Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: LqWDFuiekdZr0lLYBim66N8bEZAwsrcYEirjqZLj6mk=
Subject key identifier: 2F:FF:B9:68:17:2B:AF:20:98:F7:2C:F9:9A:B7:A6:CD:B4:94:46:4A
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 01A180E28F93FB95FD0876B9DCA706F02B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: 02DF
Signing time: Wed 28 Oct 2026 05:01:33 +0000
Manifest this update: Wed 28 Oct 2026 05:01:33 +0000
Manifest next update: Thu 29 Oct 2026 05:01:33 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: 8BlEmIuSbRiEvVG6NOQmvOGj8+o2YM9HMCkcqjJYGOk=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:8f:93:fb:95:fd:08:76:b9:dc:a7:06:f0:2b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Oct 28 05:01:33 2026 GMT
Not After : Oct 29 05:01:33 2026 GMT
Subject: CN=2fffb968172baf2098f72cf99ab7a6cdb494464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:7b:80:80:28:9e:bd:06:94:19:5a:42:8c:
91:9b:97:ef:ae:18:9b:4d:f8:b8:f0:61:c9:a8:b7:
0c:73:6c:02:5d:81:1a:86:46:11:e7:84:b2:dd:fc:
b4:94:bd:c2:aa:f7:e3:d0:8c:c5:6c:c6:30:1f:a3:
83:62:84:be:ec:37:97:4c:4e:89:fe:75:58:23:48:
68:8c:36:cd:e7:81:f5:71:bf:98:31:a8:02:de:07:
98:f6:b8:f8:13:e6:8b:ea:3c:b3:45:de:84:d0:1e:
17:bd:cd:b1:e7:56:eb:78:54:6c:dc:3d:05:db:55:
b7:df:5f:58:a7:22:47:4c:28:33:8b:4e:f5:0e:ae:
57:f4:3f:a7:f2:d4:5d:fc:04:ce:c9:ce:46:15:e6:
93:a9:ce:83:bf:41:fa:ca:00:23:85:d1:42:58:54:
98:78:97:f4:a0:de:e4:44:4e:6a:f1:61:e7:7c:11:
1f:bd:02:88:19:e0:d9:ed:61:8c:82:23:fb:e4:43:
a9:fe:ca:56:d6:11:93:ab:7c:4e:ad:b0:f2:cf:1a:
2d:b0:43:61:31:47:37:63:cf:4f:27:ae:5d:c2:12:
eb:a6:15:c9:5d:af:44:86:da:86:95:83:d4:6f:a5:
e2:78:ba:6c:61:80:bd:6f:11:20:ca:03:33:34:e8:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:B9:68:17:2B:AF:20:98:F7:2C:F9:9A:B7:A6:CD:B4:94:46:4A
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d7:4a:ee:1f:0a:26:65:3b:e7:88:98:f2:47:38:6d:9a:6b:
15:19:f7:dd:58:09:a4:d0:26:03:45:a7:6c:2d:9e:a6:ff:c0:
49:38:25:10:ee:68:a4:4a:3f:d1:2f:97:2c:f6:51:68:0e:b5:
67:76:1c:f6:04:d9:1a:07:77:1f:13:f3:73:b9:1e:9e:92:dc:
f7:83:2e:0d:d3:b0:c4:35:4c:85:88:b0:ed:7b:e5:b7:96:9e:
14:b0:5d:bb:4e:8d:65:61:7a:fc:9c:06:c5:c4:35:4f:2d:c9:
32:96:8e:9a:5a:12:8a:58:d8:4b:29:89:35:5b:e4:b1:0c:88:
00:1f:99:bf:ac:ca:59:3e:6f:ed:3c:e6:bb:9d:a7:be:92:d2:
32:59:68:9e:5e:0c:ce:d6:f1:8d:98:44:9a:32:4f:e3:47:1e:
74:d0:23:84:05:82:27:df:7b:8f:7b:cb:84:2f:5f:81:2c:cb:
2f:ee:b2:8d:72:90:75:c1:89:1b:dc:67:17:5a:f3:ea:bd:25:
7f:54:23:c1:d5:13:1f:0e:9f:8a:07:16:90:cf:a7:5e:a7:f3:
89:08:5d:5e:5d:43:11:57:7d:1b:b9:01:20:93:8a:a0:d7:fb:
a2:17:91:0b:09:0f:88:0f:2b:ec:4d:a0:00:85:99:80:41:53:
4b:b8:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:09 2026 by rpki-client