Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: 9yfxlrJBsuA5adY3PRXsYCri6WQptNFRlFmCCYKNmcM=
Subject key identifier: CF:40:C2:21:12:9D:B5:D1:5F:6B:F2:44:E4:9D:42:C4:85:91:C2:A9
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019E1F4795DFE63093E31CD0ECC2100188BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 066E
Signing time: Wed 13 May 2026 03:00:45 +0000
Manifest this update: Wed 13 May 2026 03:00:45 +0000
Manifest next update: Thu 14 May 2026 03:00:45 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: T90Z/0EzzCY2xrrGeGX/cs34LkIAJXSG2V+nzr9iJaM=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:95:df:e6:30:93:e3:1c:d0:ec:c2:10:01:88:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: May 13 03:00:45 2026 GMT
Not After : May 14 03:00:45 2026 GMT
Subject: CN=cf40c221129db5d15f6bf244e49d42c48591c2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7b:ff:9f:d7:9b:21:47:6d:d1:81:6c:bc:db:
d8:26:8e:18:c6:06:01:49:53:61:cb:ae:0a:60:75:
8b:15:6d:4c:f9:cc:06:bf:df:56:8b:39:6e:e4:81:
15:ef:02:eb:30:11:7c:e2:57:bd:9f:61:93:18:e3:
dd:ca:ed:dd:a5:7f:f1:eb:24:b4:10:72:27:59:77:
65:8f:c1:c5:57:14:1c:5c:bd:9b:62:10:93:e0:a9:
51:2a:e2:db:4b:73:7d:91:42:e3:47:e9:ef:f3:b3:
11:5a:d7:a4:ed:89:91:eb:29:7b:65:7c:af:09:27:
14:d1:9d:9d:77:f5:2e:07:6b:3d:6d:f7:83:af:79:
c2:36:95:8d:ea:bc:83:e9:e6:13:98:e2:0c:28:a7:
7c:18:bf:82:b7:25:01:e4:53:ef:63:c7:83:65:7d:
51:82:eb:57:87:76:ea:fa:fa:38:d8:26:45:24:dc:
0e:04:58:a6:b2:81:8b:64:63:e7:3d:46:c2:17:eb:
59:b7:53:0e:ad:4b:34:3c:39:ce:a1:be:d3:6c:0e:
74:75:81:a9:7a:52:64:c3:bf:eb:99:ce:33:fa:92:
0a:08:a5:3e:b4:47:53:4f:8d:69:21:6b:04:3c:94:
2d:79:11:09:09:87:9c:36:a5:3c:c4:5b:2f:30:ef:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:C2:21:12:9D:B5:D1:5F:6B:F2:44:E4:9D:42:C4:85:91:C2:A9
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:26:fa:d0:fd:4b:f8:b1:a6:52:92:66:78:04:de:3b:8c:40:
31:6b:6f:ac:c6:38:1e:df:e3:bb:a7:35:35:a0:14:e9:72:6d:
b4:4b:46:50:cf:e4:53:17:88:bb:9c:d1:11:1f:f2:24:c8:45:
cc:bd:8b:6c:be:86:a2:06:5b:49:be:28:0f:44:b3:8c:40:ab:
15:99:34:6b:8d:46:03:8e:f6:3a:18:57:d2:b2:ee:d3:d2:0e:
7f:56:9d:46:1d:26:05:04:77:b5:ac:7b:43:8c:37:0d:8e:20:
67:e1:03:30:dc:2e:8e:c1:63:62:3c:05:b4:0a:4b:0f:ce:29:
89:d9:5d:ff:24:1f:49:2a:54:c8:80:7d:97:74:b8:5e:71:fa:
1e:16:67:27:75:d2:9d:d6:12:03:6a:10:5d:57:26:8b:d3:82:
23:08:93:51:f2:5c:fa:d7:b3:ce:5f:fb:be:b8:3d:be:33:35:
ea:a7:27:cc:71:82:ae:ea:a2:31:a5:e7:bd:99:95:df:85:fa:
0e:e9:68:41:c5:df:8a:f6:50:56:dc:52:fa:f0:a1:8a:67:15:
96:07:fa:27:26:8c:19:53:67:09:41:3b:6d:20:25:bd:d3:45:
ed:d6:da:6d:a5:90:1c:dd:86:ed:e9:ba:2a:48:05:9f:fd:c3:
2e:1e:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:22 2026 by rpki-client