Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: 4SEnxaZCdp0zra498QfBGzyNaNR33Z/laTqzwBF6IOE=
Subject key identifier: 30:46:54:ED:B2:43:42:B0:E5:21:B4:61:80:05:54:37:AA:8C:22:A6
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019CAD907E1B494E8653334C992E1E1C70E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0701
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: 4P34SeBElceYkOxBz67HvMomIlp1bOvG/6gvhkdEUyg=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7e:1b:49:4e:86:53:33:4c:99:2e:1e:1c:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=304654edb24342b0e521b46180055437aa8c22a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:7e:81:c4:ab:e9:60:0a:ae:21:21:94:b0:
67:5a:6a:e8:f3:b5:18:3b:0b:c8:5a:58:eb:d1:55:
35:d1:c8:6f:d4:0d:89:ff:37:ac:c0:e1:31:03:3e:
0b:f0:f6:5e:3b:a6:38:d5:4d:31:5d:2a:75:8d:09:
1d:95:de:f0:1d:1f:bb:73:89:95:ed:f7:25:2a:11:
1b:41:9d:8f:77:79:61:cf:c2:e1:dd:05:56:1a:2e:
1b:a8:4b:26:81:08:29:32:5a:f9:6d:62:9a:03:67:
4a:7c:1e:c0:c2:ca:d1:10:70:89:be:1a:4a:fa:fd:
fd:34:0e:7d:9e:31:f5:75:48:84:fe:90:06:c5:ad:
e7:b3:e0:81:19:0f:af:32:cd:1a:53:e3:9e:b1:dc:
f8:74:51:30:83:eb:29:a3:a7:0c:b5:66:af:76:26:
fc:24:d8:f8:c1:c6:d1:10:48:a1:52:12:aa:b9:da:
74:b9:40:bb:27:71:87:9e:5e:ae:26:77:c7:b5:59:
58:cf:39:09:31:af:83:33:45:b8:2d:5f:d9:c7:0c:
d5:49:8f:7b:9d:d6:77:58:22:ce:f7:69:de:cc:db:
68:98:b7:d8:de:3b:4a:82:af:3e:71:98:c4:87:01:
73:c0:09:82:db:2e:43:b3:01:21:8e:7f:c3:d6:df:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:54:ED:B2:43:42:B0:E5:21:B4:61:80:05:54:37:AA:8C:22:A6
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c0:3c:1c:f4:79:c2:bb:64:aa:65:ac:bb:d6:5b:81:73:53:
9e:cf:a4:d9:9d:8b:1f:14:24:db:2d:b3:14:ce:c8:3d:67:3e:
36:d1:f7:8e:24:39:e3:0f:49:a1:59:47:69:a3:f8:53:02:1f:
85:8f:78:37:11:b7:e7:3f:38:9e:d6:f4:11:b3:06:1f:f4:ef:
3e:99:bc:f3:f2:cd:83:c8:41:c9:26:79:b3:eb:f7:f7:6a:07:
ee:a0:3f:cc:2b:b4:ca:e6:52:bb:d0:b7:b9:41:b2:14:ca:f1:
a2:6e:8c:27:f1:31:5b:87:c9:d2:07:0a:e2:70:fe:59:ce:9b:
d0:8e:a0:d4:b4:7e:b9:b0:8d:e2:16:b9:c0:37:62:86:a8:06:
c6:5f:c5:2c:72:c7:90:4c:54:fb:a7:66:c4:14:55:9d:64:13:
c5:cd:15:34:de:30:3e:d5:d0:ed:9f:4f:48:e8:b6:18:79:22:
34:70:ff:5f:4f:32:6f:90:67:2a:02:7b:89:26:9e:78:2f:07:
6e:de:0b:d9:09:36:0e:e7:d9:c1:53:eb:20:4a:fa:b7:26:8d:
28:67:7d:ea:68:84:31:9b:13:77:f3:0b:6b:3c:ff:63:0d:c9:
98:cb:84:01:e0:19:1a:b8:90:77:bf:7a:81:ee:2e:c4:c5:65:
a6:ef:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:23 2026 by rpki-client