Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: X4oYjUDrRv3eglVMLzCMwOwnE//M7Zm0oWjwYufOcm8=
Subject key identifier: A4:4E:37:6E:11:40:81:AB:2B:55:5B:C8:E8:90:45:51:6F:DE:60:B7
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01A0C6D7C78FA6B8413801A873DC5F381802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 1137
Signing time: Tue 22 Sep 2026 02:00:25 +0000
Manifest this update: Tue 22 Sep 2026 02:00:25 +0000
Manifest next update: Wed 23 Sep 2026 02:00:25 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: Po9K6sje19wWDvF+nOGnfc1C+Ip5IeBT2KrmZd1+rWQ=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:c7:8f:a6:b8:41:38:01:a8:73:dc:5f:38:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Sep 22 02:00:25 2026 GMT
Not After : Sep 23 02:00:25 2026 GMT
Subject: CN=a44e376e114081ab2b555bc8e89045516fde60b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:fb:99:c1:5d:d1:90:f3:1d:6f:2e:dd:eb:
f4:1f:63:0c:bf:d3:66:be:fc:5f:4f:25:02:87:5e:
df:73:06:b0:ac:79:00:a6:dc:50:2e:06:cc:26:43:
4b:d1:ae:a5:1b:ef:5c:69:5b:71:89:ea:aa:a4:ab:
7a:5d:28:e6:f1:51:90:40:d4:3c:76:66:48:d9:d0:
3d:06:c3:12:ad:91:e6:a3:64:d9:c1:46:d0:1e:ed:
13:79:0a:39:14:02:2f:5c:a3:d8:ef:94:d2:68:62:
91:2d:5d:bc:fb:5b:de:fc:d9:1f:9e:67:08:4f:cd:
4b:f7:77:38:e2:3f:08:ef:4e:98:f6:08:9a:28:c4:
3a:57:3d:a4:0e:e5:f5:a7:23:84:ba:95:bb:4e:e1:
77:ff:f7:b2:7f:3d:c5:67:4b:62:73:96:ba:b3:cd:
85:e0:84:f7:9b:ae:26:29:eb:67:c6:38:85:21:34:
2d:70:8d:86:70:74:c3:d0:6f:62:b7:bb:53:29:d4:
59:7a:5a:f0:40:cc:45:99:07:b3:12:60:45:db:12:
b6:e6:91:fe:60:a1:4f:43:6b:24:ad:a1:ea:bc:81:
2a:51:6f:50:87:7f:58:30:1a:84:9e:3e:b6:f2:f8:
20:09:c0:dc:ce:39:0b:4d:20:a7:05:a7:ec:4d:2b:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4E:37:6E:11:40:81:AB:2B:55:5B:C8:E8:90:45:51:6F:DE:60:B7
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:24:6f:73:d6:5d:c5:be:33:de:b9:47:27:23:d6:c1:6c:bf:
97:4c:fc:b9:86:df:ed:9c:a0:56:27:43:e2:fe:93:39:d6:ac:
e9:2a:59:71:f5:6f:cf:8b:4a:78:be:12:3e:56:2f:b1:19:81:
3d:8e:05:4b:ee:83:5f:a9:25:f8:e5:da:56:ff:58:70:9c:27:
20:35:8f:71:21:5c:6d:94:ca:bb:eb:cb:44:69:e9:b7:79:5e:
f1:83:96:22:e2:e8:37:2a:2f:0e:fc:e2:eb:99:c4:6e:9e:75:
b7:02:c3:29:b8:94:b7:97:92:38:67:ce:00:83:5f:39:bd:23:
7c:54:6a:a0:13:25:98:77:6f:cd:9d:78:f4:8f:6c:84:f1:13:
01:1f:97:6a:5f:1e:c7:5b:95:5f:64:ad:e4:26:e9:19:09:56:
bd:86:61:cf:79:23:9f:a3:f8:af:8a:08:02:cc:07:06:93:01:
69:2d:46:2d:2a:99:f4:49:e9:c3:b3:45:70:f6:bc:26:54:00:
7e:fc:7c:b0:4a:b7:ba:0c:c7:ed:2b:34:4f:0c:d3:de:bb:9e:
3e:5f:c6:75:ad:df:e2:60:ab:23:47:4e:db:88:1b:45:f9:d3:
df:f9:99:83:2a:09:bf:af:de:bd:7b:c7:28:4d:f2:02:3a:19:
0a:83:24:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG18ePprhBOAGoc9xfOBgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj
NjAzMTEwHhcNMjYwOTIyMDIwMDI1WhcNMjYwOTIzMDIwMDI1WjAzMTEwLwYDVQQD
EyhhNDRlMzc2ZTExNDA4MWFiMmI1NTViYzhlODkwNDU1MTZmZGU2MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEH7mcFd0ZDzHW8u3ev0H2MMv9Nm
vvxfTyUCh17fcwawrHkAptxQLgbMJkNL0a6lG+9caVtxieqqpKt6XSjm8VGQQNQ8
dmZI2dA9BsMSrZHmo2TZwUbQHu0TeQo5FAIvXKPY75TSaGKRLV28+1ve/NkfnmcI
T81L93c44j8I706Y9giaKMQ6Vz2kDuX1pyOEupW7TuF3//eyfz3FZ0tic5a6s82F
4IT3m64mKetnxjiFITQtcI2GcHTD0G9it7tTKdRZelrwQMxFmQezEmBF2xK25pH+
YKFPQ2skraHqvIEqUW9Qh39YMBqEnj628vggCcDczjkLTSCnBafsTSuAMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRON24RQIGrK1VbyOiQRVFv3mC3MB8GA1UdIwQY
MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt
YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk
LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSRvc9Zd
xb4z3rlHJyPWwWy/l0z8uYbf7ZygVidD4v6TOdas6SpZcfVvz4tKeL4SPlYvsRmB
PY4FS+6DX6kl+OXaVv9YcJwnIDWPcSFcbZTKu+vLRGnpt3le8YOWIuLoNyovDvzi
65nEbp51twLDKbiUt5eSOGfOAINfOb0jfFRqoBMlmHdvzZ149I9shPETAR+Xal8e
x1uVX2St5CbpGQlWvYZhz3kjn6P4r4oIAswHBpMBaS1GLSqZ9Enpw7NFcPa8JlQA
fvx8sEq3ugzH7Ss0TwzT3ruePl/Gda3f4mCrI0dO24gbRfnT3/mZgyoJv6/evXvH
KE3yAjoZCoMkQQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:46 2026 by rpki-client