Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: Y+UiofZPV5osXmown1TNFGzj2Z26M65m9R3+wm7w1ek=
Subject key identifier: F8:F1:EE:EB:FB:83:C7:73:26:B1:0A:17:BF:7C:F8:F7:9A:E5:D9:F1
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 01A1CEFD359FE1ED7A55C0BF85E3D0AB3DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1946
Signing time: Thu 12 Nov 2026 09:01:02 +0000
Manifest this update: Thu 12 Nov 2026 09:01:02 +0000
Manifest next update: Fri 13 Nov 2026 09:01:02 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: xkzMMyzL5bpSCeOcU0KBymoDnoqDx7PyQyocs8ECexI=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:fd:35:9f:e1:ed:7a:55:c0:bf:85:e3:d0:ab:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Nov 12 09:01:02 2026 GMT
Not After : Nov 13 09:01:02 2026 GMT
Subject: CN=f8f1eeebfb83c77326b10a17bf7cf8f79ae5d9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:ea:e8:ff:b8:c3:e1:6f:44:92:f9:fe:6b:
1e:ee:16:03:2a:4b:c9:9c:9e:fd:5e:b7:bb:f7:19:
17:8d:eb:47:ff:4c:7a:ac:03:8d:33:33:03:f7:b2:
1e:a9:13:ee:a9:7f:29:03:4b:83:97:ab:14:86:99:
d0:d1:b6:86:5b:2f:f8:6e:03:b2:5e:4f:f6:d0:ff:
bd:16:6d:c3:ab:2f:d0:18:f3:98:5c:7f:37:fc:00:
da:cb:5a:9d:93:05:29:fc:c6:03:da:00:18:6e:25:
24:08:b7:99:63:2b:8e:ec:fb:e4:df:28:c2:be:93:
a4:ca:d4:8c:29:99:c7:cc:c2:ca:30:58:b2:59:5d:
f8:b7:a1:d1:31:f5:26:78:53:fd:a2:c6:57:2c:3c:
c6:04:a3:2b:79:11:8b:60:50:12:d8:7f:44:d1:f6:
d3:a7:95:6d:08:cf:f4:e7:63:70:fc:75:5b:d4:56:
65:63:97:22:33:ea:3c:24:93:87:ef:80:9c:53:75:
30:bf:a3:9d:e0:1a:f8:50:ad:8d:a4:9b:cd:7c:35:
1e:cb:f8:30:02:e0:71:6e:0d:f6:e5:c4:7d:ba:9b:
fb:b6:24:90:93:7c:c7:0a:cd:19:11:9e:e3:52:92:
de:f0:e4:c4:70:01:7e:d6:91:65:ca:75:e6:53:9a:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:EE:EB:FB:83:C7:73:26:B1:0A:17:BF:7C:F8:F7:9A:E5:D9:F1
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:49:76:b9:cc:77:91:37:79:45:39:94:6b:da:c9:8d:82:1d:
e0:1d:12:50:5e:ce:c5:e1:8d:13:b3:f8:15:08:84:b8:6b:2f:
31:19:83:ef:b1:38:9b:df:30:62:14:81:30:a6:2c:2b:ee:21:
03:08:11:bd:95:8f:eb:0c:19:5a:1d:93:3b:2e:d1:c5:9d:ae:
c3:ad:df:8c:21:a3:35:68:13:47:b9:21:83:b0:92:f9:66:7b:
4a:26:a2:a9:92:7e:eb:65:5e:11:15:67:ac:36:3f:4e:a2:6c:
8d:db:43:78:fe:9d:3d:0d:29:39:b8:3e:b8:b4:f7:29:76:b1:
27:b9:65:a3:ce:71:9d:06:6a:52:f8:2a:e8:ff:a6:2e:17:5c:
29:28:4f:b6:55:5e:5b:c4:d6:0d:72:c3:b3:d1:72:29:70:c0:
2a:40:21:4d:34:5a:3c:d8:e7:56:c4:ca:dd:06:bc:82:55:f3:
7b:b9:f7:32:8f:09:26:ea:8e:ab:8b:c3:cb:db:c4:2e:bd:08:
5d:ab:5e:ad:46:a0:ae:4b:ba:fe:40:d3:b9:30:d6:3d:1c:3a:
14:f0:be:e7:67:c8:65:d7:ab:94:29:32:8a:9b:63:63:27:34:
3c:ce:de:3a:a8:6f:24:1a:c5:16:f9:ac:60:05:0f:89:5a:90:
b7:08:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 17:05:22 2026 by rpki-client