Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: 4h8xM/8FVSmSKG6ZS73fomRf8zxxI4Vblb2tziIKXIo=
Subject key identifier: AA:C7:DB:32:17:B2:76:66:96:AF:DA:0C:0F:E6:45:A5:11:A3:95:AC
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019CAA58C7135D5DD92E739F89D2C93D64CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0F16
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: xZpbTj3gatSoGtYGniTDL4oIHCk450PpQmDN91X6Cw0=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c7:13:5d:5d:d9:2e:73:9f:89:d2:c9:3d:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=aac7db3217b2766696afda0c0fe645a511a395ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:c3:f2:97:90:80:7b:77:ae:21:5c:9a:82:
27:19:3d:d9:4c:95:4a:f3:88:c6:cb:e5:06:8b:19:
6e:e6:42:47:2c:3e:56:0c:75:7b:f7:1a:18:d7:74:
4b:23:4b:f5:c4:ab:d9:45:7d:e6:78:0e:60:0f:a2:
3b:0c:ae:c5:07:61:1c:00:6f:8e:c5:f7:bc:1a:db:
fe:fa:8b:2d:38:51:83:6a:69:f0:69:19:e4:67:7f:
55:3f:69:11:bb:73:f0:c4:8d:26:5c:ac:65:b8:fe:
a2:88:99:f5:e2:16:13:9d:d4:ae:c9:f3:bc:65:a4:
d0:f1:88:96:c8:21:72:82:b6:a5:58:e3:4f:43:8e:
de:1e:78:6e:a0:17:4a:14:b3:70:ad:ce:e2:1d:1e:
1d:1e:63:39:53:f7:e7:0a:b8:ad:e0:76:e4:22:1b:
a3:7d:dc:21:5c:27:38:91:29:5f:50:d6:c1:44:92:
ca:1a:e5:79:c8:d8:97:25:3c:76:27:57:90:6b:f2:
54:10:0a:1f:f0:dd:74:66:f9:fd:c9:71:e8:07:b8:
a6:26:f3:e9:32:10:45:26:6d:a4:51:e4:17:c7:b0:
86:d7:41:4c:02:20:2c:3b:c9:35:c2:55:ab:a9:8f:
ec:d3:30:ff:22:c5:43:92:ac:7a:c5:1b:4b:f9:46:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:DB:32:17:B2:76:66:96:AF:DA:0C:0F:E6:45:A5:11:A3:95:AC
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:e3:a1:c7:94:8e:74:1a:b3:3c:8d:8c:15:c7:df:6c:b7:
e3:89:db:ec:02:ac:4e:1e:2c:2e:72:76:9e:2d:cc:74:4b:64:
4f:23:0f:70:fa:d4:49:9f:29:2b:7f:01:68:9b:96:94:ce:11:
96:eb:06:c5:0e:34:82:78:35:e0:ab:fa:ba:73:7b:e8:b6:5c:
ae:6b:94:f4:91:8d:db:92:9c:8c:d5:91:70:6b:0f:21:79:dc:
f6:2a:35:c1:ae:1e:0d:4f:e4:a0:14:5e:fe:37:1f:49:c9:9a:
6f:28:a1:db:fe:08:6f:00:0d:d1:1b:72:2e:68:56:c5:4c:51:
e7:03:75:f8:39:06:19:4a:cf:63:94:d4:12:53:78:b3:14:1a:
ef:e5:39:86:4f:6b:f9:5a:f8:aa:8f:3b:79:ea:08:3c:3b:57:
32:46:59:ff:71:8c:26:76:8c:97:13:26:bc:4e:a5:19:66:38:
46:66:df:15:36:40:ab:df:7b:81:cb:63:0d:6c:4f:10:be:80:
e5:f7:10:e0:4c:87:2b:72:8a:24:2f:70:95:71:80:c1:6f:8c:
c7:82:c5:69:4a:2d:0e:f6:9a:16:05:df:08:1a:4a:6b:19:df:
55:43:f4:e6:6a:65:89:7e:19:f6:29:06:1d:9e:e9:10:d9:6e:
e2:cb:12:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMcTXV3ZLnOfidLJPWTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj
NjAzMTEwHhcNMjYwMzAxMTcwMTEwWhcNMjYwMzAyMTcwMTEwWjAzMTEwLwYDVQQD
EyhhYWM3ZGIzMjE3YjI3NjY2OTZhZmRhMGMwZmU2NDVhNTExYTM5NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCPD8peQgHt3riFcmoInGT3ZTJVK
84jGy+UGixlu5kJHLD5WDHV79xoY13RLI0v1xKvZRX3meA5gD6I7DK7FB2EcAG+O
xfe8Gtv++ostOFGDamnwaRnkZ39VP2kRu3PwxI0mXKxluP6iiJn14hYTndSuyfO8
ZaTQ8YiWyCFygralWONPQ47eHnhuoBdKFLNwrc7iHR4dHmM5U/fnCrit4HbkIhuj
fdwhXCc4kSlfUNbBRJLKGuV5yNiXJTx2J1eQa/JUEAof8N10Zvn9yXHoB7imJvPp
MhBFJm2kUeQXx7CG10FMAiAsO8k1wlWrqY/s0zD/IsVDkqx6xRtL+UZvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrH2zIXsnZmlq/aDA/mRaURo5WsMB8GA1UdIwQY
MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt
YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk
LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAzjoceU
jnQaszyNjBXH32y344nb7AKsTh4sLnJ2ni3MdEtkTyMPcPrUSZ8pK38BaJuWlM4R
lusGxQ40gng14Kv6unN76LZcrmuU9JGN25KcjNWRcGsPIXnc9io1wa4eDU/koBRe
/jcfScmabyih2/4IbwAN0RtyLmhWxUxR5wN1+DkGGUrPY5TUElN4sxQa7+U5hk9r
+Vr4qo87eeoIPDtXMkZZ/3GMJnaMlxMmvE6lGWY4RmbfFTZAq997gctjDWxPEL6A
5fcQ4EyHK3KKJC9wlXGAwW+Mx4LFaUotDvaaFgXfCBpKaxnfVUP05mpliX4Z9ikG
HZ7pENlu4ssS8g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:15 2026 by rpki-client