Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
File: 33SEs_Vo6k6qe_DLfIP172Y-sXA.mft (raw, json)
Hash identifier: cPiOfyHe7g2RxeFWnTvueJl1FJb2ZDrzf3SkdrtUko0=
Subject key identifier: 0E:21:9C:76:87:E2:68:C6:F8:B7:EA:8D:73:66:2C:6D:2F:16:67:84
Authority key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Certificate issuer: /CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Certificate serial: 01A151ACC441F84F688EB4CB228917F346B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
Manifest number: C3
Signing time: Mon 19 Oct 2026 01:00:39 +0000
Manifest this update: Mon 19 Oct 2026 01:00:39 +0000
Manifest next update: Tue 20 Oct 2026 01:00:39 +0000
Files and hashes: 1: 33SEs_Vo6k6qe_DLfIP172Y-sXA.crl (hash: 2tNMyzW3V0lcMaiIXHpobGO8Jg7rzoMECWO9r4VLXiI=)
2: sqHFwo0XB24O-EyLxoiNi9bPLc8.roa (hash: ig6fBlUC0evhdNCNW32iCNTFqWb3AD0R7kCT6EGKt9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:ac:c4:41:f8:4f:68:8e:b4:cb:22:89:17:f3:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Validity
Not Before: Oct 19 01:00:39 2026 GMT
Not After : Oct 20 01:00:39 2026 GMT
Subject: CN=0e219c7687e268c6f8b7ea8d73662c6d2f166784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:44:0d:d3:6c:91:c8:4f:c1:7b:3e:ab:f7:
32:3c:43:d0:d2:aa:d3:f0:b5:aa:2b:36:03:08:67:
81:bd:92:05:15:4f:b3:73:bc:97:a0:f2:26:aa:aa:
5a:4a:cf:b1:91:2b:f3:a7:2a:81:a6:53:ed:37:75:
36:8c:e5:55:36:98:c2:fa:b4:08:7e:f3:3c:45:f1:
83:65:bb:c4:a7:bc:75:9f:de:60:5e:ef:14:9e:1f:
f6:08:45:e9:62:25:5e:55:55:06:6f:8b:bb:8b:0c:
22:b4:8a:a7:9b:be:fe:86:1e:b4:7b:5b:fc:d5:1e:
73:9a:87:60:1c:1a:74:77:f8:e0:c4:85:e0:8b:a9:
f6:08:dd:f5:09:0c:3a:5d:d3:70:91:1c:b2:f8:b8:
bd:09:6f:24:b4:b1:f4:c8:b1:1c:4d:97:a3:0b:d9:
f4:cb:a0:24:37:8b:e5:5a:76:b9:58:99:41:0f:ff:
7e:a4:d3:c4:1e:c4:ac:e1:66:11:51:16:4a:97:51:
35:b3:eb:46:0a:09:21:a0:76:11:82:c5:18:7a:bb:
98:97:3f:94:45:bb:7f:06:b3:90:33:10:ea:f5:7d:
f3:2f:5e:58:3a:5f:e2:dd:da:88:cc:06:3a:40:f2:
68:1a:da:0c:df:a2:7e:9a:6d:e2:b1:b3:5b:d9:90:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:21:9C:76:87:E2:68:C6:F8:B7:EA:8D:73:66:2C:6D:2F:16:67:84
X509v3 Authority Key Identifier:
keyid:DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a1:36:26:bb:25:34:9e:ba:36:54:43:a5:c7:98:bf:c8:5d:
63:70:46:c8:53:f5:a6:e7:20:1d:33:49:ad:bf:44:98:82:53:
53:99:2a:07:7e:c5:68:0e:c0:50:48:95:62:2a:b7:c6:a5:d4:
53:04:49:38:30:3b:c1:6a:42:4e:69:cb:d5:4f:25:58:74:1d:
4f:20:f6:09:43:55:51:33:18:65:20:cf:fd:3c:ed:37:90:4b:
94:b8:b0:c9:28:1d:57:f8:17:2f:29:ee:dd:0e:e5:be:f2:d5:
65:ea:b5:72:9d:0b:a6:55:ec:39:13:e7:8d:33:5a:8b:15:fb:
bf:f4:e7:b2:ab:04:21:19:6b:37:fe:8f:d8:a2:19:b7:eb:d0:
26:41:59:63:7d:13:2b:8a:a3:96:17:8e:66:77:a9:c1:7f:93:
b1:bc:58:4f:09:1a:a7:37:aa:d4:65:2c:be:00:3f:80:9b:04:
d6:27:88:35:c9:6d:8c:77:8c:96:58:a3:6d:09:97:eb:a6:f0:
d5:46:2d:1e:66:15:cd:ba:e1:46:e6:70:f5:48:15:8e:19:09:
13:d5:71:59:2a:a2:9d:33:05:c2:d7:7c:56:03:b1:3b:3a:5d:
c2:30:24:c0:38:a8:05:9e:44:6b:9e:40:14:70:78:a2:d1:6d:
bb:1e:89:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRrMRB+E9ojrTLIokX80awMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzQ4NGIzZjU2OGVhNGVhYTdiZjBjYjdjODNmNWVmNjYz
ZWIxNzAwHhcNMjYxMDE5MDEwMDM5WhcNMjYxMDIwMDEwMDM5WjAzMTEwLwYDVQQD
EygwZTIxOWM3Njg3ZTI2OGM2ZjhiN2VhOGQ3MzY2MmM2ZDJmMTY2Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6NEDdNskchPwXs+q/cyPEPQ0qrT
8LWqKzYDCGeBvZIFFU+zc7yXoPImqqpaSs+xkSvzpyqBplPtN3U2jOVVNpjC+rQI
fvM8RfGDZbvEp7x1n95gXu8Unh/2CEXpYiVeVVUGb4u7iwwitIqnm77+hh60e1v8
1R5zmodgHBp0d/jgxIXgi6n2CN31CQw6XdNwkRyy+Li9CW8ktLH0yLEcTZejC9n0
y6AkN4vlWna5WJlBD/9+pNPEHsSs4WYRURZKl1E1s+tGCgkhoHYRgsUYeruYlz+U
Rbt/BrOQMxDq9X3zL15YOl/i3dqIzAY6QPJoGtoM36J+mm3isbNb2ZCm+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4hnHaH4mjG+LfqjXNmLG0vFmeEMB8GA1UdIwQY
MBaAFN90hLP1aOpOqnvwy3yD9e9mPrFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNTRXNfVm82azZxZV9ETGZJUDE3Mlktc1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81Y2M5M2MtMjEwYy00YjA4LWIxYmMt
MjAwNTkyNDJkOTIxLzEvMzNTRXNfVm82azZxZV9ETGZJUDE3Mlktc1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81Y2M5M2MtMjEwYy00YjA4LWIxYmMtMjAwNTkyNDJkOTIx
LzEvMzNTRXNfVm82azZxZV9ETGZJUDE3Mlktc1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKE2Jrsl
NJ66NlRDpceYv8hdY3BGyFP1pucgHTNJrb9EmIJTU5kqB37FaA7AUEiVYiq3xqXU
UwRJODA7wWpCTmnL1U8lWHQdTyD2CUNVUTMYZSDP/TztN5BLlLiwySgdV/gXLynu
3Q7lvvLVZeq1cp0LplXsORPnjTNaixX7v/TnsqsEIRlrN/6P2KIZt+vQJkFZY30T
K4qjlheOZnepwX+TsbxYTwkapzeq1GUsvgA/gJsE1ieINcltjHeMllijbQmX66bw
1UYtHmYVzbrhRuZw9UgVjhkJE9VxWSqinTMFwtd8VgOxOzpdwjAkwDioBZ5Ea55A
FHB4otFtux6JMw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:43 2026 by rpki-client