
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: GFHTgDHLEeLQLzDiIwcBf3OfNTX+bC3uoZA1MLTE2i8=
Subject key identifier: 7B:0E:C8:FB:FF:2A:E9:AF:53:43:FB:23:2E:F5:03:91:9D:F9:F0:19
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 01A0404E37ECE5E75434306D7DA34CDE2647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: 0239
Signing time: Wed 26 Aug 2026 23:01:02 +0000
Manifest this update: Wed 26 Aug 2026 23:01:02 +0000
Manifest next update: Thu 27 Aug 2026 23:01:02 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: 7Uza3UImLFw6gkEGCT/UMb8IA0NfdHZ662IRAcUOIXA=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:37:ec:e5:e7:54:34:30:6d:7d:a3:4c:de:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Aug 26 23:01:02 2026 GMT
Not After : Aug 27 23:01:02 2026 GMT
Subject: CN=7b0ec8fbff2ae9af5343fb232ef503919df9f019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:dd:7b:c0:1a:52:c8:f0:07:38:ac:0c:18:
82:a1:78:8f:06:eb:e2:88:4f:19:1c:4b:6d:63:51:
7f:c4:da:65:5a:50:15:47:7a:52:e1:4a:06:30:7f:
9b:66:b2:86:f9:43:43:6f:51:ed:f0:88:6a:c1:50:
c9:88:c6:2b:14:49:44:99:4a:d3:a6:22:d7:e0:c0:
76:e9:23:0b:36:0a:16:a4:b5:33:d7:ea:ed:2d:06:
dc:59:98:f7:5a:95:07:1d:2f:20:ce:e7:7c:f9:fe:
7a:d8:1e:cd:e6:72:ba:8f:e6:f8:24:b7:3f:15:4d:
69:87:6e:27:a1:84:d5:30:f6:a5:0e:73:8b:6c:d9:
05:34:35:40:3e:64:3c:8c:09:72:95:c6:64:d7:00:
04:66:0c:4f:b8:6b:68:45:f7:fb:49:e5:82:23:39:
26:fa:33:3f:e8:59:8e:86:a5:bc:bc:02:31:a9:6c:
32:eb:28:b9:17:8e:6d:ac:6c:56:d1:6f:25:3b:92:
dd:5f:4e:6c:a1:ca:0a:19:4f:46:12:95:9b:05:8b:
6e:53:27:46:63:49:10:1c:41:ba:0d:18:fc:54:5a:
81:c2:fc:21:72:31:0f:46:d3:0f:ed:fb:ce:6f:16:
a0:3a:0b:3b:d7:74:2a:50:34:49:04:81:2a:85:ff:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:C8:FB:FF:2A:E9:AF:53:43:FB:23:2E:F5:03:91:9D:F9:F0:19
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:db:2d:8f:09:c7:fe:b9:6d:2e:36:e4:bd:fb:fb:28:27:11:
83:03:f9:a9:3a:66:ed:b3:9e:9e:7a:8a:b5:03:68:91:b1:9b:
91:42:ff:bb:37:a7:46:54:35:e2:4e:5f:32:e8:1c:91:30:ad:
86:17:00:11:bd:96:d9:6d:dc:e7:dc:38:3b:04:37:3c:62:90:
d0:6a:c1:d6:18:91:55:22:44:cb:7b:d0:fb:d2:73:c1:e8:cf:
46:bf:7e:88:ac:34:f8:6a:fb:76:f3:66:f9:eb:16:16:96:d7:
48:16:90:ac:22:c5:7e:60:e6:93:53:f0:8e:d4:79:cd:9a:49:
e7:14:b5:6d:5d:00:4c:55:a7:2d:25:7b:da:0d:53:b1:b5:56:
16:82:48:cc:54:28:a6:6b:42:57:8d:19:c1:4e:c7:c5:47:e5:
c1:17:0b:28:cc:31:f8:6b:f2:4f:46:c9:7b:4e:db:37:9a:fd:
d7:0c:61:ac:b1:88:3b:14:01:27:2c:f2:5c:e5:71:c2:f1:a5:
ec:a3:c9:10:c9:9b:19:b4:68:9d:40:c6:2c:bc:7e:c2:39:55:
42:77:c4:b5:bd:91:bd:7f:0e:a5:40:c3:a9:dd:31:17:1b:b4:
4f:ce:c7:1f:e5:5b:0a:0c:fd:f7:f5:bc:da:85:6f:74:a8:0f:
26:82:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:24 2026 by rpki-client