Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier: N83AwLKtoX/GIqm6ZDIadAYON5wiwD9tji0xfBJoxho=
Subject key identifier: 72:1C:9B:7E:88:C4:5C:24:22:D6:24:A7:B6:0D:A1:51:8C:40:9E:A4
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019FA9077BCA22867F131E414B6FD686432F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number: 10A3
Signing time: Tue 28 Jul 2026 14:01:07 +0000
Manifest this update: Tue 28 Jul 2026 14:01:07 +0000
Manifest next update: Wed 29 Jul 2026 14:01:07 +0000
Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 6NjG58JOqK/+VOy+zNtCAUF1DmJpZwf7nRlNuh2ASms=)
2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=)
3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=)
4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:7b:ca:22:86:7f:13:1e:41:4b:6f:d6:86:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jul 28 14:01:07 2026 GMT
Not After : Jul 29 14:01:07 2026 GMT
Subject: CN=721c9b7e88c45c2422d624a7b60da1518c409ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:2c:3e:47:b5:a2:bb:14:52:31:95:ab:d8:
19:b1:b5:95:69:56:08:b4:94:c1:2e:c6:7a:cb:69:
05:f6:12:88:8f:ce:3f:15:c1:b1:df:6a:1f:e3:7e:
7d:06:11:6b:2c:98:b5:86:6b:d0:ba:fd:fe:4c:ca:
1b:06:89:53:5b:28:a1:58:94:ee:c4:cc:db:db:37:
3d:1b:6d:a5:84:98:5f:61:fa:61:4f:6b:69:38:15:
a9:f8:bc:ad:1e:d4:13:1d:54:9e:4d:93:ba:fd:e7:
88:1c:4a:11:bb:0d:5a:5a:02:8b:41:54:49:56:36:
ad:f5:d0:ad:a1:f9:48:b8:b1:eb:31:53:0d:b3:80:
21:d8:65:cf:47:43:1a:89:00:e5:81:f0:82:38:8c:
c9:fa:d9:c0:82:6d:ab:7a:d2:fe:84:89:40:77:12:
50:af:fc:df:e0:09:9f:14:97:54:cd:c1:e8:f5:53:
3b:f0:72:f0:2f:99:61:36:93:7b:d2:7d:57:e2:d0:
03:d8:9c:f3:c0:02:c0:23:34:fb:12:c5:61:c8:b5:
d4:e3:cc:b5:87:16:ec:bf:0f:1e:27:0d:b8:32:04:
45:56:20:09:5c:11:2e:ab:56:42:8e:3a:bb:09:0a:
47:f6:0e:af:5d:d5:dc:62:f4:12:b7:5e:8b:06:2e:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:9B:7E:88:C4:5C:24:22:D6:24:A7:B6:0D:A1:51:8C:40:9E:A4
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a7:1a:5e:5f:8f:ef:20:60:68:7e:9f:63:9c:fe:17:0a:ab:
3a:10:55:88:97:c4:13:4e:35:2a:cf:20:5a:36:16:99:b5:84:
2d:83:a4:5b:70:6f:88:3b:c0:1e:63:6d:54:10:7e:23:09:a3:
ad:7d:19:b1:45:c4:9c:54:6f:ae:2d:fc:e9:0f:f2:1b:aa:bd:
1b:2e:8d:bb:3e:c2:1a:ae:97:0c:55:a6:c8:49:65:73:be:bd:
b4:b7:7e:b3:ce:f6:0c:d2:75:c7:b4:07:f3:4a:06:f0:47:bd:
36:8c:11:54:af:a2:4c:94:b8:bf:97:75:c2:dd:bc:d8:b4:98:
f3:e8:e1:14:7c:81:eb:2e:16:ec:8d:a1:75:12:5b:43:8a:a3:
95:5e:8b:61:69:78:a4:e8:8f:46:ff:9f:eb:73:26:45:0b:d7:
68:fc:f5:23:4b:1b:26:4b:4c:2f:38:10:65:e9:38:62:9f:55:
6d:67:5f:d6:4b:1a:31:ee:ff:02:8f:17:7c:b4:b8:b5:fb:97:
03:30:e7:b5:79:6a:75:e7:f7:48:1b:b2:43:8e:68:a8:ad:43:
45:70:57:5a:ad:e3:8c:70:b6:f5:db:2f:eb:63:83:9e:e0:56:
7e:0a:b4:91:04:7c:1f:3e:86:9e:a1:e4:6a:12:c5:c2:29:ce:
2b:d3:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:10 2026 by rpki-client