
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
File: 1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json)
Hash identifier: Kl9DCo9JzXKXRXpG3sCaLMPyFJR2/HAXXtZX4LGWEnI=
Subject key identifier: 54:44:DF:EC:86:21:8E:24:DD:13:C8:81:C3:05:F3:00:99:96:E6:4D
Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
Certificate issuer: /CN=d66df7599e243b462864126a8c241078a2e2b045
Certificate serial: 01A0D3F0A2C9F365239E372FE74AC4DDBA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
Manifest number: 0312
Signing time: Thu 24 Sep 2026 15:02:37 +0000
Manifest this update: Thu 24 Sep 2026 15:02:37 +0000
Manifest next update: Fri 25 Sep 2026 15:02:37 +0000
Files and hashes: 1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: 0G5sV4Ise1ph/Yf7G7jceYOsxaYXyXRYiCN86+UBKmQ=)
2: DRNZ2Noj1jQqoeJCWv4JOU1HsDw.roa (hash: yIgbar3MOMeY3sZNtgZrdUU7Wm2ezjgMSXqvJFogWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:a2:c9:f3:65:23:9e:37:2f:e7:4a:c4:dd:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045
Validity
Not Before: Sep 24 15:02:37 2026 GMT
Not After : Sep 25 15:02:37 2026 GMT
Subject: CN=5444dfec86218e24dd13c881c305f3009996e64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:6a:9d:52:ab:3b:71:fe:0d:06:cc:37:97:
4b:aa:8f:b9:19:fb:03:78:b7:4b:e5:16:22:7b:21:
2e:fc:34:86:88:2d:b2:b1:bd:5c:76:7c:c7:a3:91:
4c:ef:5d:6f:b6:36:bd:12:1e:21:1c:86:ec:24:4a:
c9:5a:8f:63:99:03:35:d5:df:ac:d5:c4:eb:ba:66:
3f:1a:d1:bf:be:23:e5:8f:44:eb:bc:d2:ea:b7:7e:
f0:fa:1e:6d:4c:e5:51:4c:ec:cc:ac:05:3b:b8:85:
93:45:33:f8:d5:d3:b5:6b:08:45:fc:68:56:2a:9c:
4d:25:fe:18:07:77:1d:d7:8c:53:96:7d:df:4b:e3:
be:cf:cb:ca:f7:8b:3a:5c:0a:ab:29:07:97:93:a5:
f1:11:c9:2f:d5:e1:44:9f:51:f7:73:66:0e:d0:ad:
f8:80:c0:1b:1b:44:80:ed:21:14:20:12:27:9b:80:
3d:cb:ae:cc:df:14:0f:9a:6f:94:f4:52:46:4a:eb:
9b:5b:af:0b:2d:f1:84:60:13:30:bf:f2:04:0c:98:
94:17:23:89:96:aa:8c:13:39:24:a9:cd:54:52:f2:
31:22:e0:d4:f7:34:5d:e7:66:f7:a3:d8:86:6b:d0:
56:e3:2a:c2:e0:a5:3f:4e:90:37:e5:3c:49:a2:70:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:DF:EC:86:21:8E:24:DD:13:C8:81:C3:05:F3:00:99:96:E6:4D
X509v3 Authority Key Identifier:
keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:06:cc:9c:21:c7:b3:3f:6e:91:dc:d4:7b:9b:b3:3f:9b:2d:
b4:7e:db:5d:4f:b6:bc:c3:29:31:1c:29:b8:66:39:76:da:4f:
9a:8f:de:cc:ec:57:5f:50:07:9c:de:54:30:ec:47:5e:e6:44:
dd:07:f3:2f:d2:22:25:a1:14:94:fc:5c:ac:0a:81:13:26:ac:
80:50:f9:27:35:95:e0:3a:e1:2e:71:36:86:65:df:57:e5:e1:
30:6e:b9:50:ed:ac:3d:51:ba:be:d6:81:07:93:d3:74:44:c4:
b0:d6:0c:90:eb:a4:cc:03:c4:2f:65:bb:95:81:1d:d2:3b:cc:
61:04:24:7f:64:cb:05:6d:78:1d:80:4a:7b:9b:8d:ca:b0:b7:
2b:2d:52:e7:29:35:b8:f7:7f:29:78:33:23:fc:7e:88:3f:4c:
28:f0:0f:ce:aa:cf:9b:ac:e3:be:00:20:ba:23:c4:f7:24:88:
a1:7a:54:92:c5:dc:16:1b:0e:5e:ba:d5:a1:3a:85:dd:c9:29:
8f:76:5a:48:e1:64:aa:a9:b6:4c:58:6f:26:50:63:59:f5:39:
d0:5b:f6:6c:47:67:81:16:72:87:32:78:c8:9d:af:56:90:2c:
c5:78:96:8a:fb:62:60:d3:e6:89:7e:b4:57:bc:97:74:b7:01:
74:d6:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:13:53 2026 by rpki-client