Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: PszQEfMfYfbA3/mINNg+g4Ns1uAJ1cbILFaZOzs57io=
Subject key identifier: 9D:C3:6C:0F:22:FA:64:CD:36:10:8B:77:60:CB:D2:27:87:C9:B6:FF
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019D9D07D7FE5F63EBEDE2ECF656A7A00A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 077D
Signing time: Fri 17 Apr 2026 20:00:30 +0000
Manifest this update: Fri 17 Apr 2026 20:00:30 +0000
Manifest next update: Sat 18 Apr 2026 20:00:30 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: IUxL0vhcS3H6azi//MDHcAWfAyxgq2LATT3P6Ei49ow=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:d7:fe:5f:63:eb:ed:e2:ec:f6:56:a7:a0:0a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Apr 17 20:00:30 2026 GMT
Not After : Apr 18 20:00:30 2026 GMT
Subject: CN=9dc36c0f22fa64cd36108b7760cbd22787c9b6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:a4:50:56:d4:cf:c0:7f:1a:fb:a9:3b:c5:
ec:69:6f:61:6f:0a:67:b2:ca:8f:c4:43:cd:73:3b:
cb:71:f3:14:b8:fe:84:a3:32:42:4d:2a:84:fc:7a:
65:04:09:c5:0c:18:fa:58:1b:83:53:0a:9c:78:4d:
0e:28:3f:ce:5a:96:fc:40:11:88:c5:04:00:bd:01:
ef:64:82:c7:df:75:96:f6:fc:fb:ad:ee:81:d3:4c:
cc:d1:5c:0a:06:2f:ff:b0:18:bc:db:62:a0:1e:cf:
0e:d5:13:be:83:8d:e5:f0:96:fe:89:a5:cd:97:7f:
30:1f:fc:d9:e2:bb:b7:82:a2:1a:69:ac:34:25:57:
fb:72:1f:e5:ba:a3:84:e7:5b:bb:4f:d0:39:a2:2e:
a6:08:41:46:8e:d8:bc:1f:ce:91:37:97:cf:d0:b1:
eb:65:b8:da:98:12:3b:d3:02:29:cb:f9:2e:19:53:
21:5e:bd:c4:ef:fb:35:5e:05:d6:e6:c2:4b:b7:0e:
33:e9:ce:2b:ad:f6:29:a0:19:e7:b4:85:2a:60:fa:
f4:4c:26:e8:2f:48:03:6d:c4:8f:ae:bc:87:4b:44:
b9:b1:c7:8c:ff:22:5a:3a:c1:16:17:7b:fa:ba:dc:
9a:87:00:78:54:68:50:65:a4:65:a8:36:ef:ff:08:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:6C:0F:22:FA:64:CD:36:10:8B:77:60:CB:D2:27:87:C9:B6:FF
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:61:f5:c8:14:3f:00:8f:ab:13:e8:db:ed:42:1a:ae:a5:7f:
aa:68:16:61:b5:b7:f3:33:21:4e:90:ca:9d:2f:be:89:89:ca:
30:7f:31:35:be:a4:51:bb:d9:81:3f:94:cf:7f:b6:0b:7d:ca:
22:58:8c:c1:53:46:30:63:93:91:14:c3:27:63:7a:51:e6:6a:
2c:b5:07:8f:ce:20:6c:a0:24:d7:86:cf:ef:b7:3e:ad:d1:7b:
29:47:5a:1c:38:86:dd:71:a7:0b:88:c4:88:bf:ed:6e:98:02:
3a:eb:fb:18:c8:05:de:6b:fa:50:4d:7c:30:56:05:a3:71:6b:
09:35:cf:7d:28:36:c7:69:70:69:a1:d4:11:20:6f:25:b7:e6:
de:47:08:a5:cf:3f:2e:4f:a5:7e:3c:36:5c:2d:19:85:a5:c0:
1b:30:78:f0:87:f6:78:31:2a:b4:9f:61:93:ae:8d:5c:88:e8:
d1:4d:41:6e:e3:76:9c:a8:66:62:ca:04:38:73:35:e1:90:98:
e3:e8:b5:7b:6e:78:c1:1d:d4:14:61:49:30:26:34:83:0b:89:
eb:3a:2e:63:01:04:42:f0:d0:83:7b:01:b0:0c:4e:db:20:84:
9f:1b:68:e1:3d:89:ee:71:b6:ff:db:9a:98:5e:b7:17:76:bf:
f8:cd:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:41 2026 by rpki-client