Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: 6F07PCRtHWdY3KPopiqUg/zxXJxp04Mn51gvG61nLHc=
Subject key identifier: A2:F1:56:24:18:1E:33:C4:49:5A:4B:EB:79:59:EE:3D:92:23:D7:B8
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 01A18676C7595577C6626D45E022F7722E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 19A6
Signing time: Thu 29 Oct 2026 07:01:33 +0000
Manifest this update: Thu 29 Oct 2026 07:01:33 +0000
Manifest next update: Fri 30 Oct 2026 07:01:33 +0000
Files and hashes: 1: Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa (hash: 1+a+B/uUbNc1Axp6SF/xxqBjGxtyMv5rURwc4G4VG9Q=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: EqRKIUFMTd9Pg4cX/Te4bY2JYOv/CzAVNTMepn9jqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:c7:59:55:77:c6:62:6d:45:e0:22:f7:72:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Oct 29 07:01:33 2026 GMT
Not After : Oct 30 07:01:33 2026 GMT
Subject: CN=a2f15624181e33c4495a4beb7959ee3d9223d7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:9c:36:1e:28:82:68:13:bf:d7:a5:da:6e:
fa:24:26:b7:91:58:79:7e:03:e8:68:10:d3:dd:d1:
56:14:d5:82:ee:fb:d2:2d:9d:0c:09:6c:2f:e0:bf:
da:db:e3:c3:c5:16:f6:ed:8c:80:5e:82:d6:e3:9c:
f8:02:71:87:10:a0:55:81:9b:f7:95:ce:fb:d7:e9:
a4:75:e8:18:08:74:72:5c:41:5e:54:ac:d4:7b:a1:
72:09:33:1f:05:c4:40:b0:35:68:09:56:4c:2e:99:
d6:f4:3e:eb:b5:67:07:fd:d1:71:52:68:af:c2:93:
79:f8:f6:11:c8:e8:c3:28:6c:2b:6e:cc:36:ce:75:
ab:dd:2e:5a:ff:a8:b4:b0:84:b9:38:ff:ac:0a:93:
a8:e5:86:57:5c:08:45:5c:63:f5:a5:08:cd:2a:8f:
87:ac:30:54:4c:08:3c:de:1a:b7:4f:4d:6f:1d:6f:
eb:67:71:f4:d9:98:6e:1e:8f:a0:1e:75:e8:6e:42:
70:32:91:1c:b9:a3:f2:d7:1c:c5:d4:c3:4c:dc:20:
f9:70:c4:7b:68:7d:a0:7f:45:3c:a1:99:50:d2:a5:
ef:a4:8f:ae:2d:ef:c9:6c:ef:e2:d2:c5:49:80:0c:
e0:87:03:e1:85:f3:c9:26:2a:5d:71:f8:fe:ec:c8:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:56:24:18:1E:33:C4:49:5A:4B:EB:79:59:EE:3D:92:23:D7:B8
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:de:95:f8:ff:47:91:47:90:af:6f:6f:fd:71:bd:a7:5a:bb:
fb:1b:97:8b:db:3f:f0:64:32:c0:9c:4d:00:6a:28:4d:79:02:
7d:e4:45:32:be:21:fc:e8:dc:3e:2c:de:4f:9b:38:25:40:4c:
ef:18:28:11:45:bd:77:fd:cb:36:52:d4:b4:a1:02:ec:0b:0e:
92:a0:39:94:df:83:b8:db:a4:8d:89:20:5a:da:00:61:83:f5:
e3:74:9e:b7:48:e1:a4:49:8b:8c:bf:83:2f:a6:ea:bf:2b:44:
e0:25:5e:e0:f7:a4:78:67:63:65:97:07:c6:de:25:dc:f5:7c:
1f:c5:30:5a:19:c3:95:71:58:df:ec:7e:0e:d3:04:79:98:2e:
fa:ed:a1:33:fe:1c:45:a6:52:f1:e8:2d:c1:81:04:55:66:1f:
36:bc:a3:6b:71:c4:af:33:a6:62:95:41:0a:9f:80:4c:7f:4d:
15:47:a8:e8:ef:9e:5d:6d:c1:67:d0:5f:4e:7d:8f:49:c2:d7:
28:f2:d4:bd:c2:95:e9:b0:30:41:ff:e4:d4:5f:f6:ee:ce:e4:
4f:42:e9:ff:7c:3d:1e:e3:4e:b6:fb:06:a4:81:56:54:2f:7d:
ba:0f:22:7c:a6:33:d8:fe:84:3b:84:e7:aa:5f:b2:5e:f8:d0:
48:e5:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:10:47 2026 by rpki-client