Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: tnBcJ6PVMSfWVx4dFE3+kDh21VWrb65Lr9npu5Nex30=
Subject key identifier: 0A:01:2F:98:05:83:73:39:6C:79:18:A6:19:9B:41:98:4C:F0:51:04
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019FA14DD28D96AF932785FE703C970CD468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 109F
Signing time: Mon 27 Jul 2026 02:00:59 +0000
Manifest this update: Mon 27 Jul 2026 02:00:59 +0000
Manifest next update: Tue 28 Jul 2026 02:00:59 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: WQIqo0gXR5a/16ybZ4/h/r9R4N+TfPCbnCsFCA6d0T8=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:d2:8d:96:af:93:27:85:fe:70:3c:97:0c:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jul 27 02:00:59 2026 GMT
Not After : Jul 28 02:00:59 2026 GMT
Subject: CN=0a012f98058373396c7918a6199b41984cf05104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:99:c8:85:c9:4c:92:d7:fa:e6:24:75:22:
c6:01:52:d5:c1:77:3b:39:69:e3:bf:63:15:3e:56:
d5:87:fd:ea:d3:80:7c:9b:09:01:f1:e1:36:06:cf:
01:ca:95:e0:1c:77:2e:9f:12:d3:f9:c9:17:fd:de:
ae:07:36:cf:82:85:24:08:f8:69:75:00:23:9c:f0:
ac:f5:3b:15:45:86:fc:00:3b:c8:2a:69:a2:47:e9:
ac:fd:f6:7d:ab:72:c0:c1:05:1a:a7:a9:0d:aa:65:
7f:85:ff:26:4e:ac:95:40:5b:e0:6a:e3:9e:64:01:
87:7b:e3:68:36:a1:24:e4:be:2b:55:f0:25:4b:53:
1b:c8:b2:86:82:0e:1e:0e:3e:0e:6b:5c:6f:0d:32:
34:b3:01:b3:3f:31:f8:ae:f9:2d:eb:7d:25:19:2d:
75:ce:17:df:6c:25:fc:48:e7:7a:8e:fd:b0:5e:2f:
d6:5e:40:1c:6c:dd:14:47:14:b3:2b:3d:b3:37:bc:
d0:a1:7b:94:1f:a3:41:20:b9:e7:ac:ac:70:16:64:
36:9d:73:5b:47:d5:d1:fd:de:fc:66:79:16:36:43:
30:76:ec:91:bf:d1:ce:1a:9d:be:39:8d:b3:39:0a:
9d:57:0f:69:bc:73:a3:3f:da:c4:fd:12:51:72:40:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:2F:98:05:83:73:39:6C:79:18:A6:19:9B:41:98:4C:F0:51:04
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4c:8c:32:1a:fc:3c:f4:f7:d1:11:e7:06:f9:b5:98:41:bc:
97:d1:72:da:f9:6f:92:99:bd:f0:52:10:ab:c1:07:57:1f:4d:
7c:22:36:36:b2:30:ff:44:24:b5:a6:d3:c1:13:70:f1:f6:a6:
d2:76:0c:d7:49:37:98:ac:14:8b:9e:c7:c1:3b:c9:cd:f1:0e:
8b:21:13:15:0a:5d:33:89:d2:91:9a:42:3d:66:a8:2d:3a:86:
75:4b:a2:d8:44:40:2b:b8:c0:8b:35:e4:dd:b7:07:67:d8:c5:
dd:86:e1:df:3e:67:78:69:7b:78:95:6f:d0:d4:d7:f8:4f:0e:
25:83:0e:7d:df:de:be:10:ca:5a:b2:88:03:0d:96:c8:6c:23:
b4:ff:6d:42:f0:d2:67:87:44:24:2f:0d:94:19:fb:93:4f:4c:
83:3f:45:90:f1:c9:6e:c4:89:f5:cd:b7:c9:d5:ff:39:72:92:
09:ee:75:9f:4f:28:fa:1e:e7:ec:66:60:85:17:4a:7c:76:7e:
b7:02:14:63:5c:50:a0:0a:21:b7:5a:7a:79:da:28:19:00:37:
63:00:13:79:29:74:3e:ef:80:bd:3b:3a:74:68:c7:3a:ba:4b:
b8:14:a8:95:a2:6e:de:7d:aa:e0:9d:70:e6:7f:97:bc:6c:cc:
b3:45:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:21:36 2026 by rpki-client