Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: jTsP/MtBhZQVzAECcoYFMolMy+7M9qNwJzrqYC9CRt4=
Subject key identifier: B0:74:C4:4E:CD:40:AE:21:EB:7F:B3:53:57:60:EF:E2:46:C2:F1:64
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019D27DF7E73F11D6B39CF2388EBF03EB488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0F57
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: FEKY5B37o+48DmtDD+d+3r6PCbCZKQAbvNXaagXYrgA=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7e:73:f1:1d:6b:39:cf:23:88:eb:f0:3e:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=b074c44ecd40ae21eb7fb3535760efe246c2f164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:70:ab:d0:a7:ba:19:81:d1:42:ca:57:80:
ea:63:95:97:72:06:cb:84:3c:ce:15:da:30:4b:6e:
0a:a3:42:fb:8e:3a:f2:25:68:21:3a:a2:36:d1:43:
e0:dd:12:08:86:61:02:33:e1:7c:c3:36:53:2f:30:
70:df:27:2f:4c:7b:38:27:2f:6a:61:38:1e:cb:1b:
f9:bc:29:a4:24:cc:66:09:de:a0:5a:ad:73:0a:05:
22:85:f8:18:5a:5c:ef:c1:f8:a3:db:04:db:a3:de:
2d:ca:3b:74:b6:64:6f:7d:d8:6d:ec:f5:4e:23:44:
81:47:31:36:89:81:b8:1b:9b:03:32:79:eb:da:e8:
0d:3d:24:04:1c:79:0d:4e:5b:66:cf:aa:b8:a0:4b:
37:62:6c:31:fb:0d:b0:54:e3:25:dc:79:65:61:00:
e4:5f:15:0b:38:4f:ab:76:da:ad:5f:16:9b:e5:82:
4f:3c:ec:6e:48:4b:63:94:e0:ac:bf:84:1e:56:1c:
b9:c6:d0:7c:43:27:a6:de:52:27:68:27:02:00:45:
9c:04:e7:df:70:a6:6c:01:eb:96:b4:75:b1:dc:19:
13:73:1f:aa:88:48:e6:65:4a:c2:da:ac:90:c0:20:
e7:e6:2f:96:1c:2c:9d:db:b9:a5:26:cc:fb:8d:af:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:74:C4:4E:CD:40:AE:21:EB:7F:B3:53:57:60:EF:E2:46:C2:F1:64
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2e:5e:c5:2e:92:38:b3:12:8b:4b:7d:24:28:07:89:b6:67:
c1:38:09:af:3e:e2:2d:19:c0:41:9d:8b:de:17:25:bf:94:52:
ec:3f:29:eb:50:5f:a5:95:44:56:a0:b3:2a:e9:27:2f:50:06:
1b:d0:ef:13:6d:c2:8e:99:50:6b:42:55:66:cb:8d:96:5f:a7:
2e:3f:57:24:c6:c0:c0:1d:a2:a5:42:83:8c:12:08:05:fc:96:
a3:3b:9e:ca:eb:e7:19:ef:6b:f2:ee:d3:7f:82:92:3f:eb:09:
3b:a6:a2:8f:47:3f:ce:10:a3:e0:71:72:1d:dd:eb:9d:a2:b2:
b4:3b:ac:5e:19:ce:e5:68:f2:89:e5:06:ef:5d:7e:be:bb:02:
d4:b2:1b:0f:f2:4b:97:4c:a2:2d:fd:c3:95:91:64:3c:83:50:
1f:de:be:b9:bb:22:da:4a:64:9e:75:21:a9:50:af:fa:10:a9:
96:68:b1:36:22:2f:1c:f1:57:b3:4d:39:67:59:aa:cb:b3:e3:
db:52:3c:c2:09:de:13:0b:b3:8e:d6:0e:7c:bc:c8:b8:3d:07:
47:7e:82:db:3e:8b:1a:1b:b8:a1:25:31:76:99:8d:10:9e:b7:
5f:bb:eb:9e:ad:da:f2:e8:5a:f1:18:a6:eb:db:c6:5b:6e:87:
0b:a9:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:48 2026 by rpki-client