Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: 2S8ltBMOl9EyEMrGpvI6CbJQExfXYsYAE389HNfDzhY=
Subject key identifier: CD:3A:34:BF:19:EF:1B:32:24:6A:4F:DD:55:82:FF:1D:76:04:29:20
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 01A0CF6D5013E94FFF0E0FD5D64FC5051D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 18:00:42 +0000
Manifest this update: Wed 23 Sep 2026 18:00:42 +0000
Manifest next update: Thu 24 Sep 2026 18:00:42 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: lVfyXMfWnPYZs6g6vSzMbygAzVrrtsfzCjYl7eZuTcs=)
2: VtZiDTehXWbLuvByNpvV6poX8NU.roa (hash: qzmhlPWDE6wNQJNL/swjxQrHyVqxNbrefZdH2uAfmPk=)
3: fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa (hash: TEAA5N2BX6e88dGktvlV8qoZNHbrtanHoBnJrUnnrxo=)
4: g_q3_hFJu6HXUUHSAWggSZhKtYc.roa (hash: CYiIktGrTnexqrcegKNOYzL4d50/QWocPqLENQVDSYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:50:13:e9:4f:ff:0e:0f:d5:d6:4f:c5:05:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Sep 23 18:00:42 2026 GMT
Not After : Sep 24 18:00:42 2026 GMT
Subject: CN=cd3a34bf19ef1b32246a4fdd5582ff1d76042920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:fd:7c:3d:c2:2d:fe:5a:65:8e:39:2e:ff:
8a:03:df:d8:1e:82:04:86:3d:d9:ae:a9:72:8c:07:
08:09:56:72:aa:ad:2e:a2:e0:67:d0:06:40:0c:19:
2c:9f:e1:69:73:62:6d:5f:22:fe:0b:6a:d3:ba:03:
12:17:14:bd:06:a7:a7:6f:62:c8:30:60:54:45:94:
e9:bc:e7:4e:61:0d:e1:68:21:02:d8:ed:9e:f6:27:
8a:d2:3a:b6:16:9f:32:f3:7d:bc:fc:dc:83:5a:ca:
1c:ae:ae:ea:bd:50:bd:7c:d7:77:2e:c1:99:8b:50:
77:34:66:32:c4:5f:a4:56:6b:73:4b:87:fa:c6:6e:
6d:b9:f7:d5:0b:e6:e1:97:b8:3b:88:5c:71:89:a6:
df:4a:37:f5:d0:07:bd:6f:a9:5d:0d:77:1b:5c:f2:
db:05:cc:54:65:7c:b1:37:b5:25:0e:f6:3a:3b:07:
70:f6:41:06:25:d9:db:92:b7:87:2a:ad:cf:91:fc:
ea:33:dc:61:71:b6:fa:0d:d6:c0:63:44:80:b4:77:
d4:b1:97:6a:88:ae:28:b5:3a:54:d3:a5:5a:29:af:
b4:12:a8:bd:0d:6a:20:9b:ef:7d:e0:50:fb:94:ce:
62:3d:52:d2:c3:ed:64:23:ff:5e:c6:8c:0e:3e:87:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:34:BF:19:EF:1B:32:24:6A:4F:DD:55:82:FF:1D:76:04:29:20
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8c:74:fc:ee:1d:36:d5:c4:33:94:4d:60:17:fd:15:f0:5e:
2b:21:13:44:d3:f2:25:94:b5:f2:35:0a:7e:fd:f2:88:f5:17:
ea:d4:a1:32:b5:dc:98:2a:75:28:fa:45:70:5f:47:59:ae:5f:
89:6d:45:93:cd:b2:51:0f:ef:bf:c8:8d:a7:cf:af:05:66:e8:
bb:2a:26:40:9d:0d:4d:3c:04:32:ee:87:70:4e:26:10:2e:9c:
8c:8e:d1:3e:58:54:ea:ce:18:34:fe:ee:d4:50:31:f6:53:b2:
c4:ab:31:db:c6:95:b8:2a:3d:83:a5:cb:c2:cf:fc:9d:02:80:
27:61:e2:de:e7:85:dd:94:ab:6f:ed:a5:4e:51:f1:34:e7:64:
6e:66:49:5a:7b:1b:00:2e:1e:d2:12:b1:33:56:b1:89:be:d5:
4d:d6:4b:d1:95:ff:c3:27:58:fe:17:ea:ff:0f:a8:65:8c:9c:
ac:4e:a8:a6:27:ac:96:c9:fb:20:48:11:ec:35:21:f8:75:c3:
77:f8:d5:9d:0d:ac:1a:8b:7c:24:40:4e:43:fe:b2:10:12:33:
4d:38:62:83:ba:7a:75:bb:ba:45:5a:d3:02:1a:01:80:9f:8f:
72:02:ad:4b:b4:a2:18:6c:20:d0:e9:bd:48:58:72:fa:ec:91:
85:bf:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:18:55 2026 by rpki-client