Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: R2zGmVbPGH3TMBz0Y/oWb42u4RLAVV1i4zCkF74YZtQ=
Subject key identifier: C2:07:CA:60:59:78:8F:65:FE:EE:0C:48:80:7D:F4:58:48:39:AA:3E
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019E1CB4767130FA9D68B098BB9C20704D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 175C
Signing time: Tue 12 May 2026 15:00:49 +0000
Manifest this update: Tue 12 May 2026 15:00:49 +0000
Manifest next update: Wed 13 May 2026 15:00:49 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: qeTbfN/yMpsJwLdA4tVrvZ5lF4uwkUvNq4JORoarH+c=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:76:71:30:fa:9d:68:b0:98:bb:9c:20:70:4d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: May 12 15:00:49 2026 GMT
Not After : May 13 15:00:49 2026 GMT
Subject: CN=c207ca6059788f65feee0c48807df4584839aa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:12:71:07:9a:59:c8:d3:7b:3f:d2:25:b5:
08:25:11:52:f7:79:1f:10:a6:41:a2:df:c9:7c:57:
e8:97:d0:80:f1:11:a7:28:4b:a6:ff:e9:bd:37:7d:
bc:cc:68:b8:42:40:63:6c:0b:e6:44:9c:e4:13:87:
5a:35:68:c3:e6:20:54:d2:2d:f6:c3:51:07:bb:b5:
0f:7e:ce:2f:7a:10:cf:82:8e:19:f2:d8:44:53:44:
a2:41:f8:f0:cc:0d:39:8d:b1:31:81:3d:6d:ea:83:
1a:4d:73:49:4d:59:2e:9b:ae:99:d9:9c:bd:17:18:
66:09:38:6f:6a:d5:72:5f:f0:37:eb:33:f1:2d:7b:
45:bf:b0:74:d3:89:03:a8:4b:9c:47:21:6d:69:41:
60:68:75:6b:ee:3a:76:82:43:13:13:72:b4:df:55:
9f:8d:06:68:e3:a2:b3:18:73:ee:1c:7f:69:2b:b5:
bd:97:e0:c6:46:1d:d9:8c:bc:59:fc:ae:9d:af:a0:
5e:ac:f1:e9:0b:3c:0f:67:da:80:4c:d8:57:2d:29:
e7:c2:74:74:8f:eb:3e:b7:13:ba:8b:51:13:b6:f5:
60:8a:f4:d8:52:11:8d:ae:f2:35:31:17:1d:73:42:
a4:55:29:e5:09:ac:9a:e7:df:8b:28:fa:f9:f6:28:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:07:CA:60:59:78:8F:65:FE:EE:0C:48:80:7D:F4:58:48:39:AA:3E
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:03:ff:e5:80:6c:ad:28:73:da:1c:73:78:fc:80:82:d8:07:
13:b9:1d:ed:d5:1d:a2:89:4a:04:25:2b:b1:bb:de:87:49:28:
ee:5d:fa:37:39:91:ca:3a:3a:b0:5e:c1:a2:0e:fc:cc:ce:ed:
73:b9:de:f0:2c:c9:20:ee:f9:73:bf:31:4a:55:42:68:70:a5:
ac:c3:ff:9c:56:40:d2:7d:78:d9:9b:98:f5:63:a9:2b:23:0a:
4f:4d:bd:2d:27:4c:20:58:f0:48:fe:87:11:98:11:ce:8b:8d:
e4:5b:5f:0b:29:84:83:6b:7d:cb:ac:a1:30:ee:b9:62:e4:6f:
89:d7:2a:1a:b5:ad:f3:cf:0b:84:73:6c:16:66:78:dd:37:72:
22:ca:d7:80:f5:56:e4:d9:ef:b3:97:3f:f7:75:dd:b2:f7:66:
42:46:03:6b:5d:15:0d:44:05:f8:7e:9d:be:35:1a:21:d3:1f:
d1:ea:a8:ec:34:7b:ce:ab:73:20:bd:6c:8d:22:a0:63:ce:ab:
33:30:ca:ff:f1:5d:0e:76:11:47:87:46:41:6d:0e:c6:ff:cf:
7e:bc:1a:af:91:b5:62:69:e0:1d:69:7d:1e:9b:cf:11:12:0a:
76:6b:73:ea:f6:0e:d7:7d:54:a9:ed:eb:8f:4e:89:d6:19:c3:
25:84:89:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctHZxMPqdaLCYu5wgcE04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk
YjdiNzcwHhcNMjYwNTEyMTUwMDQ5WhcNMjYwNTEzMTUwMDQ5WjAzMTEwLwYDVQQD
EyhjMjA3Y2E2MDU5Nzg4ZjY1ZmVlZTBjNDg4MDdkZjQ1ODQ4MzlhYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TQScQeaWcjTez/SJbUIJRFS93kf
EKZBot/JfFfol9CA8RGnKEum/+m9N328zGi4QkBjbAvmRJzkE4daNWjD5iBU0i32
w1EHu7UPfs4vehDPgo4Z8thEU0SiQfjwzA05jbExgT1t6oMaTXNJTVkum66Z2Zy9
FxhmCThvatVyX/A36zPxLXtFv7B004kDqEucRyFtaUFgaHVr7jp2gkMTE3K031Wf
jQZo46KzGHPuHH9pK7W9l+DGRh3ZjLxZ/K6dr6BerPHpCzwPZ9qATNhXLSnnwnR0
j+s+txO6i1ETtvVgivTYUhGNrvI1MRcdc0KkVSnlCaya59+LKPr59iiuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIHymBZeI9l/u4MSIB99FhIOao+MB8GA1UdIwQY
MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt
NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj
LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwP/5YBs
rShz2hxzePyAgtgHE7kd7dUdoolKBCUrsbveh0ko7l36NzmRyjo6sF7Bog78zM7t
c7ne8CzJIO75c78xSlVCaHClrMP/nFZA0n142ZuY9WOpKyMKT029LSdMIFjwSP6H
EZgRzouN5FtfCymEg2t9y6yhMO65YuRvidcqGrWt888LhHNsFmZ43TdyIsrXgPVW
5Nnvs5c/93XdsvdmQkYDa10VDUQF+H6dvjUaIdMf0eqo7DR7zqtzIL1sjSKgY86r
MzDK//FdDnYRR4dGQW0Oxv/Pfrwar5G1YmngHWl9HpvPERIKdmtz6vYO131Uqe3r
j06J1hnDJYSJEw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:22 2026 by rpki-client