
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: Q3OniblOqWB+c7lbruxV4NZTquH4JeYZ8PY44/O/M9c=
Subject key identifier: 8A:D4:48:4C:DA:B6:D5:15:E9:23:22:33:66:5E:05:4F:E4:AB:EC:38
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 019D9A3E82E0F875836E802FFD2469B1A3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0F72
Signing time: Fri 17 Apr 2026 07:01:21 +0000
Manifest this update: Fri 17 Apr 2026 07:01:21 +0000
Manifest next update: Sat 18 Apr 2026 07:01:21 +0000
Files and hashes: 1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
2: TcH4GIuktxSUfHtquYZnE0nBhtE.roa (hash: rpQl9MUfMf8qQcoJFxTK9nJpUXGjE7ncDisSQXNZN4E=)
3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: cwg9IYDAcvZz1EK/Cp2wb1/VU4/h/O/EWguMIHh6LsI=)
4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:82:e0:f8:75:83:6e:80:2f:fd:24:69:b1:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Apr 17 07:01:21 2026 GMT
Not After : Apr 18 07:01:21 2026 GMT
Subject: CN=8ad4484cdab6d515e9232233665e054fe4abec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:28:8e:c7:e4:d5:af:05:b2:32:14:24:d0:
d4:85:a8:b3:9e:63:bb:43:e4:de:a7:77:61:6c:ac:
10:85:89:a4:e7:a5:b3:03:02:6f:9b:2d:76:f6:43:
6a:76:76:77:f4:8d:5c:24:fe:81:19:7c:5b:fc:40:
6c:9b:75:fd:9d:7f:74:33:e8:c7:82:1b:bb:18:be:
dc:30:fa:a3:61:93:45:25:51:6e:c4:da:e6:1b:1a:
b7:1e:22:30:b8:99:e9:c5:ef:52:2c:1a:ae:64:6f:
21:bd:46:94:8d:d8:7c:fc:54:e4:55:a7:27:a6:a4:
cd:09:c2:ef:9b:c5:bd:53:d7:fc:c8:c2:12:e6:1a:
c2:a3:51:88:b4:6f:c1:48:ec:f9:58:72:37:c1:78:
83:87:84:d9:77:57:fe:f8:70:81:da:cf:64:79:cd:
91:e4:93:46:28:1e:14:3e:2e:bc:cb:38:db:f2:f8:
d4:99:b7:c7:b7:f3:9a:2c:88:8b:8d:99:8c:16:40:
50:5e:59:bb:81:85:20:85:e4:41:ba:79:a2:8a:62:
6e:c8:60:5e:6c:1f:53:cb:a6:2c:e7:06:c1:c9:30:
2d:3b:e2:90:2a:cd:dd:78:ae:1a:4a:46:20:0b:38:
1b:50:aa:5f:65:18:54:ec:58:96:b3:e1:0c:7f:94:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:48:4C:DA:B6:D5:15:E9:23:22:33:66:5E:05:4F:E4:AB:EC:38
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:bc:92:e0:61:6a:c6:a3:b0:2e:53:58:4b:49:18:8e:db:
34:80:27:52:7d:cd:4c:c6:ac:7e:52:fd:4f:0c:c9:48:f6:d5:
c7:59:c1:be:f9:8a:83:f4:6c:84:05:a1:92:2c:41:1f:29:e5:
08:05:92:7a:9a:dd:d7:d4:3b:67:f1:18:57:58:40:79:e3:a6:
7a:7e:3a:d6:16:04:ae:80:77:e9:7a:5d:2a:e2:d7:80:02:76:
94:ff:1f:93:04:66:b0:6d:ca:7f:be:6b:fa:ac:cd:aa:21:40:
ef:9d:19:30:7b:5d:17:97:52:7b:9f:45:f8:ed:bd:30:3f:6c:
b5:7a:e5:34:7e:c9:6e:a8:66:16:78:c1:2a:d5:91:04:49:8d:
b3:8a:7f:2e:65:3f:18:d2:3b:75:cc:61:23:4f:44:78:26:a6:
42:a4:94:45:6a:9f:64:c4:66:fe:68:15:8a:22:6a:7a:c0:43:
b2:96:fb:ce:26:1e:0b:58:82:e8:ab:cf:c8:ec:0f:03:99:d6:
3d:e6:8b:5b:65:3e:01:bf:db:cf:0d:2b:83:f6:cb:cc:4e:9d:
7d:27:9c:d9:f9:1e:19:32:a3:88:a0:f7:b8:cb:c3:33:dd:72:
17:d3:0b:a3:d9:0d:4b:0d:bd:79:84:56:de:dd:8c:91:e9:8f:
17:35:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:03 2026 by rpki-client