Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: XfVKYpP/tWBehM57g7mBHpLAyizA5wvyZrmy+I+blFw=
Subject key identifier: 47:0A:69:48:F3:FD:DC:67:77:DB:DE:4F:C3:92:F0:8A:01:CC:67:44
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019E3072CB542900BDA3E80F1D0E270CD1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0FE0
Signing time: Sat 16 May 2026 11:01:29 +0000
Manifest this update: Sat 16 May 2026 11:01:29 +0000
Manifest next update: Sun 17 May 2026 11:01:29 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: O4e3NuDxmFOxqbUpX/ngx+jIaGzlbT3R0iXWJzdEcKY=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:cb:54:29:00:bd:a3:e8:0f:1d:0e:27:0c:d1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: May 16 11:01:29 2026 GMT
Not After : May 17 11:01:29 2026 GMT
Subject: CN=470a6948f3fddc6777dbde4fc392f08a01cc6744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:60:50:68:de:75:82:7d:f7:d5:04:b8:9b:
45:ce:ba:cf:2e:dd:fd:a4:47:de:2e:8c:02:01:44:
e4:35:97:42:87:f2:8c:b6:6f:ad:4b:ee:d4:48:1d:
fe:c6:f2:f1:a5:52:d2:28:90:a8:3b:5e:fc:fd:88:
39:3f:a9:97:88:1a:21:83:d1:b0:e3:82:28:22:d7:
fc:5f:09:2b:45:0e:de:a6:f5:83:76:77:84:52:60:
88:ab:f0:b0:b4:58:6a:98:f5:e4:15:be:7e:3a:64:
a5:60:e1:3f:4b:35:4d:48:5e:64:2f:52:36:c3:b9:
44:ec:f8:af:b5:16:e6:aa:a1:56:9a:76:eb:5b:aa:
df:10:5a:81:25:06:c9:77:c4:88:f9:e9:41:35:d2:
15:9f:da:5d:0f:47:fc:a9:bc:7d:a6:4a:7a:5f:fa:
02:90:de:64:ce:ec:4f:7e:01:bf:e6:c7:7a:6f:1c:
f0:fa:4b:54:07:1b:47:2d:4c:9a:71:cf:10:53:0d:
0a:f7:69:13:83:b4:a2:46:48:08:43:57:a2:84:a2:
e0:7b:bb:de:5f:a2:64:51:58:1b:b1:f0:93:b2:c9:
a7:b0:63:34:cc:bc:1f:fb:dd:7c:d0:76:7f:8b:28:
75:ef:c0:93:aa:78:25:f6:68:06:e0:f9:27:76:bd:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:69:48:F3:FD:DC:67:77:DB:DE:4F:C3:92:F0:8A:01:CC:67:44
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4d:ab:7b:4a:17:d5:b0:1a:5f:11:dc:75:f5:c8:57:76:bf:
98:2c:7d:52:19:f8:0a:a0:38:02:b1:e8:e4:a2:82:a7:e1:18:
4b:c1:43:64:c6:d1:80:5f:e7:12:62:de:30:7a:b8:54:f4:3a:
ff:45:5e:d9:e3:05:85:11:fb:3d:8b:a0:1f:3a:83:1c:03:4b:
fb:92:ed:50:1b:d4:a4:83:0d:10:d2:35:38:b2:c0:58:f6:49:
81:fd:3c:1a:b0:64:d3:73:16:8a:48:6b:06:d3:01:dd:b4:dc:
03:d4:a7:55:0e:de:6d:63:f9:57:7c:b9:af:ba:76:ed:04:bb:
b7:d5:42:42:16:61:c4:de:34:55:fb:bd:4b:c8:13:f2:4f:d4:
e9:da:b2:c0:e4:73:e2:84:d0:4c:8b:48:58:21:f2:58:12:57:
cb:48:dd:a7:cd:7a:bc:37:a5:3e:04:79:50:2a:a2:a0:58:30:
98:a0:a6:81:95:77:b1:8f:93:19:9d:3a:3e:31:d5:22:80:22:
ae:8a:e5:d1:62:8b:9c:c7:15:77:e1:72:65:f6:fc:d7:ee:1d:
29:12:1a:d9:63:76:06:3d:43:21:1c:3b:03:54:38:ad:a2:62:
5a:2b:9c:e9:eb:11:fc:0f:71:87:19:1b:80:a8:98:32:26:ba:
42:07:84:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:18 2026 by rpki-client