Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: uYNnD6oLK5LYMt7x/sKtqyDAD9pJG8i1D72CdqiiGmQ=
Subject key identifier: 9F:C9:44:8D:FD:FB:04:71:02:56:A2:40:94:3C:0C:91:B8:24:91:49
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019D9962CF9B8206F16A29D159767DAEAFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1718
Signing time: Fri 17 Apr 2026 03:01:22 +0000
Manifest this update: Fri 17 Apr 2026 03:01:22 +0000
Manifest next update: Sat 18 Apr 2026 03:01:22 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: VmzOOGgu7d1V2empKyLrSpdir6IM6YO3KyULVy/wpoo=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:cf:9b:82:06:f1:6a:29:d1:59:76:7d:ae:af:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Apr 17 03:01:22 2026 GMT
Not After : Apr 18 03:01:22 2026 GMT
Subject: CN=9fc9448dfdfb04710256a240943c0c91b8249149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:66:06:6d:ea:fa:1c:73:68:bb:ea:df:b3:
70:02:4c:d4:51:bc:00:15:8f:50:14:8c:91:48:b9:
35:18:8d:f0:d5:ff:74:4f:21:1e:21:c4:81:aa:55:
ad:6c:d7:6c:16:d1:22:05:4a:2d:4e:e0:c0:13:ab:
b3:5c:86:21:6c:71:48:cc:9b:3d:57:34:d6:e8:15:
c3:9e:f7:a1:9d:9e:95:34:81:71:ef:fc:63:bc:47:
6f:b4:be:00:6a:47:38:fc:3a:62:9e:bf:8c:d4:74:
52:dd:ef:98:fa:d3:b3:78:14:49:28:38:a1:88:96:
d8:89:35:a3:af:41:2d:47:2d:af:b6:59:f1:8c:cc:
d3:e6:77:64:1c:47:14:25:35:92:85:5c:48:ff:48:
ac:9c:69:a9:3e:ae:90:a3:a7:30:a3:0e:f0:df:9d:
e5:e3:15:94:62:6b:5d:5e:c5:da:56:e5:e6:c5:c5:
ae:6c:07:36:d1:78:cc:9f:a1:c9:0b:90:9a:a9:e6:
69:75:41:65:83:b3:8a:b4:6c:59:ef:25:34:94:08:
a4:7c:2c:e4:f4:05:bb:10:08:05:75:01:25:e6:e3:
98:86:ad:72:a7:49:e5:62:8f:3a:a1:33:42:bd:43:
63:df:bd:e9:e8:f3:00:22:b7:d2:4f:5b:64:39:1d:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:44:8D:FD:FB:04:71:02:56:A2:40:94:3C:0C:91:B8:24:91:49
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:14:19:c4:aa:fc:3e:7b:de:51:d1:7f:14:1c:5c:e2:45:74:
cb:a0:b5:bd:a2:c6:5b:73:94:84:02:bb:bd:40:ba:ee:64:e1:
67:19:97:ee:aa:1b:14:6b:be:72:83:ba:92:d8:a3:e0:5a:d7:
40:d9:49:fe:5d:78:6c:93:9c:3c:82:91:1c:c0:53:94:8e:8a:
02:4e:31:d4:a0:f4:7d:13:4d:92:82:55:7d:b5:79:13:25:d3:
03:88:80:ec:6d:02:b8:68:f3:6e:12:ac:89:4d:44:c7:18:26:
3e:fb:04:11:b4:82:19:d4:d5:0d:37:75:f5:45:ce:20:1d:76:
5e:cb:ca:fc:41:0e:50:c6:2f:b1:50:8b:9b:27:45:d3:bc:15:
96:fb:0f:4b:6f:66:36:4e:b7:90:77:70:8c:09:6e:c5:98:ac:
55:fd:4b:71:e9:f7:16:58:0a:31:21:ce:89:b6:2f:de:e8:c3:
60:a7:59:9b:c7:3f:70:a7:31:4a:d9:85:29:d5:72:24:df:61:
40:4a:30:db:ad:95:1b:a6:94:d3:75:ae:14:75:25:a8:97:7b:
d9:68:5c:b3:95:0b:e0:9a:af:2c:65:36:42:64:76:01:93:b7:
f5:9e:9b:24:f1:46:e2:19:56:10:ae:ef:3e:25:39:1f:31:93:
28:c3:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:08 2026 by rpki-client