
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
File: 33SEs_Vo6k6qe_DLfIP172Y-sXA.mft (raw, json)
Hash identifier: bvGt7OeH6bsQJhl+l3cTF/Bl1FKP9rhkl18EhktB3bk=
Subject key identifier: 28:C3:4D:EA:6F:E8:6E:DA:CD:7C:B1:C4:05:74:9A:B3:84:90:D2:09
Authority key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Certificate issuer: /CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Certificate serial: 01A1DACAB1E164566A1613A2F4CE70119A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
Manifest number: 010A
Signing time: Sat 14 Nov 2026 16:01:19 +0000
Manifest this update: Sat 14 Nov 2026 16:01:19 +0000
Manifest next update: Sun 15 Nov 2026 16:01:19 +0000
Files and hashes: 1: 33SEs_Vo6k6qe_DLfIP172Y-sXA.crl (hash: 3Mg/45cXQGWAv9Y7ylB9Q8DA38/5uc+HyRugRWD3pFU=)
2: sqHFwo0XB24O-EyLxoiNi9bPLc8.roa (hash: ig6fBlUC0evhdNCNW32iCNTFqWb3AD0R7kCT6EGKt9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:b1:e1:64:56:6a:16:13:a2:f4:ce:70:11:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Validity
Not Before: Nov 14 16:01:19 2026 GMT
Not After : Nov 15 16:01:19 2026 GMT
Subject: CN=28c34dea6fe86edacd7cb1c405749ab38490d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:1f:a1:ed:36:c2:d4:44:e4:60:d7:59:d0:
7f:b6:a6:ea:a1:03:c6:11:46:ea:45:93:a8:cf:f4:
8c:07:b7:7e:cf:59:28:82:7e:95:47:25:cb:b8:97:
45:b7:d0:04:e4:13:03:7e:bd:00:f6:2a:80:02:de:
a5:10:62:7e:e4:96:c0:42:28:31:b1:2b:cc:83:5b:
b0:f4:17:b3:59:3c:4c:1b:6a:1f:41:46:22:a7:2b:
07:37:27:89:40:06:63:79:25:71:35:34:e0:9e:56:
81:60:7f:b8:26:20:34:c5:38:16:b3:fb:38:49:e0:
fb:82:cc:d5:56:7b:0c:a5:83:64:89:de:ca:d4:94:
84:69:2b:52:24:64:ca:5b:a4:5b:a6:7d:21:78:d4:
fb:a6:3a:c6:5e:b2:57:16:3f:e0:c4:58:fb:7b:c7:
31:5e:d7:f3:c5:22:e4:a4:1d:f0:d1:e3:21:42:77:
03:e2:43:3f:59:65:cc:5f:3f:68:0f:96:4f:bf:4e:
d8:72:56:0d:a9:8c:04:ad:d0:ac:5e:8e:36:80:ee:
d2:02:ad:70:03:c1:a1:2d:8a:dd:8c:bb:a1:d1:27:
ab:a9:a1:1f:d9:c2:e5:7b:86:a6:85:a5:48:af:82:
cb:62:ae:4d:dd:b6:79:f2:52:e5:c6:c2:59:b5:d6:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:4D:EA:6F:E8:6E:DA:CD:7C:B1:C4:05:74:9A:B3:84:90:D2:09
X509v3 Authority Key Identifier:
keyid:DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1f:a8:ae:93:c9:63:2f:e7:92:29:e6:33:52:ec:fc:5c:40:
b9:f4:53:ca:3e:d7:bf:dc:04:69:7d:fa:a5:4b:93:c9:df:94:
06:5a:36:3d:1b:6e:58:6e:3a:c7:5f:6c:93:c3:d4:82:67:c3:
b1:c0:92:df:ea:aa:39:70:e5:14:57:fc:b7:12:2f:dd:76:06:
7e:34:e4:f1:42:65:80:57:60:08:3b:c1:02:bc:62:8f:ab:16:
24:72:91:18:85:96:88:fc:2b:ae:99:b8:31:c8:57:dc:de:c1:
30:e5:76:95:f5:bc:15:5a:43:21:7f:4c:56:2f:5d:20:4f:8c:
55:c6:05:59:85:2b:94:16:8e:74:a6:ab:b5:d3:44:36:c5:48:
af:ab:8a:67:44:b5:06:f3:1c:da:58:b1:7c:7a:86:d0:bc:5f:
ae:d8:73:16:36:6b:2f:34:37:c2:33:e6:1a:c4:c8:c2:3f:82:
86:10:93:c2:f6:22:d3:ff:98:4d:57:eb:e9:39:83:da:14:6f:
bb:8c:10:9d:ce:b8:bb:96:04:0b:9e:05:71:af:3b:d2:67:e1:
f9:76:28:9f:7a:e9:15:b3:9b:b6:27:34:94:b8:14:07:40:d0:
14:04:55:fd:c0:e9:e9:96:03:a1:4b:a9:90:c4:8d:4c:97:9b:
60:85:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:34 2026 by rpki-client