Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File: a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier: lj0anozfogClcJ9z0ZvIJIQcYjEp1k+xvsteZFXLgLw=
Subject key identifier: 20:7D:79:99:37:BD:48:61:3A:65:CC:59:2C:01:64:EE:E5:E6:F2:24
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 019D284D33B7A15721FC7D07346D5A8622BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number: 1763
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa (hash: 1+a+B/uUbNc1Axp6SF/xxqBjGxtyMv5rURwc4G4VG9Q=)
2: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: DaVDTKMZE/0zGfYzhispm5KmeRl+zdLGVKaQfzoJhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:33:b7:a1:57:21:fc:7d:07:34:6d:5a:86:22:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=207d799937bd48613a65cc592c0164eee5e6f224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:20:ac:fc:96:29:47:f6:09:37:1f:8d:cc:
a5:3c:0e:53:c9:6a:50:03:fd:6b:e1:97:e9:ac:e3:
67:c9:0c:12:e1:21:b3:fa:65:85:8d:1d:3d:30:fa:
c1:af:17:a8:88:8d:79:68:5f:ee:db:86:a5:70:88:
c0:dc:bd:6a:ca:78:19:49:37:80:ad:47:69:cd:dc:
b7:6a:99:58:46:33:52:99:9d:cf:d1:da:d6:32:69:
e8:4a:19:9d:cd:9b:8f:e8:8e:f1:dc:35:6e:67:50:
0c:d3:80:1a:d6:e9:f5:46:13:d4:24:57:dc:23:6d:
94:db:83:3b:70:e0:cc:ef:1d:c1:90:49:89:67:ac:
59:e1:7e:c9:f9:fd:0c:f4:01:74:b9:d5:8a:2e:81:
f9:13:f8:d9:ad:57:55:60:15:46:ab:0a:41:2e:2f:
87:03:4d:41:7e:4d:71:b5:66:21:bd:95:71:28:b0:
28:75:75:12:73:e5:3f:8b:98:37:3f:6b:4e:0b:51:
d0:89:a9:e5:23:89:42:00:e1:e5:12:66:8d:e5:ed:
7b:81:6c:87:83:bd:2f:78:f1:40:62:20:aa:da:e1:
7e:05:86:e1:ba:e9:ec:a8:77:4c:b0:3f:ec:d8:4e:
6c:6b:12:37:82:7b:cd:73:2b:c0:5f:73:3f:cf:e5:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:79:99:37:BD:48:61:3A:65:CC:59:2C:01:64:EE:E5:E6:F2:24
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5f:7f:1d:bd:cb:6b:f4:87:af:33:fa:d5:07:67:c9:a7:38:
30:c8:73:78:bd:bb:61:ba:9e:5e:9e:28:ff:39:fc:5a:24:ed:
49:91:ab:09:6f:6a:9a:41:32:15:84:b3:5b:a3:12:e2:d3:5e:
d4:ef:2f:c0:b2:f7:c4:a0:d8:6d:3f:fe:6b:24:6f:de:c2:13:
f3:75:cb:08:32:49:97:51:62:2a:fe:f3:b2:53:ca:d7:5a:16:
bb:b7:f1:52:ba:de:d4:94:b8:b2:61:7c:d6:15:44:4e:71:e2:
9b:85:c6:5c:39:ca:07:48:49:43:82:07:63:fb:9e:38:3a:4e:
41:e8:a9:09:41:33:a8:c2:0d:c0:ce:ae:71:f7:4e:be:30:78:
47:44:49:c1:e2:fe:d1:47:b2:8e:cc:8d:c5:1a:88:f9:85:77:
25:80:4a:33:9c:d8:d5:c0:8b:71:07:c4:28:93:38:35:dd:6b:
06:9d:d3:c0:54:ea:6c:23:bf:63:b4:f8:f0:5d:72:c8:0f:44:
dc:c2:f8:9c:60:d3:44:29:5b:c5:44:76:ac:61:4c:21:f2:27:
e2:e8:70:04:a2:02:7c:6f:03:a1:c9:47:f2:a4:d3:bc:d0:50:
0c:a2:77:f0:79:ec:94:01:a0:80:ba:78:3a:4e:96:e6:ca:6d:
f7:b9:f0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTTO3oVch/H0HNG1ahiK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx
N2MzOGMwHhcNMjYwMzI2MDQwMDQxWhcNMjYwMzI3MDQwMDQxWjAzMTEwLwYDVQQD
EygyMDdkNzk5OTM3YmQ0ODYxM2E2NWNjNTkyYzAxNjRlZWU1ZTZmMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DUgrPyWKUf2CTcfjcylPA5TyWpQ
A/1r4ZfprONnyQwS4SGz+mWFjR09MPrBrxeoiI15aF/u24alcIjA3L1qyngZSTeA
rUdpzdy3aplYRjNSmZ3P0drWMmnoShmdzZuP6I7x3DVuZ1AM04Aa1un1RhPUJFfc
I22U24M7cODM7x3BkEmJZ6xZ4X7J+f0M9AF0udWKLoH5E/jZrVdVYBVGqwpBLi+H
A01Bfk1xtWYhvZVxKLAodXUSc+U/i5g3P2tOC1HQianlI4lCAOHlEmaN5e17gWyH
g70vePFAYiCq2uF+BYbhuunsqHdMsD/s2E5saxI3gnvNcyvAX3M/z+UnSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB9eZk3vUhhOmXMWSwBZO7l5vIkMB8GA1UdIwQY
MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt
OWM3NmQxMGVjNTMyLzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy
LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV9/Hb3L
a/SHrzP61Qdnyac4MMhzeL27YbqeXp4o/zn8WiTtSZGrCW9qmkEyFYSzW6MS4tNe
1O8vwLL3xKDYbT/+ayRv3sIT83XLCDJJl1FiKv7zslPK11oWu7fxUrre1JS4smF8
1hVETnHim4XGXDnKB0hJQ4IHY/ueODpOQeipCUEzqMINwM6ucfdOvjB4R0RJweL+
0UeyjsyNxRqI+YV3JYBKM5zY1cCLcQfEKJM4Nd1rBp3TwFTqbCO/Y7T48F1yyA9E
3ML4nGDTRClbxUR2rGFMIfIn4uhwBKICfG8DoclH8qTTvNBQDKJ38HnslAGggLp4
Ok6W5spt97nwdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:38 2026 by rpki-client