Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: 5adUJ0WjTMkmV2SgwTGwmp6+5tdjNKSITuyvtjiQ58s=
Subject key identifier: 39:DF:68:A7:40:BB:15:FA:24:1D:52:8F:4C:07:C2:24:FF:3E:F2:FD
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 019F9FCDC5B921B1803187AA59DE415574B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 18AA
Signing time: Sun 26 Jul 2026 19:01:30 +0000
Manifest this update: Sun 26 Jul 2026 19:01:30 +0000
Manifest next update: Mon 27 Jul 2026 19:01:30 +0000
Files and hashes: 1: Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa (hash: 1+a+B/uUbNc1Axp6SF/xxqBjGxtyMv5rURwc4G4VG9Q=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: Y1rPpHC/Vonq7CZhTbcquuUnzuWbfPm8MhYAhxseArs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:c5:b9:21:b1:80:31:87:aa:59:de:41:55:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Jul 26 19:01:30 2026 GMT
Not After : Jul 27 19:01:30 2026 GMT
Subject: CN=39df68a740bb15fa241d528f4c07c224ff3ef2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:c1:0b:fb:6c:e4:34:32:ff:9f:19:30:59:
42:4b:fd:38:c1:a3:ba:ce:d4:f4:08:09:39:08:e6:
79:19:eb:22:27:09:f3:8d:cb:2f:58:f9:80:25:86:
8b:98:a5:77:8f:fe:6e:66:46:e9:a4:7a:bf:f6:ab:
eb:28:2d:96:8f:88:d4:63:2f:6c:3c:9e:50:15:6b:
aa:0c:5b:f0:4c:a4:15:f6:fb:fe:03:74:23:18:ae:
ab:fe:8c:ff:db:0a:3a:ac:bd:f3:94:3d:25:21:d4:
d3:e1:7d:d8:3f:f9:f7:f2:45:d4:88:eb:c2:4b:cc:
ce:f7:3c:8c:ae:98:5b:9b:5b:4e:4b:44:05:02:06:
8b:86:28:3f:9c:af:c3:3f:e7:b3:f0:29:50:03:1c:
06:9c:61:82:d7:23:63:ad:a7:01:c9:4f:68:ae:6f:
69:bf:52:0a:c3:5c:ce:bb:6b:7f:6a:d5:0c:61:87:
6d:68:34:c6:07:95:29:71:d5:b8:e9:11:d1:bd:e8:
f8:09:89:d2:d3:16:e1:17:35:33:f1:d9:74:64:ae:
61:24:c2:28:9e:4c:a2:c4:a7:5e:7d:99:87:37:37:
0d:87:aa:10:13:df:59:d7:5f:3e:10:f5:59:2e:fd:
6c:18:4d:81:29:df:7e:2b:61:8b:52:b4:02:22:60:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:68:A7:40:BB:15:FA:24:1D:52:8F:4C:07:C2:24:FF:3E:F2:FD
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3c:b5:f2:04:67:26:a7:1f:d6:ba:39:b2:6f:24:c4:d9:71:
25:5f:80:3b:c9:e5:8a:71:65:7a:a6:81:92:82:72:51:b8:c4:
59:c5:bb:0e:7e:d8:fd:9d:99:51:22:09:25:94:96:bb:23:99:
51:76:15:de:bc:d4:e9:86:25:4e:a3:8e:58:c8:9b:68:7e:b1:
51:b4:5e:ce:9c:36:9f:7d:81:11:c5:ce:6e:d7:28:20:91:47:
84:5d:d5:fb:aa:4f:d7:e1:fb:d8:39:98:0c:0d:9b:ff:00:30:
2c:90:42:64:74:16:1a:de:4f:46:ef:86:9b:c9:27:32:a9:4c:
75:9c:48:d3:14:8f:61:8b:f2:8e:09:19:32:bd:f8:bf:de:ff:
64:c6:af:ef:9c:64:e3:4c:13:3d:0d:1d:b8:f6:fe:d2:eb:87:
02:67:06:c5:e3:0c:76:13:81:bb:b2:7f:b7:a7:52:51:43:e4:
28:ba:6a:59:e2:c7:ca:2c:bb:ac:ee:1e:cb:ba:1a:cc:be:8a:
62:9b:39:d6:11:2e:40:05:c7:e6:f5:b4:06:44:48:cb:ac:ef:
03:c6:94:64:5b:91:b6:67:08:74:ff:e6:af:59:2c:1b:0d:92:
37:12:77:75:96:43:81:45:5c:15:ef:76:1f:b9:69:ec:bb:34:
0b:df:dd:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzcW5IbGAMYeqWd5BVXS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx
N2MzOGMwHhcNMjYwNzI2MTkwMTMwWhcNMjYwNzI3MTkwMTMwWjAzMTEwLwYDVQQD
EygzOWRmNjhhNzQwYmIxNWZhMjQxZDUyOGY0YzA3YzIyNGZmM2VmMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OjBC/ts5DQy/58ZMFlCS/04waO6
ztT0CAk5COZ5GesiJwnzjcsvWPmAJYaLmKV3j/5uZkbppHq/9qvrKC2Wj4jUYy9s
PJ5QFWuqDFvwTKQV9vv+A3QjGK6r/oz/2wo6rL3zlD0lIdTT4X3YP/n38kXUiOvC
S8zO9zyMrphbm1tOS0QFAgaLhig/nK/DP+ez8ClQAxwGnGGC1yNjracByU9orm9p
v1IKw1zOu2t/atUMYYdtaDTGB5UpcdW46RHRvej4CYnS0xbhFzUz8dl0ZK5hJMIo
nkyixKdefZmHNzcNh6oQE99Z118+EPVZLv1sGE2BKd9+K2GLUrQCImD3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnfaKdAuxX6JB1Sj0wHwiT/PvL9MB8GA1UdIwQY
MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt
OWM3NmQxMGVjNTMyLzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy
LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDy18gRn
Jqcf1ro5sm8kxNlxJV+AO8nlinFleqaBkoJyUbjEWcW7Dn7Y/Z2ZUSIJJZSWuyOZ
UXYV3rzU6YYlTqOOWMibaH6xUbRezpw2n32BEcXObtcoIJFHhF3V+6pP1+H72DmY
DA2b/wAwLJBCZHQWGt5PRu+Gm8knMqlMdZxI0xSPYYvyjgkZMr34v97/ZMav75xk
40wTPQ0duPb+0uuHAmcGxeMMdhOBu7J/t6dSUUPkKLpqWeLHyiy7rO4ey7oazL6K
Yps51hEuQAXH5vW0BkRIy6zvA8aUZFuRtmcIdP/mr1ksGw2SNxJ3dZZDgUVcFe92
H7lp7Ls0C9/dEg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:39 2026 by rpki-client