Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: BbuU9a5+9qPHyifsWJfc0No3X4dAxT1MSqabdsnULBc=
Subject key identifier: 34:FB:56:6B:57:D9:0A:C4:9C:A8:FD:EB:04:34:6A:F8:AB:5E:9E:DD
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 01A0E098A48E20967CA2B7B14D7C19A5B250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: 028C
Signing time: Sun 27 Sep 2026 02:01:34 +0000
Manifest this update: Sun 27 Sep 2026 02:01:34 +0000
Manifest next update: Mon 28 Sep 2026 02:01:34 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: W6JAZxcOQwzm8leSSK+SNH5yUzrXebP//SMFhF+1Pr0=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:a4:8e:20:96:7c:a2:b7:b1:4d:7c:19:a5:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Sep 27 02:01:34 2026 GMT
Not After : Sep 28 02:01:34 2026 GMT
Subject: CN=34fb566b57d90ac49ca8fdeb04346af8ab5e9edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:b1:c4:c3:0d:d2:df:73:2b:77:06:c7:b8:
e9:83:a6:e3:8a:65:2f:b5:9f:f0:06:90:a7:2b:16:
f9:3a:d4:eb:c1:83:19:95:f0:d1:59:e8:99:9a:0e:
8c:47:c2:45:af:24:73:86:ab:b1:b7:ad:e9:d3:b2:
4f:8f:ab:12:32:ec:bc:26:0b:5e:86:2f:a7:9b:5d:
31:59:0a:79:77:8a:dd:a7:1c:b8:9e:5f:11:15:53:
4e:70:ec:ce:17:e9:bc:06:3a:01:b1:d2:e7:2b:92:
39:0f:0b:d4:0a:b3:dd:0c:d1:11:09:cc:56:6a:14:
d9:13:fd:2e:49:e0:04:22:e5:bc:91:ec:63:06:03:
68:dd:02:d1:a8:0b:f0:47:f0:e9:2d:fc:ea:02:34:
cc:1b:96:26:fb:86:6f:cc:cb:0b:e0:8f:74:bd:4e:
3b:ae:7b:74:c2:08:c5:68:e3:c1:6b:ef:d9:5f:1e:
87:24:18:ef:d2:d4:d9:71:d0:84:40:11:2d:e8:f7:
e0:ed:61:3e:7a:a5:d1:76:0a:60:a3:c3:79:10:64:
7e:e5:36:73:f3:1d:a8:b0:34:da:59:63:ed:8d:39:
52:82:79:0f:a6:1d:a0:45:18:cd:e1:53:eb:5a:f2:
9b:75:82:d3:fa:2e:fd:7e:99:25:82:6c:40:36:6f:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FB:56:6B:57:D9:0A:C4:9C:A8:FD:EB:04:34:6A:F8:AB:5E:9E:DD
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1e:1e:9a:4b:f0:6e:8a:21:c6:86:9f:ff:54:5b:66:a2:24:
2e:1f:69:b4:ae:1f:27:6c:f5:ad:6c:5e:99:2b:1a:80:a2:d8:
b1:4a:f8:7d:ba:a3:d1:0a:df:a4:20:67:a3:b5:7c:5a:54:6f:
08:8f:ac:d8:11:fc:d1:ca:5a:09:9a:57:d9:8d:9e:57:b2:1b:
a5:06:4c:c5:b1:19:bf:16:72:08:cc:99:d7:65:73:c4:19:ee:
f5:7b:b1:78:6e:d9:b8:2a:eb:6b:b4:2e:46:ab:49:75:82:42:
d9:a5:6a:b9:62:97:b7:fc:e7:c3:ad:0e:23:d1:6b:0b:2b:93:
05:0b:e5:d5:4a:35:42:86:cc:2a:43:36:75:c1:e6:80:5e:c7:
01:5b:f1:d3:63:b5:8b:6f:b8:d8:21:9f:8f:23:02:8e:87:ef:
5b:7a:90:51:a8:bd:fb:cb:d6:79:74:a1:9e:94:32:44:a0:15:
42:e5:6e:be:d1:b8:42:62:5c:3a:7c:25:1a:e8:96:94:be:de:
10:e0:ce:83:a3:f9:05:34:78:e5:5f:8f:04:b3:bc:8a:41:7a:
e2:4c:3f:23:97:45:29:ec:19:fa:15:ee:7b:16:2c:0f:db:d8:
58:24:f3:a4:a8:82:49:28:9b:c0:71:0e:cb:9e:d9:72:54:f7:
84:82:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:52:43 2026 by rpki-client