Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
File: 33SEs_Vo6k6qe_DLfIP172Y-sXA.mft (raw, json)
Hash identifier: yLPVtyz0f2duMj4gRqrnGhhNcuyNaJAyPNnhv/7R5JA=
Subject key identifier: 1A:8B:8B:82:9D:93:63:3F:45:56:EB:34:70:8E:B6:4A:B0:B1:8C:F4
Authority key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Certificate issuer: /CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Certificate serial: 01A0CC6C3110E375E3484FF4505BE363ADF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
Manifest number: 7E
Signing time: Wed 23 Sep 2026 04:00:37 +0000
Manifest this update: Wed 23 Sep 2026 04:00:37 +0000
Manifest next update: Thu 24 Sep 2026 04:00:37 +0000
Files and hashes: 1: 33SEs_Vo6k6qe_DLfIP172Y-sXA.crl (hash: qc6OiwxZELqIiWx6anoCoGB4oHPIh0EsLV+/+gMLkFo=)
2: sqHFwo0XB24O-EyLxoiNi9bPLc8.roa (hash: ig6fBlUC0evhdNCNW32iCNTFqWb3AD0R7kCT6EGKt9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:31:10:e3:75:e3:48:4f:f4:50:5b:e3:63:ad:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Validity
Not Before: Sep 23 04:00:37 2026 GMT
Not After : Sep 24 04:00:37 2026 GMT
Subject: CN=1a8b8b829d93633f4556eb34708eb64ab0b18cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:da:dd:a3:0a:a1:01:94:a4:d3:cb:d5:4d:
c1:94:5b:ca:ed:a5:85:9a:cb:cf:d6:35:47:46:46:
0f:dc:a0:e5:01:d4:c2:bb:a4:bc:41:1b:71:84:af:
8c:b8:9d:45:d2:11:56:8d:d5:95:d6:40:9b:d7:88:
67:2c:97:94:1c:b0:ea:9e:5e:96:ae:50:22:45:02:
1a:64:fc:0c:c4:0d:ca:b1:4d:10:4d:c9:b5:65:f8:
a2:7b:99:e7:73:5b:85:b3:4b:e4:72:c8:03:0e:0d:
e9:b5:7f:2a:a6:28:19:d6:a5:46:0d:26:a0:68:2c:
de:b4:62:92:07:48:84:91:d5:b9:20:63:b1:e8:95:
74:cd:c6:4f:33:df:7e:7c:d3:4b:56:b8:c4:6b:80:
e0:84:1e:1c:5e:d2:38:68:f1:4b:59:b5:1a:ab:0f:
47:41:5d:41:3a:71:7a:29:3e:72:77:7d:60:0c:1d:
6c:79:e8:70:f1:74:e0:d0:0f:20:e4:7c:d8:3c:2c:
17:4a:40:e4:93:db:2c:fc:7e:d1:d2:9b:b9:1d:de:
93:15:0e:4e:72:3f:4b:09:bd:ea:30:48:72:d2:5e:
20:91:a2:c8:31:58:ce:b2:f0:80:e4:12:04:05:ed:
eb:68:d0:a5:e2:fd:1c:e3:37:d6:71:6b:f8:ab:c1:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8B:8B:82:9D:93:63:3F:45:56:EB:34:70:8E:B6:4A:B0:B1:8C:F4
X509v3 Authority Key Identifier:
keyid:DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5e:27:88:71:7c:3b:e5:79:ef:19:6c:a8:9e:c7:37:a0:96:
49:20:39:55:ec:7e:98:1f:9e:78:6f:17:30:9a:a8:ac:80:81:
0a:b0:2e:b7:1a:d5:47:df:9d:4b:47:7e:a9:84:56:b9:14:4b:
3d:a9:ef:f6:8e:0e:f3:5f:1b:42:b2:80:58:db:2b:3e:15:d7:
91:c7:77:2b:dc:9d:cd:90:22:8d:71:c4:c3:64:9b:1d:08:d6:
66:fc:fb:2d:ab:53:b0:82:ea:64:7d:dc:c0:bb:b5:c7:28:21:
8b:8a:1e:d1:43:cb:30:6a:d6:41:36:d5:e7:13:45:e3:ae:8c:
c4:bd:4f:dc:37:3f:e3:cc:57:3c:bf:c2:03:6a:95:fa:29:be:
c5:dc:8f:2b:40:5a:42:2a:0e:74:96:ab:47:f0:6d:c9:5d:f4:
cf:32:86:eb:ba:03:e6:af:b0:f1:7f:6c:1b:38:65:e7:f0:69:
57:75:59:ea:20:2b:63:0d:df:23:17:00:e8:62:1f:81:79:ee:
70:bf:12:e9:cb:43:6a:8c:fd:36:3c:6f:7a:b2:35:e0:95:39:
b3:0e:83:d5:d8:28:29:c5:fa:9f:cf:5c:82:a6:2c:26:8b:ad:
61:04:b5:cf:9d:11:f4:08:3b:9d:9c:21:55:64:0f:87:9e:53:
66:ac:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:27 2026 by rpki-client