Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
File: 1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json)
Hash identifier: T0smfljj4IUnYxWBR4Ssy1cgD5frYlnxEghrRlziRg0=
Subject key identifier: 23:DC:22:22:67:FA:AC:06:21:56:F4:95:DD:10:3A:D2:BC:CD:33:CF
Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
Certificate issuer: /CN=d66df7599e243b462864126a8c241078a2e2b045
Certificate serial: 019D2772B4183A3EACA8600094AA072FFFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
Manifest number: 012B
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: DkRYivoA/+CDADPWrKBcFYFFED6868iGpuYTqZk1T0o=)
2: DRNZ2Noj1jQqoeJCWv4JOU1HsDw.roa (hash: yIgbar3MOMeY3sZNtgZrdUU7Wm2ezjgMSXqvJFogWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b4:18:3a:3e:ac:a8:60:00:94:aa:07:2f:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=23dc222267faac062156f495dd103ad2bccd33cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:6c:f5:f9:08:56:f0:d9:75:c7:14:75:58:
8e:52:75:af:f2:91:81:3b:2d:2b:95:f2:a0:dc:b4:
9a:ea:9b:08:86:16:64:3b:ad:f0:7d:d3:bf:ad:f6:
2d:8f:06:c9:0b:c0:1d:e1:ca:9e:50:36:76:ac:a7:
a1:8d:ea:ee:92:ab:2c:c9:92:dd:f0:ea:98:38:0b:
f8:3a:79:61:47:53:ea:fd:19:bd:55:36:6f:f6:03:
ea:85:0e:6b:eb:71:0f:ad:57:b5:6f:ee:dd:84:b1:
3d:15:00:57:80:2d:05:fb:d5:0f:90:b3:ff:69:48:
f3:fc:fe:b7:ff:f3:cd:ac:50:16:98:5b:12:1c:7b:
1a:08:4c:78:d6:9d:5e:f4:b4:29:05:cd:20:de:cf:
2b:b0:f8:f2:56:08:7e:e3:e1:f2:71:d1:b7:d5:46:
c0:c8:c7:74:ec:23:6e:8b:98:c6:61:00:33:96:00:
cf:77:32:b4:1b:09:7f:f8:22:8a:f0:c4:e5:b6:50:
6d:9d:78:00:9b:46:4c:d5:91:9a:f2:c5:91:9c:2f:
d4:25:6e:02:8f:b7:4e:fd:6b:d4:b5:bc:d2:08:a2:
c1:65:8b:46:ac:f5:22:c2:c2:6b:31:90:e6:9c:b3:
c0:9c:50:39:84:1a:27:f5:c9:57:11:87:2b:59:c1:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:22:22:67:FA:AC:06:21:56:F4:95:DD:10:3A:D2:BC:CD:33:CF
X509v3 Authority Key Identifier:
keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:07:7e:aa:e8:07:0b:db:d1:db:e5:1d:19:71:9b:ce:a3:71:
44:8a:1e:20:40:e9:4b:17:d1:23:be:be:76:5b:e9:3a:9b:2d:
91:e9:cf:19:02:ce:e5:16:53:15:f2:c4:b2:bb:d6:45:15:9a:
e0:c3:c0:d4:75:4d:3b:c5:d7:c6:ea:7e:33:88:ab:a1:40:8b:
ba:7d:dc:90:48:f4:62:18:19:ee:ca:c0:e5:c5:e5:ae:85:d7:
61:cd:e7:75:b0:59:77:29:2e:98:a9:52:c9:36:08:34:4b:12:
3e:a5:72:8d:ff:fa:9d:64:aa:e1:55:cb:7c:4f:db:53:0b:4d:
7a:1b:ab:62:42:3a:cc:e0:b4:7d:ad:7c:d9:7d:1a:83:d0:18:
46:0e:ef:a8:71:62:49:6a:fa:15:aa:6f:31:bf:b2:81:84:1c:
0d:51:8f:71:17:45:d3:df:80:f7:0d:fe:74:11:87:13:05:ac:
e2:b8:9c:99:3d:03:7c:e1:f1:ed:40:a4:e4:36:9f:40:bc:c7:
18:45:3c:93:6b:c5:cd:55:e7:3e:48:f0:bd:a9:97:89:93:6a:
38:8e:ec:13:04:62:71:c0:fa:d7:dc:f0:99:e0:0c:6c:e3:b6:
b6:2d:39:b5:b3:eb:f3:9a:bb:cd:bf:d1:28:c2:b4:fb:9b:f7:
ae:19:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:41 2026 by rpki-client