Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: Aash/bQlert6YKIUk2HIcdu0bNHKjmu2xVp6GjLI7Co=
Subject key identifier: EA:B8:E6:4A:1A:82:91:27:F0:67:A8:E8:A5:44:0D:CD:D8:22:56:0E
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01A0D07F6AF64F45426DC35D7A7D64340DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 113C
Signing time: Wed 23 Sep 2026 23:00:06 +0000
Manifest this update: Wed 23 Sep 2026 23:00:06 +0000
Manifest next update: Thu 24 Sep 2026 23:00:06 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 51wH+ZV9lX+VVOhdABfNPEEgEJe046bjLk79YiM6Qq0=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:6a:f6:4f:45:42:6d:c3:5d:7a:7d:64:34:0d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Sep 23 23:00:06 2026 GMT
Not After : Sep 24 23:00:06 2026 GMT
Subject: CN=eab8e64a1a829127f067a8e8a5440dcdd822560e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:67:d1:12:4d:54:d6:97:8e:41:c5:30:cf:
65:8d:1b:28:5b:be:c7:8a:d9:22:dc:9a:2b:13:3f:
e8:2b:2e:04:3b:cd:d6:6a:bf:96:cb:5a:e8:4e:8a:
fc:7e:77:2b:43:1d:17:56:15:f8:2d:55:94:a0:dc:
e1:bf:8b:64:db:05:00:72:92:96:49:dc:c8:22:a0:
70:db:aa:30:47:a4:7b:7c:5a:9e:85:34:34:8f:9f:
b2:d2:af:46:e8:14:c3:3a:bb:3b:05:38:f2:24:14:
94:3c:1c:b2:9c:76:f3:66:cc:2e:55:ec:5e:a7:9f:
4a:25:b5:09:ac:75:72:d9:89:e0:96:35:dc:bb:01:
b4:2b:f9:89:f1:e8:b8:31:67:49:d7:59:cf:e8:57:
2e:66:82:88:f2:b0:13:9b:6e:ea:9f:a8:f0:7c:38:
96:6d:dd:01:64:d1:ba:e0:bc:eb:5d:7e:d3:88:b4:
2d:df:34:8f:c9:e5:14:66:57:69:a0:44:35:f4:47:
94:46:61:95:c7:12:ee:2c:af:0f:33:eb:7f:2d:f7:
16:6e:57:ab:af:af:9c:af:d1:fc:00:df:d6:f2:ce:
cf:b2:8e:71:e7:3c:65:e8:a5:69:e4:b9:34:18:8f:
e7:fc:10:df:5f:13:68:64:24:50:17:72:71:93:37:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:E6:4A:1A:82:91:27:F0:67:A8:E8:A5:44:0D:CD:D8:22:56:0E
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:15:eb:1e:0b:ee:d8:ac:13:da:43:00:83:96:be:e4:40:
3e:d1:56:e7:02:ee:d8:0d:33:6f:37:31:4d:7b:51:1b:2f:d9:
0a:f2:fe:c4:a1:5e:e8:69:32:e7:94:7e:80:3f:53:1a:0e:0e:
8d:16:61:cf:d9:b0:97:a1:50:b6:88:e3:8c:9c:f1:0d:5d:1b:
0f:24:26:3b:82:fc:6d:69:f0:83:54:8e:ea:5d:7d:1f:68:c7:
4b:e3:aa:9c:1a:48:6a:a4:33:57:8a:2c:26:cf:a8:96:5b:98:
90:d1:d9:f8:94:e8:50:d8:dc:ba:4a:9a:92:4a:71:9a:68:30:
6c:41:96:b9:56:a1:c1:bc:7d:43:1c:e0:45:12:f9:72:6e:ec:
72:c5:90:74:48:9d:aa:8e:0d:3c:d6:ab:2b:29:05:6e:06:7d:
50:ae:ff:05:f0:3a:c7:f2:83:8d:48:84:22:e9:73:b4:14:fa:
55:cd:69:02:4b:b1:38:49:cc:6a:05:99:fa:b6:82:fa:51:ea:
38:31:28:7c:3f:06:0f:ca:c1:21:99:45:2c:9e:f3:83:b1:2e:
0f:f6:45:5b:53:28:37:be:0d:da:2e:fd:9d:09:39:65:20:fb:
a3:cd:5f:68:73:28:0b:c9:42:c7:7d:a9:cc:16:49:6e:0d:9a:
80:21:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:40 2026 by rpki-client