Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: XdKd+ik9rUwC4jn4AlMMB5KjNXr5udNOISnZqChvJGI=
Subject key identifier: 24:81:37:AD:82:07:4D:5C:01:97:3C:7B:8F:9B:51:F5:6C:6C:04:D2
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019D99D00673AFC9E910B06741EFCAD6E01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 0F92
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 45WqcyrPKu/rgfKii3KQNeUobG1zm1OPKbC+2GLut70=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:06:73:af:c9:e9:10:b0:67:41:ef:ca:d6:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=248137ad82074d5c01973c7b8f9b51f56c6c04d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:cf:83:3d:35:44:66:62:13:2a:bc:3a:c4:
2a:41:00:38:67:b8:d3:c0:ea:87:c1:fc:06:fb:91:
03:74:04:bd:54:81:1a:e8:2e:e0:94:76:5f:18:0a:
c8:62:03:50:bc:dc:ea:5b:87:8a:7c:ea:cf:24:bc:
c7:1e:fb:5b:e6:f9:4e:f3:20:11:a2:c6:82:7b:f3:
04:fa:17:5a:e5:a9:38:a9:98:ba:d4:c0:46:2a:3d:
41:d1:b3:7a:8c:9f:35:a0:6d:81:a7:2f:e9:fe:d7:
96:cc:36:aa:b4:79:82:58:16:08:f8:54:4c:1f:29:
02:77:9b:73:ff:b9:72:13:bd:75:a5:63:62:02:18:
cc:79:fd:0d:80:25:67:24:f7:f4:5d:e3:49:25:88:
1a:78:52:eb:2f:11:90:98:23:99:93:05:0b:46:b2:
73:a2:eb:0c:39:e5:6e:d1:df:75:1f:51:a0:55:05:
9d:5a:6d:e5:c1:35:38:4e:43:40:78:53:2b:ec:ad:
28:f4:c8:66:ab:42:4b:c8:cb:76:a4:b6:b6:24:45:
2e:b2:41:77:0c:1f:6b:e4:ee:50:f9:e6:92:74:4a:
01:90:d3:81:e2:d3:f6:e3:74:56:de:a9:f6:43:d6:
81:06:a7:8e:2a:06:8e:c0:62:f5:31:9a:c7:de:75:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:81:37:AD:82:07:4D:5C:01:97:3C:7B:8F:9B:51:F5:6C:6C:04:D2
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:94:f9:34:d3:94:57:c4:d8:ef:d5:eb:f4:e4:f0:13:a0:5c:
14:2d:65:59:f1:9c:16:78:89:a2:eb:7d:34:c9:f4:e2:66:aa:
77:e4:88:93:4c:2b:18:e7:9e:3a:eb:84:85:77:90:d7:e6:3a:
fe:50:d6:00:8a:f4:9d:77:93:e7:f8:0d:b4:65:c9:29:3f:a6:
10:78:2e:5b:d3:4c:6f:b2:85:e6:04:04:dc:b4:6b:1a:e2:5c:
cd:7a:c3:9b:13:3a:bf:da:4c:06:8a:b8:7b:b2:66:aa:6a:86:
23:54:5d:53:a8:d6:bb:18:16:79:8a:1c:ff:1e:76:0b:c2:96:
6b:26:75:dc:f8:0e:61:43:9f:93:9a:ed:15:92:84:f3:f5:f1:
26:ec:d6:80:db:4f:2f:3f:54:e4:8d:96:b8:fe:28:7c:9d:9b:
ac:64:2e:20:ed:04:c6:4e:19:bd:fd:25:fb:7f:38:f2:ae:f6:
94:e7:aa:c9:a9:c9:47:53:86:80:7b:6a:52:c3:5b:cc:5f:46:
e9:df:4b:81:55:79:98:77:a6:fb:c0:bc:61:4c:65:ed:b4:75:
c8:f1:0d:62:3f:bc:a7:e0:ed:83:60:74:7a:82:0b:24:47:cc:
e8:e7:3e:e7:e9:e8:73:53:cb:6b:e5:83:99:b6:c2:68:c7:ef:
ee:6f:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:15 2026 by rpki-client