b2:49:40:11:cc:52:c3:36:c9:
87:49:b1:6a:b4:69:d8:27:69:e7:60:9e:8e:e7:43:
2b:b6:52:89:f6:8a:31:8f:54:6a:cb:54:ba:a2:5e:
fc:db:37:bc:2d:32:1b:c6:c4:4b:73:dc:84:82:3c:
a1:cf:7c:1c:6c:88:86:51:c1:74:e3:bc:18:9a:7d:
96:e9:e2:e0:f2:82:7c:41:97:8d:34:e4:1e:35:78:
77:3d:cc:60:02:2c:83:9c:8a:4d:9c:69:c4:79:52:
57:72:51:a8:30:69:16:70:6c:a9:45:b4:93:1d:39:
0c:14:6f:58:11:c9:bd:bd:f9:54:b7:a6:91:73:12:
6b:89:ef:92:f5:32:e3:d7:7e:11:b2:30:95:b6:93:
01:29:3b:71:7e:60:c9:0a:20:0b:58:d1:a0:94:33:
bb:55:70:c9:3e:7e:82:cb:e9:02:2d:5c:ae:a1:68:
3a:3f:be:36:b1:5e:6c:1c:ba:20:ce:8d:88:95:fd:
98:df:9f:07:5f:c9:5c:85:c4:a3:cb:7d:a3:5c:23:
e7:1b:47:d3:7e:df:a6:a4:6a:5c:84:e0:43:b7:bb:
0d:90:ae:73:da:41:a1:3f:2b:03:d1:3e:cf:47:2a:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:C6:5C:F5:56:57:B8:63:53:3E:BF:17:FC:25:E6:79:45:0A:C5
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:c9:db:18:e1:26:7c:ae:5a:a6:ad:19:05:4a:38:82:90:
eb:63:1a:db:1a:c2:79:82:54:fa:b8:0d:59:24:e2:ff:d0:7b:
02:21:16:4e:c5:27:49:9a:38:c0:6c:80:9a:ba:e0:53:6a:e8:
a5:c9:bc:4b:ab:f4:c4:48:b4:dd:d3:db:69:6b:06:70:59:6d:
60:1a:8f:7b:3c:2d:e2:0e:18:09:06:46:27:4c:7d:f6:ff:b8:
b1:05:5d:f5:78:53:a0:ed:c9:a6:c8:fd:1e:22:ae:18:4d:f4:
9b:6c:5a:ee:04:d9:ee:8b:f8:f7:9c:d6:4e:b8:82:25:1d:35:
db:3b:88:e7:e1:ae:50:d1:0c:1f:61:d7:ea:ef:ff:8f:0b:1a:
e2:22:e4:f0:09:8a:86:77:19:60:b9:ab:db:ec:9b:12:f9:83:
0d:af:60:a1:39:45:c3:b3:fe:93:6e:5b:f8:9e:da:67:89:05:
4b:22:f1:75:f6:06:ed:30:44:16:4d:92:e3:16:ff:6f:01:94:
d6:bd:e8:e4:6c:ee:be:57:92:95:f1:43:6c:60:a8:1e:da:60:
81:e3:52:4a:61:ab:65:b7:76:d3:e5:75:88:9c:9c:e3:91:0a:
d7:8d:0e:2a:37:d7:ad:07:ed:e9:c2:e0:9d:cc:6d:6e:db:76:
ad:1a:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:40 2026 by rpki-client