Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: DDBqL3TDA/617KnqIwbcsmX935fIVSOZQ4QgeUXoYJ4=
Subject key identifier: 30:B4:E1:37:67:68:D8:D0:47:6D:9E:C0:D5:00:6C:7D:CF:35:AE:56
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 01A0C3A0566126CA4DD4E89A2EC3951C202E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: 027D
Signing time: Mon 21 Sep 2026 11:00:59 +0000
Manifest this update: Mon 21 Sep 2026 11:00:59 +0000
Manifest next update: Tue 22 Sep 2026 11:00:59 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: sxlY0PL52O4IyjaxkxI6+XhnopFHPRb1EDI++XpGyE4=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:56:61:26:ca:4d:d4:e8:9a:2e:c3:95:1c:20:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Sep 21 11:00:59 2026 GMT
Not After : Sep 22 11:00:59 2026 GMT
Subject: CN=30b4e1376768d8d0476d9ec0d5006c7dcf35ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:4a:b4:62:62:8b:c3:ff:cf:0a:1e:4a:62:
d5:87:76:9a:3a:3f:55:97:d5:ef:10:52:18:f2:e6:
64:ab:59:ef:18:f2:96:5a:7e:99:c5:80:8d:6d:f4:
76:63:7b:18:99:77:7f:b1:75:dc:5d:0f:95:ec:6c:
0f:ae:fb:e9:9d:11:75:f6:2f:ba:fa:38:80:69:bd:
9e:6c:1d:87:eb:2a:a2:53:ce:8d:d3:b5:57:d3:1d:
81:df:79:e8:0e:ef:1e:1f:f3:05:85:ba:cd:50:56:
e9:f9:9f:d7:7d:f1:97:84:df:8d:0e:70:c8:64:74:
bf:da:cb:f5:67:1e:15:48:87:c9:40:5e:ed:1c:9e:
79:fb:ef:c7:ed:41:5e:57:53:dd:ac:d1:0c:0a:35:
72:74:38:fa:16:39:ef:77:a9:e1:91:ec:87:bc:d0:
49:ec:ef:52:3a:a7:c6:f8:45:6a:4a:f0:9d:5c:21:
a6:4e:2b:fb:70:00:25:19:b8:b1:6f:f5:2f:50:1a:
0c:12:2a:6b:56:39:a5:f1:48:a8:7f:78:cd:05:57:
15:d4:5b:dc:bb:7a:0b:ca:d6:10:38:07:92:83:7f:
09:82:de:56:23:c2:e1:32:ee:de:41:64:a9:3f:7b:
30:06:4c:b7:7c:10:a6:0c:a3:7c:4b:54:83:80:17:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:E1:37:67:68:D8:D0:47:6D:9E:C0:D5:00:6C:7D:CF:35:AE:56
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:39:d6:61:a1:ed:3e:dc:1e:e0:e0:ee:8a:ee:08:41:bd:61:
e8:3f:1d:88:02:c4:51:02:d1:44:16:3e:13:4c:47:d3:a4:22:
9e:f8:d7:a0:a5:44:7f:4c:d0:37:07:df:72:e6:3a:78:00:b2:
17:40:65:ce:e5:3c:36:8a:d9:9c:a4:24:06:6c:15:bb:de:0f:
37:20:cb:c8:96:66:69:e6:61:33:d9:32:a9:b1:b8:ec:55:25:
a9:f4:9a:bd:cc:30:50:3b:30:f4:a4:d0:b9:7a:04:6c:a8:ba:
8b:cc:52:6a:04:56:71:46:e9:93:54:56:e7:b2:1e:a2:c9:7b:
ab:e9:4e:52:ef:ea:35:f0:3d:46:79:59:15:6e:18:7b:cf:cd:
0b:6f:38:bd:c7:25:1f:a4:aa:d9:66:2a:eb:b9:15:89:53:85:
20:f2:32:8c:4c:95:3c:db:f2:7d:9c:a0:63:cf:f1:32:10:1f:
c3:0d:8e:ac:6d:41:1f:fd:72:21:37:bd:a7:a3:ef:07:af:d1:
e8:24:b5:b5:df:f1:03:fa:d5:7d:a9:52:e5:ff:2b:3d:41:1d:
57:ed:b1:ba:ca:8f:62:1c:a0:5f:e2:02:89:8e:10:6e:c9:27:
74:27:a8:d9:7f:a4:a1:f2:ec:5f:a7:c3:54:9d:7f:41:94:f3:
f1:92:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:26:57 2026 by rpki-client