
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: SPNi9k1ks2kRybL5Pu4Jz7sgjUVbCQHx+WZDmB+qPrQ=
Subject key identifier: 7D:59:33:C0:76:11:08:DE:16:79:FB:FA:4D:05:0B:55:53:B4:A9:48
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01A0C33261E7DFB8F3C1859050DF6ECB6A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 1115
Signing time: Mon 21 Sep 2026 09:00:53 +0000
Manifest this update: Mon 21 Sep 2026 09:00:53 +0000
Manifest next update: Tue 22 Sep 2026 09:00:53 +0000
Files and hashes: 1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
2: YGa_r2r_wryz0f78Q6muEq3Ihr8.roa (hash: pQVv4oYm/4SbHKAIOEWLFIcaJcnYcvehUqLAA1irsTM=)
3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: W3ghBVOwdh40zCa2N8h1v7E5lVDtUnnVejLgh5GQ43Q=)
4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:61:e7:df:b8:f3:c1:85:90:50:df:6e:cb:6a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Sep 21 09:00:53 2026 GMT
Not After : Sep 22 09:00:53 2026 GMT
Subject: CN=7d5933c0761108de1679fbfa4d050b5553b4a948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:04:db:d9:03:a4:9d:cd:3b:6c:70:27:40:36:
b2:27:8e:af:88:36:6b:90:38:a8:cf:d6:93:fb:cb:
c4:51:0d:f0:4c:b2:32:9b:44:af:bb:fe:d5:47:3c:
e5:8e:42:87:c9:52:c6:74:eb:ec:f6:c9:44:84:61:
20:d6:63:a0:25:22:c9:b3:60:b9:ef:dc:89:a8:46:
c1:02:67:b4:c9:f1:34:07:ce:e9:e7:d6:6b:7f:bb:
8d:17:f3:75:50:5e:60:49:fa:a6:7d:e5:aa:51:e8:
20:c7:31:72:94:a6:9a:a2:87:14:2f:58:a9:71:4f:
8b:31:3c:a4:63:fb:7c:d3:0d:5e:6e:8b:6e:49:24:
32:ad:7a:26:bf:e4:a9:3f:b5:6d:59:d3:a2:ec:d0:
82:71:e0:89:13:9d:ef:7a:2b:d6:bc:5c:62:e0:30:
38:45:04:ad:ce:8b:4b:10:c7:f9:8b:54:0b:89:1f:
e8:98:75:81:eb:dd:5b:0e:27:a0:60:32:d9:cb:15:
ce:9f:61:9a:7a:0c:8e:fc:4c:67:60:61:dd:31:78:
2a:c4:16:d9:69:24:8e:b0:a8:cc:3a:9b:ac:a7:bf:
a2:7d:10:a8:06:08:7e:a6:9a:41:fe:97:6a:a1:be:
a8:8d:0a:9f:75:50:d7:7b:fa:fb:df:c1:1b:c0:0f:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:33:C0:76:11:08:DE:16:79:FB:FA:4D:05:0B:55:53:B4:A9:48
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b3:1a:4b:79:d2:10:94:26:a5:b5:f1:09:8e:09:b4:3c:1f:
94:db:0b:8e:2b:2b:a4:74:f6:a2:81:60:37:6d:e1:1f:d6:6f:
58:c8:a6:4a:a7:69:6a:71:64:7b:d7:b7:a9:73:6a:61:88:f6:
5b:0e:f4:8a:f2:bc:95:e0:f5:aa:26:b2:94:92:c8:f7:9a:72:
a2:3f:4c:c3:05:1d:f1:a6:63:4e:f5:fd:34:a8:5a:3b:dd:62:
4f:41:d3:2b:f7:15:b0:b1:4a:08:5d:f6:76:48:a5:ab:8f:f9:
c1:ff:d5:2f:1e:42:95:3b:84:db:7d:69:19:4c:36:7a:9c:94:
6a:1f:01:5c:f0:0d:eb:1d:29:2d:3e:45:24:d7:b6:41:86:0e:
1a:60:43:eb:ad:40:70:78:2a:ae:54:6e:d1:d7:4c:8a:86:fa:
99:8b:30:7c:64:67:35:7f:78:be:fd:1d:e3:0a:4a:85:5f:60:
05:6f:eb:2f:d4:40:32:e3:21:15:bf:5f:d1:7b:02:2c:6d:53:
57:8e:6b:43:22:dc:98:db:56:cc:7d:f0:82:65:d7:44:15:a2:
9e:5f:51:8f:91:61:29:24:e2:67:1f:c0:e5:52:05:64:e3:b0:
a3:d3:ef:04:7d:bf:9a:76:2f:08:d7:a8:96:b8:16:5b:7e:47:
fb:f6:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:53:18 2026 by rpki-client