Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: kzSN+N9YnOCC689oE6YQylhKU26GZMoaWCnXuUggYgs=
Subject key identifier: 56:A9:64:D6:F1:64:59:06:C4:1B:0F:20:A9:9D:EE:70:1E:2F:4D:41
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019F8FEC1A8FA4228A4F9B2AEAD2CD81F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 1096
Signing time: Thu 23 Jul 2026 17:00:42 +0000
Manifest this update: Thu 23 Jul 2026 17:00:42 +0000
Manifest next update: Fri 24 Jul 2026 17:00:42 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: BpjkiACmQW9U8qGgI5VWUJ2p69Ys+r3LD4z6p573ZjQ=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:1a:8f:a4:22:8a:4f:9b:2a:ea:d2:cd:81:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jul 23 17:00:42 2026 GMT
Not After : Jul 24 17:00:42 2026 GMT
Subject: CN=56a964d6f1645906c41b0f20a99dee701e2f4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:7a:e0:0f:cd:df:e0:d7:19:c7:68:e4:bd:
ed:07:cf:03:11:ad:91:1d:33:09:bb:9b:e3:4d:1f:
a9:a6:36:d1:3a:74:25:ba:82:fe:bb:f0:57:82:6a:
63:30:3a:62:24:91:a6:f0:cf:e1:ff:6a:92:16:56:
8e:c1:d7:8a:7b:6a:00:8b:fd:7a:36:cd:02:e5:57:
1a:95:5d:11:24:03:30:a7:c7:e1:81:e0:6f:09:c8:
14:e0:ad:67:0a:6b:69:84:1f:78:a9:ae:c6:85:3a:
6a:5f:c1:f2:6b:2a:60:ef:4e:13:41:cd:57:6a:b2:
fa:3d:ce:4a:30:65:c6:69:64:93:10:90:ef:d9:90:
54:a7:06:63:5f:c5:3f:87:30:63:01:96:08:b8:de:
2e:e8:8b:b8:08:18:15:66:5b:75:5e:68:6e:a3:bc:
ae:3b:cf:ec:1d:18:e9:e8:df:ce:74:6d:f9:7b:69:
77:12:92:70:46:c6:3b:89:06:81:5c:6e:f8:7d:51:
27:df:d0:d9:6c:4c:fe:d7:be:77:e0:e4:ea:29:cc:
7e:cf:95:6c:40:b3:88:9a:bc:fe:65:90:c5:e1:3c:
43:e8:32:60:65:9d:2d:35:26:a5:d3:ba:a5:a2:a3:
50:d4:67:6a:b2:54:d7:f7:e0:52:aa:ab:16:f4:42:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:64:D6:F1:64:59:06:C4:1B:0F:20:A9:9D:EE:70:1E:2F:4D:41
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:09:11:90:8d:95:c9:07:e7:3f:19:0e:9d:75:9a:b2:d8:8d:
ff:3d:5c:c4:1e:18:82:14:7d:db:95:1e:f9:f5:14:a3:39:38:
bf:4f:f3:e8:58:cd:fb:78:09:85:69:d1:98:fb:7e:95:9c:3e:
7b:4a:ea:e6:5d:54:d0:39:67:3d:2d:c1:38:22:0f:44:68:66:
e5:cb:a8:01:25:ba:69:46:3a:0a:ae:56:a8:5c:1c:8f:d5:03:
f4:fd:31:7b:50:79:77:24:fa:51:77:ff:25:fa:54:79:a3:40:
67:d6:0d:37:b5:45:79:a0:b7:9f:29:f2:13:be:91:22:a1:7f:
a7:24:43:1e:3f:58:ea:23:c8:ed:72:f0:71:d2:da:6a:fb:1f:
d3:71:9a:6b:c5:15:34:3d:75:1d:48:a1:5d:8f:64:bf:99:78:
58:c7:27:4c:86:ef:8d:e0:0e:9c:20:c2:da:80:d1:de:f5:65:
fd:93:e5:db:fb:34:f4:b8:2e:bc:84:23:d5:e5:ce:80:d5:8e:
7e:43:74:6e:3a:03:4f:81:03:f5:cd:17:ab:6b:a0:a7:cb:b0:
58:dd:bb:49:03:f8:42:33:51:23:3e:05:62:48:03:3e:0a:72:
04:ad:d4:b2:74:fd:19:74:6a:e3:26:65:6f:ee:9c:3f:0b:d3:
1f:f9:05:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7BqPpCKKT5sq6tLNgfnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj
NjAzMTEwHhcNMjYwNzIzMTcwMDQyWhcNMjYwNzI0MTcwMDQyWjAzMTEwLwYDVQQD
Eyg1NmE5NjRkNmYxNjQ1OTA2YzQxYjBmMjBhOTlkZWU3MDFlMmY0ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iB64A/N3+DXGcdo5L3tB88DEa2R
HTMJu5vjTR+ppjbROnQluoL+u/BXgmpjMDpiJJGm8M/h/2qSFlaOwdeKe2oAi/16
Ns0C5VcalV0RJAMwp8fhgeBvCcgU4K1nCmtphB94qa7GhTpqX8Hyaypg704TQc1X
arL6Pc5KMGXGaWSTEJDv2ZBUpwZjX8U/hzBjAZYIuN4u6Iu4CBgVZlt1Xmhuo7yu
O8/sHRjp6N/OdG35e2l3EpJwRsY7iQaBXG74fVEn39DZbEz+17534OTqKcx+z5Vs
QLOImrz+ZZDF4TxD6DJgZZ0tNSal07qloqNQ1GdqslTX9+BSqqsW9EJnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFapZNbxZFkGxBsPIKmd7nAeL01BMB8GA1UdIwQY
MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt
YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk
LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAkRkI2V
yQfnPxkOnXWastiN/z1cxB4YghR925Ue+fUUozk4v0/z6FjN+3gJhWnRmPt+lZw+
e0rq5l1U0DlnPS3BOCIPRGhm5cuoASW6aUY6Cq5WqFwcj9UD9P0xe1B5dyT6UXf/
JfpUeaNAZ9YNN7VFeaC3nynyE76RIqF/pyRDHj9Y6iPI7XLwcdLaavsf03Gaa8UV
ND11HUihXY9kv5l4WMcnTIbvjeAOnCDC2oDR3vVl/ZPl2/s09LguvIQj1eXOgNWO
fkN0bjoDT4ED9c0Xq2ugp8uwWN27SQP4QjNRIz4FYkgDPgpyBK3UsnT9GXRq4yZl
b+6cPwvTH/kFog==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:36 2026 by rpki-client