Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: QoR+QEIii4NkfKNzWwyaR7/UUGG4i0tQb7/7YnL56WI=
Subject key identifier: 2B:90:1C:AB:DC:B2:12:42:99:E2:94:B1:31:40:71:A5:C0:D8:3E:47
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01A08AFAAD6A2048496191E0BD296014D329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 1118
Signing time: Thu 10 Sep 2026 11:01:19 +0000
Manifest this update: Thu 10 Sep 2026 11:01:19 +0000
Manifest next update: Fri 11 Sep 2026 11:01:19 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: QGrpo1I7ROxY6qDh0QzttGu2U4TAsUZq17iYrN+RZBw=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ad:6a:20:48:49:61:91:e0:bd:29:60:14:d3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Sep 10 11:01:19 2026 GMT
Not After : Sep 11 11:01:19 2026 GMT
Subject: CN=2b901cabdcb2124299e294b1314071a5c0d83e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:7f:c0:33:d6:bc:39:54:39:d1:7c:c9:ab:
fd:a2:f2:05:8c:fd:4e:bb:13:cd:ff:0b:9d:a7:d9:
bb:24:80:06:33:99:07:09:be:fb:c5:66:11:b8:95:
98:3d:ea:eb:bd:08:7a:7b:55:24:b5:62:67:db:72:
17:bf:20:e3:45:12:b6:1a:12:10:a2:57:73:f7:cf:
1b:ec:b6:aa:7f:f3:e9:2d:0d:ff:03:c4:40:00:ed:
33:03:ba:e2:f6:ae:bc:fe:8a:85:48:93:f5:e0:39:
2f:03:ac:81:71:20:97:9e:19:a9:0e:18:35:53:ad:
49:8f:14:93:7c:8c:de:24:39:d4:76:ce:b2:60:4c:
79:92:aa:2f:63:af:5d:67:23:32:8c:2d:8b:81:7e:
ed:d5:9e:c0:f9:4c:52:a2:78:fc:c3:97:4a:e8:a2:
94:9f:ab:ba:81:22:89:12:52:d8:d9:be:c3:a7:47:
4a:af:00:5e:d3:cc:09:c8:a9:c7:5e:f7:57:0b:7c:
a6:aa:df:b6:cd:90:f6:95:da:5b:af:4e:89:14:f2:
2c:21:98:55:56:bc:0b:6a:6d:96:95:d3:8a:6b:07:
65:87:05:0b:65:f2:24:c9:5e:b5:4b:08:b7:ec:65:
8b:66:9e:c3:d1:e5:ab:cd:05:31:05:97:81:32:02:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:1C:AB:DC:B2:12:42:99:E2:94:B1:31:40:71:A5:C0:D8:3E:47
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9b:21:a7:24:ba:2b:1a:75:88:ff:cf:0e:83:d6:8d:99:ca:
1e:37:29:fe:29:8c:bd:03:d5:dc:35:6e:e3:99:d4:84:af:e4:
5c:40:45:dc:2e:de:9a:87:7e:5b:44:69:9d:17:a6:28:b5:1c:
51:08:fa:6c:74:b6:88:a6:56:bf:e7:9f:64:4e:d5:2a:1b:07:
41:96:ae:48:09:fe:10:31:9e:07:88:ec:d5:f2:a3:49:c5:f5:
8d:a1:78:32:a1:e5:dc:db:cb:a9:af:4e:12:4e:ac:48:75:5e:
8c:59:77:5e:1b:40:f2:a7:83:33:8e:99:e3:e3:5b:2b:1a:7f:
bf:9e:c5:47:ef:47:b2:59:3e:e0:e5:b5:63:be:97:e9:c3:b4:
b6:83:18:9c:ac:9a:27:f2:b6:e3:2e:a9:2a:4b:e9:02:f7:87:
21:94:a3:87:9f:a0:71:14:27:01:0f:a9:c9:d1:3a:a4:68:49:
f4:ed:2b:c8:a9:a1:53:be:4a:26:a8:10:1f:b9:18:22:c7:f8:
c5:a4:25:13:cb:48:79:44:c2:62:95:f5:a6:3a:17:66:3a:99:
36:df:d3:70:7f:c4:95:50:ca:50:ae:3f:7a:3f:99:4a:eb:35:
77:23:12:02:88:1c:a8:f2:c6:f2:75:88:a2:2b:f4:67:3a:af:
01:12:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:55:11 2026 by rpki-client