Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: d1oufZk0Gjfi+Mo/qwC8+LTQTpt+99vBCdFPh+KQAMM=
Subject key identifier: 00:01:88:94:9D:11:82:71:D8:C2:A8:9E:44:23:22:4B:87:3F:43:CE
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019D277278E3FCA63DB441285F758E5C309F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 16DD
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: QtfSQcam1kHLwYE/t9aeIYEnhosLAf/s8OaAQ3ATEK0=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:78:e3:fc:a6:3d:b4:41:28:5f:75:8e:5c:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=000188949d118271d8c2a89e4423224b873f43ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:78:2f:88:5f:09:14:05:c0:55:7b:df:73:
a0:99:33:d5:2a:a3:6e:ad:57:92:bc:6b:1b:fa:91:
c6:fb:93:f7:fc:00:46:aa:43:1d:6b:db:fa:ef:2e:
e0:dd:cd:36:e5:80:9f:30:d0:92:35:90:8e:5b:58:
39:8e:14:82:1a:88:f5:9a:af:64:c8:c6:44:e5:5c:
9f:6c:93:62:5b:d2:6a:29:cd:a8:26:dc:63:41:38:
64:bc:3c:e1:85:4f:ec:1e:a1:d5:9f:d0:72:a5:f6:
28:ec:10:4a:42:2e:15:87:ae:ac:ca:d7:9a:4e:14:
d3:1d:0a:7e:d2:f8:f9:65:ff:a9:fb:19:7b:76:19:
66:80:39:87:59:4f:bb:20:d0:aa:76:2f:5b:92:f7:
67:f0:ab:46:b9:1d:e4:43:46:0c:8d:23:1c:c0:65:
b5:7e:e5:8e:30:0b:4e:ac:1e:24:f5:e3:c5:e8:09:
c6:9e:d7:93:0e:a5:db:78:5f:4a:41:df:4d:1a:bc:
ee:cf:e1:b7:74:ca:27:02:9d:c7:c4:50:3c:4a:97:
fd:38:b7:de:c4:c6:fc:75:69:ec:a1:24:30:09:f0:
9b:9c:ae:31:2b:06:63:8c:92:61:b6:7f:5c:bf:92:
6b:3b:33:34:e3:50:b2:76:79:5c:97:5f:1a:3e:d4:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:88:94:9D:11:82:71:D8:C2:A8:9E:44:23:22:4B:87:3F:43:CE
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:e1:24:22:f4:16:65:49:6a:30:05:e7:28:c1:f1:cf:da:
4e:96:dd:10:c1:40:d0:a8:ef:2d:bb:d9:e7:1b:ae:c8:3f:89:
f7:53:a5:57:88:f9:cf:84:a2:8e:b7:c9:01:0f:3d:06:2a:70:
3d:53:5a:48:6a:e1:bd:1a:3a:2a:18:2a:44:3c:12:61:c9:3e:
ed:4a:86:55:f2:1b:11:4a:d4:b5:df:21:23:e4:f2:0f:72:8d:
da:1a:3c:07:0c:60:99:e3:94:bb:ef:c0:72:29:c4:16:34:bc:
44:bd:a5:f7:14:bb:ec:ec:73:fa:f9:50:9a:90:f8:5c:6c:2c:
b3:23:d1:8f:6b:2d:e0:1a:00:dc:14:6e:39:a2:24:a5:c9:11:
ea:cc:16:48:70:e1:a5:d7:21:43:24:dc:98:44:f4:3f:df:0c:
12:04:ee:f6:f8:26:2e:53:01:0c:7c:2b:bc:5a:e4:14:1c:db:
bd:93:62:ba:28:38:69:78:55:78:31:31:19:eb:de:94:24:f0:
bf:12:07:09:8d:81:bf:d0:17:35:e5:f3:5c:cd:c3:01:89:dd:
ba:a6:64:15:54:16:79:fd:c2:22:2d:d6:9e:23:e0:ff:74:c1:
2d:09:11:33:8c:6c:95:eb:51:bc:7a:5b:67:4d:3c:81:60:7f:
10:98:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:39 2026 by rpki-client