Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
File: 33SEs_Vo6k6qe_DLfIP172Y-sXA.mft (raw, json)
Hash identifier: 5lAlhuJneEi5K7SHe95uNQNauhWES0cFUC6imjk4RnM=
Subject key identifier: 36:16:35:F7:2D:33:5D:15:D6:E5:0E:47:7D:11:F6:4A:8D:0D:9C:41
Authority key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Certificate issuer: /CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Certificate serial: 01A03F7237290D90620332AA7084BE52BC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
Manifest number: 35
Signing time: Wed 26 Aug 2026 19:00:44 +0000
Manifest this update: Wed 26 Aug 2026 19:00:44 +0000
Manifest next update: Thu 27 Aug 2026 19:00:44 +0000
Files and hashes: 1: 33SEs_Vo6k6qe_DLfIP172Y-sXA.crl (hash: 7BLhamVjpoyu/L33aUR/eDjUEqrNumFpN/eeZUqaMN8=)
2: sqHFwo0XB24O-EyLxoiNi9bPLc8.roa (hash: ig6fBlUC0evhdNCNW32iCNTFqWb3AD0R7kCT6EGKt9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:37:29:0d:90:62:03:32:aa:70:84:be:52:bc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Validity
Not Before: Aug 26 19:00:44 2026 GMT
Not After : Aug 27 19:00:44 2026 GMT
Subject: CN=361635f72d335d15d6e50e477d11f64a8d0d9c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:bd:08:84:77:10:db:f0:50:58:1e:0b:33:
5d:6a:c3:d5:00:7e:cb:bb:88:2a:05:9f:72:1c:1f:
f4:40:38:a2:f8:20:3f:f9:64:5d:f3:20:86:c7:9c:
fd:ad:ed:3b:ef:e0:cd:de:ad:7b:44:72:c3:81:9f:
32:26:fb:e4:22:8b:e5:a4:be:15:59:ae:0e:7d:64:
a6:87:12:31:74:e4:0f:e8:f6:91:ba:ae:b7:03:dc:
7a:20:93:d0:ce:09:af:1d:71:be:80:ab:e7:48:9f:
1e:33:1c:74:63:dd:90:26:68:b0:13:13:43:4d:79:
ac:54:39:6e:1d:f4:fd:0e:dc:70:95:76:9b:0c:a9:
01:7a:73:68:42:f8:a2:c6:82:86:fd:58:52:0f:71:
ac:2d:ce:13:be:b7:21:e6:ac:db:68:3e:00:10:34:
fc:57:a2:4c:b1:07:fa:69:35:37:2d:a0:8e:fa:67:
2d:43:87:70:e0:f0:18:db:d6:6b:dd:60:e4:c1:1b:
56:a5:77:f1:7b:2e:89:49:81:69:f6:cf:8d:fa:77:
81:0c:d8:4a:90:00:a0:f2:03:2b:44:17:1d:72:f6:
83:ab:2a:ba:e7:fb:92:5d:66:8c:0d:ca:77:06:11:
17:b1:63:6a:5b:0d:13:e2:0d:b2:fa:43:32:03:cc:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:35:F7:2D:33:5D:15:D6:E5:0E:47:7D:11:F6:4A:8D:0D:9C:41
X509v3 Authority Key Identifier:
keyid:DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fb:d2:c5:2f:9b:e8:d6:31:0c:01:71:c8:0d:70:66:6f:d8:
d4:69:d2:83:4f:a4:99:95:42:c0:f7:66:f6:04:e6:b4:4a:ba:
1b:2f:97:b5:8d:a0:1c:77:4d:c8:a1:7b:fc:6f:e4:73:a3:06:
85:f2:c9:2e:86:6d:17:24:10:63:4f:43:42:5d:a2:88:11:b9:
45:96:70:be:18:b2:fb:d6:01:a7:ff:64:5a:6b:d4:bf:c9:94:
23:ae:ae:7c:8f:a1:b4:e5:36:a7:77:b6:6b:75:4c:1e:d8:c2:
b0:01:25:34:5b:a6:7f:30:a9:4f:c4:c1:1d:06:60:35:58:03:
b1:a5:12:af:b9:3c:3b:68:10:34:96:fb:85:13:9f:f1:d5:37:
2f:6e:c4:21:79:20:12:f1:fe:8e:a3:e6:0d:7e:ad:b0:55:80:
b8:29:42:d6:1f:71:90:66:b9:0e:97:61:82:0f:8a:a9:70:04:
5f:fa:8d:be:d8:63:a2:79:03:35:f5:36:53:43:93:90:14:30:
52:41:4f:2c:36:98:05:4d:a9:ee:0e:7c:9e:3a:d8:50:2d:bd:
97:74:58:1b:ec:b0:6d:46:79:67:cd:72:ac:12:c5:6f:9b:c6:
09:bf:7f:84:39:ff:c8:3b:67:c4:6f:07:4e:6e:34:92:e8:79:
e7:0b:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:06:06 2026 by rpki-client