Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: gOCwdiF6q2VZ3Jb4SpQ1bDZLzuaKqZPvPmEApJShf6s=
Subject key identifier: C2:74:BB:45:1C:1E:E0:2D:CD:DA:D8:BA:DF:EE:D9:55:31:73:19:CB
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 01A0C47BBF517C9EF83F927A58CC15C832C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 18BC
Signing time: Mon 21 Sep 2026 15:00:39 +0000
Manifest this update: Mon 21 Sep 2026 15:00:39 +0000
Manifest next update: Tue 22 Sep 2026 15:00:39 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: Or1Ii8gtXEEHZN+Qf79JuCr0f3WjAf1a3G7cg9oKkT4=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:bf:51:7c:9e:f8:3f:92:7a:58:cc:15:c8:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Sep 21 15:00:39 2026 GMT
Not After : Sep 22 15:00:39 2026 GMT
Subject: CN=c274bb451c1ee02dcddad8badfeed955317319cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:d0:91:77:77:b9:78:3c:8e:22:ff:f9:39:
b0:51:29:5e:2e:e4:31:e2:e7:82:ad:76:8c:c3:f1:
fb:62:96:83:8b:0b:cb:2c:e0:fe:6f:e2:93:43:dd:
36:36:51:03:85:d1:c4:2b:ce:f2:8e:b4:b8:f3:9d:
7d:17:ef:dd:81:61:54:20:b6:b7:3e:6c:82:53:be:
39:e9:b3:de:c5:d8:71:b0:d7:77:63:6a:cd:bf:76:
d0:24:50:95:bb:79:8e:1d:3d:b2:fc:e6:34:81:4f:
25:2f:40:87:f9:98:5f:cc:de:93:25:be:8b:d8:48:
ae:54:c9:ff:04:26:12:ba:7e:31:ff:2d:00:1b:42:
a4:03:d8:65:2d:57:22:ed:90:99:4e:86:a8:15:40:
e2:3c:35:7e:8a:1b:96:64:2c:2f:47:10:a7:b5:ec:
39:f9:6d:cd:c0:91:d0:f9:a2:f2:44:c2:d4:e7:e5:
d8:47:0d:7b:d0:e4:cb:64:87:49:07:38:66:a6:54:
a7:30:cd:fd:b8:5d:67:7c:8a:5e:e5:9c:b2:04:a4:
cd:34:28:34:e7:f5:09:80:89:3c:95:71:f7:fe:d2:
fd:63:f1:bc:13:f3:01:77:9b:18:a5:74:c0:b1:ed:
b0:71:59:a2:28:65:99:a4:23:fc:c9:63:20:a8:f0:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:BB:45:1C:1E:E0:2D:CD:DA:D8:BA:DF:EE:D9:55:31:73:19:CB
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ff:a6:88:16:a8:e7:59:3e:0a:57:f9:52:4e:74:66:bd:0e:
7b:04:7d:3a:1a:44:79:7c:cb:ee:6f:f5:94:71:ce:22:e4:30:
46:21:b4:57:e3:74:6a:31:5f:04:d5:66:73:94:c9:9c:6c:d5:
aa:d6:e7:b0:c6:fa:d4:d9:87:45:7f:1d:3e:dd:cd:c7:6b:97:
5a:0b:93:33:91:94:2b:27:27:17:a2:cb:fa:09:c8:d1:62:ac:
28:e1:ea:af:6f:5f:1c:ab:1e:c1:38:8b:88:90:0a:08:f3:65:
1d:d7:53:3a:c4:c5:4c:6d:ec:22:87:e7:35:85:83:48:ce:45:
58:e3:10:69:f6:52:4f:6f:a2:e6:7a:e6:3b:c1:f3:d7:59:12:
61:69:ae:16:df:d3:21:ff:09:8d:0a:a8:77:65:a8:77:f7:5b:
9e:45:af:b7:78:62:06:25:32:8b:a0:2a:c8:7b:8b:c1:6d:cb:
58:a1:29:83:cc:12:a9:cc:4a:ba:c0:f1:6c:59:ab:ba:ec:67:
5c:71:e8:4c:ef:37:ba:f3:06:7f:5d:97:98:1f:e4:4b:ea:6c:
f5:77:7d:98:f7:ae:99:d4:82:f9:02:c2:3d:19:1f:dc:72:7b:
eb:cb:0b:6d:7d:1d:0b:82:f7:4c:22:59:64:c2:16:16:70:bf:
c4:49:83:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe79RfJ74P5J6WMwVyDLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk
YjdiNzcwHhcNMjYwOTIxMTUwMDM5WhcNMjYwOTIyMTUwMDM5WjAzMTEwLwYDVQQD
EyhjMjc0YmI0NTFjMWVlMDJkY2RkYWQ4YmFkZmVlZDk1NTMxNzMxOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejQkXd3uXg8jiL/+TmwUSleLuQx
4ueCrXaMw/H7YpaDiwvLLOD+b+KTQ902NlEDhdHEK87yjrS48519F+/dgWFUILa3
PmyCU7456bPexdhxsNd3Y2rNv3bQJFCVu3mOHT2y/OY0gU8lL0CH+ZhfzN6TJb6L
2EiuVMn/BCYSun4x/y0AG0KkA9hlLVci7ZCZToaoFUDiPDV+ihuWZCwvRxCntew5
+W3NwJHQ+aLyRMLU5+XYRw170OTLZIdJBzhmplSnMM39uF1nfIpe5ZyyBKTNNCg0
5/UJgIk8lXH3/tL9Y/G8E/MBd5sYpXTAse2wcVmiKGWZpCP8yWMgqPCkGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ0u0UcHuAtzdrYut/u2VUxcxnLMB8GA1UdIwQY
MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt
NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj
LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP+miBao
51k+Clf5Uk50Zr0OewR9OhpEeXzL7m/1lHHOIuQwRiG0V+N0ajFfBNVmc5TJnGzV
qtbnsMb61NmHRX8dPt3Nx2uXWguTM5GUKycnF6LL+gnI0WKsKOHqr29fHKsewTiL
iJAKCPNlHddTOsTFTG3sIofnNYWDSM5FWOMQafZST2+i5nrmO8Hz11kSYWmuFt/T
If8JjQqod2Wod/dbnkWvt3hiBiUyi6AqyHuLwW3LWKEpg8wSqcxKusDxbFmruuxn
XHHoTO83uvMGf12XmB/kS+ps9Xd9mPeumdSC+QLCPRkf3HJ768sLbX0dC4L3TCJZ
ZMIWFnC/xEmDzg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:48:42 2026 by rpki-client