Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: Y54jWQvOjvWa0a4SkUmJbeTBoSFvu3QOT5lq88XQNtw=
Subject key identifier: F6:A7:C0:9B:CC:28:6C:B7:90:F4:2A:27:82:9B:7D:F2:0F:AE:91:47
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 019DCE62A8448C49853090981B894F7F89C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 17B9
Signing time: Mon 27 Apr 2026 10:01:05 +0000
Manifest this update: Mon 27 Apr 2026 10:01:05 +0000
Manifest next update: Tue 28 Apr 2026 10:01:05 +0000
Files and hashes: 1: Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa (hash: 1+a+B/uUbNc1Axp6SF/xxqBjGxtyMv5rURwc4G4VG9Q=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: B4LnH4lFnA9c4+4ks+RzBlZp9BJk5K2ytw4iqNx+Vlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:a8:44:8c:49:85:30:90:98:1b:89:4f:7f:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Apr 27 10:01:05 2026 GMT
Not After : Apr 28 10:01:05 2026 GMT
Subject: CN=f6a7c09bcc286cb790f42a27829b7df20fae9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:26:a6:9e:ec:07:17:55:c7:2f:d2:8a:74:
5f:a1:f1:40:ca:40:f8:36:50:88:46:1c:df:a0:1e:
aa:35:e4:a1:86:0b:df:eb:c0:ef:ec:9c:df:57:ac:
78:8e:fb:c9:0d:8e:17:ba:cb:2e:88:54:80:8e:35:
39:b2:c1:0a:c4:50:3c:5d:73:43:54:64:46:03:b3:
0b:69:53:91:7d:94:5f:d3:a2:f4:e3:98:c3:4e:9a:
4f:59:b8:81:e5:dd:60:03:77:be:99:a5:83:e5:08:
2a:9c:91:45:77:66:08:43:29:8a:81:d2:1e:f9:49:
8f:f8:53:a4:33:b1:58:94:a1:fe:c0:ba:ba:44:b9:
9f:bf:67:73:70:cb:34:d7:d8:94:de:51:9d:e3:8a:
66:30:3c:1a:c3:9e:b5:60:28:d7:4a:30:1a:fd:4c:
e4:b5:6e:ba:0c:c6:ca:a3:12:0f:87:03:9f:85:55:
85:6c:f0:48:c9:36:e9:90:40:30:fd:fa:a2:46:67:
93:0b:42:d7:d3:5c:11:16:c4:6d:80:13:9f:08:0e:
6d:63:ef:59:01:fe:08:17:d0:da:a9:6c:c5:8e:f4:
93:ff:65:a8:7d:34:a6:3c:28:be:6c:ab:21:1e:db:
33:58:52:35:71:2e:db:c6:f6:85:1c:1e:53:b5:66:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:C0:9B:CC:28:6C:B7:90:F4:2A:27:82:9B:7D:F2:0F:AE:91:47
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:89:2a:ee:39:30:31:0c:31:88:ca:f9:32:32:99:fc:f3:ea:
5c:22:37:e5:7b:5e:02:7f:b2:37:71:d4:9d:71:92:a1:35:f9:
b5:52:32:c9:16:5f:2b:1c:9c:35:a1:06:f2:e3:7a:2d:c4:66:
40:24:79:65:c4:5b:6c:2d:9b:7b:20:d9:5f:e5:5f:65:45:6b:
e8:1f:68:4d:94:29:29:56:2c:69:e4:83:50:56:96:31:00:8c:
26:d5:64:e7:68:ef:db:47:6f:4a:05:2f:1b:8f:93:4f:15:1b:
12:65:8a:50:d1:1e:f6:90:4d:1b:7d:77:98:3c:93:15:b1:46:
0e:c3:ce:8e:e3:46:f7:3c:ce:44:45:80:f3:3c:88:96:f8:64:
3f:9f:ab:20:09:06:69:ea:75:30:4e:96:45:e8:bd:5a:60:e9:
ef:75:7b:73:96:4b:60:79:80:77:42:f0:e1:04:fe:65:2c:d4:
12:b9:6c:4d:25:ea:46:22:2f:c0:a0:57:5c:91:81:65:b5:5a:
8b:7f:f1:bf:45:0a:80:c5:8f:a0:0d:ba:54:11:a3:b7:ea:c8:
19:ca:2f:7b:8c:66:e7:c5:c4:20:1b:45:4b:41:ca:d0:f5:62:
86:66:41:9c:28:cb:30:ec:d6:7f:c8:83:34:db:d3:45:b2:a1:
e5:92:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:34:44 2026 by rpki-client