Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
File: 1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json)
Hash identifier: aSr3utcL9O8fujeR79oh6YSTjKdmAmSkxSuPkS3n4Sg=
Subject key identifier: 9B:4C:9A:00:3F:D4:71:9D:2E:8E:CA:29:EC:47:FA:7C:E6:22:C4:45
Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
Certificate issuer: /CN=d66df7599e243b462864126a8c241078a2e2b045
Certificate serial: 019D38D33B643A36733BECF29C14ADDA944A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
Manifest number: 0134
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: 4T/0P+n6s+74QsGrKG0MjtlJUjpKa8Z0E1Sl+lWcaNA=)
2: DRNZ2Noj1jQqoeJCWv4JOU1HsDw.roa (hash: yIgbar3MOMeY3sZNtgZrdUU7Wm2ezjgMSXqvJFogWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3b:64:3a:36:73:3b:ec:f2:9c:14:ad:da:94:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=9b4c9a003fd4719d2e8eca29ec47fa7ce622c445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:18:94:46:7d:73:0d:02:91:a7:0d:e8:f1:
c2:56:14:16:7f:c3:05:83:f6:79:3c:f6:e2:ee:4a:
99:2a:b7:67:f6:d9:ae:43:0d:c6:af:0b:de:df:b9:
cf:91:29:37:f3:d7:45:25:69:8d:88:d3:58:88:c7:
28:10:7c:2c:4b:15:0b:f9:f4:22:bc:49:e0:e8:0b:
06:df:48:24:dd:fa:e8:0c:86:ba:7f:dd:ab:4b:ac:
31:bf:6d:c2:62:ff:29:4c:98:0c:86:a9:58:af:55:
1b:06:e8:d3:a5:0e:d3:b1:ad:0f:b0:a3:da:64:5b:
3c:31:e1:00:36:72:10:8e:05:75:5f:f9:00:74:71:
92:64:57:53:9a:61:7d:47:74:42:3e:0b:82:5f:44:
2d:8f:95:75:a8:29:be:8c:b6:4c:06:f2:48:38:b1:
14:1d:b7:c8:f7:75:66:b5:0d:24:5b:83:a2:de:0d:
57:93:41:26:c3:6a:ae:14:f7:d9:80:d6:7f:f9:1d:
7f:d1:58:24:b0:b0:13:5d:e2:96:b3:8b:d7:ca:8e:
01:bb:7f:a0:7d:3f:41:76:9e:64:c2:fd:f9:51:4e:
ad:0d:3a:e6:ab:67:77:77:6e:7b:a8:99:70:e9:18:
47:28:d0:63:f4:b6:bc:b7:11:b4:23:b7:4a:07:b1:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:9A:00:3F:D4:71:9D:2E:8E:CA:29:EC:47:FA:7C:E6:22:C4:45
X509v3 Authority Key Identifier:
keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:66:ab:c6:56:74:b6:eb:39:e2:bf:54:6d:57:43:2c:86:6d:
a3:09:84:3c:23:f6:f9:b0:fe:f2:83:10:ac:42:33:4d:6c:e2:
35:9f:8d:fb:75:ab:2c:d5:35:9e:2c:72:01:b1:e1:ae:6a:b7:
6b:03:20:2d:95:e0:75:1d:ae:cf:2c:e4:a3:c1:23:5f:a9:0f:
d2:56:a1:3a:b9:a3:4a:9a:39:67:55:60:79:a1:b2:1f:71:0b:
ec:38:fa:cb:29:8c:37:a7:49:3b:11:ef:43:07:99:ff:7d:b4:
b9:26:c3:41:0e:94:4c:79:86:94:bd:de:58:d4:6a:ec:f0:79:
9a:1e:00:9c:30:38:1d:a8:81:96:9a:d5:b1:77:bf:42:f1:39:
df:a6:d6:cd:9d:f3:cb:b1:92:87:3a:1c:39:75:d2:0b:6d:15:
23:ac:ca:10:a0:de:72:27:b6:76:ef:08:e1:e0:0f:f3:92:99:
c3:77:6b:44:a6:97:aa:56:cb:69:c6:ec:84:25:00:fd:90:4d:
56:ac:18:ab:ea:0d:dc:fb:a5:68:48:36:b5:a2:24:f9:66:a5:
92:3b:23:b2:b4:23:df:30:79:12:50:60:08:cd:e6:3b:92:c5:
36:6c:a4:69:41:83:40:b2:1b:66:fc:d4:d2:34:22:0b:66:8b:
6c:c1:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client