Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: Y+CZmF2TF68Pp8NrlPmmRyIh4wzeSV13/diJlSoGgvM=
Subject key identifier: 41:3C:44:37:C2:67:B6:5F:F4:D1:6F:B1:1C:F4:50:48:32:40:DE:C2
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019FAA87DA415027B94C053C977CE29F70E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 182A
Signing time: Tue 28 Jul 2026 21:00:57 +0000
Manifest this update: Tue 28 Jul 2026 21:00:57 +0000
Manifest next update: Wed 29 Jul 2026 21:00:57 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: p9VDtaYG8yx1VrThQylYbmC2koXSwSirjQs3YHl1/mM=)
2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:da:41:50:27:b9:4c:05:3c:97:7c:e2:9f:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Jul 28 21:00:57 2026 GMT
Not After : Jul 29 21:00:57 2026 GMT
Subject: CN=413c4437c267b65ff4d16fb11cf450483240dec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:69:b1:fa:53:c4:02:49:14:65:66:9e:69:
40:a3:cd:69:12:22:44:7e:56:dc:cb:a7:34:d0:ec:
f5:dc:aa:15:f5:3c:31:a7:26:8d:31:48:44:fc:fb:
d9:b5:ee:9b:6c:1b:5d:35:d2:39:72:4d:e6:d8:85:
56:f7:a5:6d:a2:cc:e0:c1:81:63:03:59:c9:23:c4:
7a:f0:02:f7:da:f7:de:4f:b6:b3:3b:47:79:e6:c1:
24:0e:3e:ef:a2:e9:8a:1d:4a:9f:de:d8:db:f8:b8:
86:3e:c9:6e:97:ba:5a:93:09:d6:db:3c:0a:7a:08:
fa:20:ed:1f:71:4b:34:eb:d2:4f:6c:6f:bd:ee:67:
11:56:6f:d3:e0:c4:58:fa:ec:35:dc:aa:b5:c9:d6:
c6:f7:e5:40:19:8d:db:7f:99:84:9f:cd:b6:ad:a7:
d6:33:66:cf:be:1c:09:b6:68:5b:f9:10:4a:b9:25:
0a:da:0c:7b:50:d2:68:f2:7c:38:26:fd:83:b0:73:
ff:53:a6:44:6c:0e:7c:72:0c:dd:e5:a7:7b:e6:9e:
99:cb:cf:6e:9e:07:97:fb:b2:8f:b5:19:56:5f:1d:
22:ee:ac:ca:76:b2:d9:9a:6a:bf:7f:d5:d1:f2:c0:
83:4a:3d:a5:cd:77:13:66:a7:72:7c:bc:b2:25:db:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:44:37:C2:67:B6:5F:F4:D1:6F:B1:1C:F4:50:48:32:40:DE:C2
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f2:3b:76:59:a4:ec:f4:8d:de:9d:92:1c:3e:c4:27:e5:22:
fb:f6:a1:c9:0a:46:00:19:42:30:24:f7:53:12:73:04:96:3c:
08:40:ee:e4:77:5c:b5:b8:74:68:4f:89:5e:5b:98:d3:67:9c:
83:dd:7d:9c:95:29:d9:60:f2:12:a9:1c:60:ce:78:3e:27:6e:
35:c3:30:db:7d:42:ca:b5:8a:2c:d6:9d:ef:8f:4f:c7:14:f3:
24:db:d7:33:72:07:aa:b7:b3:30:f6:96:47:c3:1b:15:bf:ac:
32:70:13:47:eb:9b:9a:1f:e8:16:79:61:64:ff:15:47:d8:36:
a6:93:a8:39:f6:c8:f8:a1:d3:7a:14:11:ab:44:25:67:99:85:
6a:23:3a:b1:b1:42:de:a3:10:e3:25:2f:d1:14:f2:9a:c5:1c:
06:53:59:e3:cc:52:06:bf:15:fd:6b:ad:8b:48:b9:6b:0d:08:
0d:37:8b:46:99:69:9b:2a:48:93:ae:83:bb:a1:6d:c3:3b:b4:
81:5e:4e:6e:9a:2b:12:d1:85:a4:57:70:ff:d5:5d:83:6c:7b:
f2:e3:b1:d8:1f:fd:9b:4d:5d:d5:59:03:d2:67:fc:45:33:59:
7a:00:6f:de:d5:fb:a1:40:46:ce:0b:73:e5:e6:85:d4:bf:99:
fa:6a:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:23:11 2026 by rpki-client