Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: rZgBUKK69FKzpQRObEWGH5JZ08mIgGtxmpPzqYk+6Ck=
Subject key identifier: D4:CE:8D:F4:72:05:71:4C:D9:A3:78:5C:7A:92:CA:EB:A0:E5:08:3F
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 01A0E51A28C81E4C4FEED151F80BB14669F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0930
Signing time: Sun 27 Sep 2026 23:01:31 +0000
Manifest this update: Sun 27 Sep 2026 23:01:31 +0000
Manifest next update: Mon 28 Sep 2026 23:01:31 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: QBJfxEKlZvTBwMSSDpyyXyPBmhnGFqKF+qKs/I3U7LA=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:1a:28:c8:1e:4c:4f:ee:d1:51:f8:0b:b1:46:69:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Sep 27 23:01:31 2026 GMT
Not After : Sep 28 23:01:31 2026 GMT
Subject: CN=d4ce8df47205714cd9a3785c7a92caeba0e5083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:4a:23:cf:4f:94:4e:98:19:ea:14:dd:79:
58:12:bc:2b:52:e9:c1:b6:75:fa:f8:d0:41:6c:b9:
40:45:72:bc:08:79:27:4d:0a:dd:c3:74:43:22:8d:
f1:cc:82:ad:d3:6c:44:2e:aa:82:65:32:bd:73:99:
2e:b8:b2:1b:b5:7a:f9:c6:61:c2:0c:a7:f4:d3:c7:
60:15:aa:a5:67:96:10:31:19:f7:c3:eb:08:b1:d4:
24:d1:dd:65:b6:3b:bf:7a:3b:90:3f:17:df:1e:95:
0c:f8:6a:cc:06:bf:6e:37:8d:ce:e3:19:28:1a:6b:
ca:d4:34:db:87:91:ea:88:e9:92:3c:4a:17:de:a1:
c1:09:56:e2:5e:70:14:73:bd:40:16:76:bc:27:dc:
be:f6:d8:03:08:23:40:e2:d8:90:a2:f6:f3:dc:46:
72:bd:ee:15:85:cb:5f:7b:e5:f6:b1:7d:5f:fb:8a:
6b:e7:f9:eb:91:d5:b1:29:1e:d1:e3:f9:9c:cc:7b:
1d:b1:e6:c5:24:39:78:5d:11:a9:89:bf:1a:d7:8d:
0b:f5:03:22:3a:0f:42:e7:74:8c:cf:64:d6:bf:7a:
83:5c:44:0d:57:5f:48:19:df:ad:e6:8e:ec:f5:55:
3e:2c:73:9e:6f:fe:f4:88:09:0d:9e:58:9e:67:dd:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:8D:F4:72:05:71:4C:D9:A3:78:5C:7A:92:CA:EB:A0:E5:08:3F
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fe:b1:e8:57:cb:a8:2d:e2:37:a0:f9:c2:09:0a:da:45:4d:
42:30:d3:0c:dd:e5:23:0a:c3:fe:bb:97:37:85:4e:43:be:71:
fc:a7:ee:87:46:0c:1b:51:ae:58:81:2c:92:55:1d:a3:16:6c:
90:6a:6b:9c:ab:00:c7:4b:ec:3c:c5:93:9f:2d:b7:cb:b5:39:
01:54:d8:f3:30:5f:20:14:53:f1:8b:01:02:7d:f8:1f:28:cc:
ac:3d:66:90:2d:b8:a8:10:72:df:10:d2:ab:93:b1:11:84:f8:
56:a0:1b:87:91:75:2b:04:9c:5f:9c:f7:89:3b:12:1d:1c:33:
14:73:06:fc:cf:fb:93:e0:8c:9b:8c:5d:30:85:84:c7:24:ad:
f7:61:93:89:bf:44:d1:03:7c:4d:75:a4:5f:b2:28:40:4e:ee:
8e:3b:be:a0:c0:9b:d4:24:07:1e:ac:3a:63:ab:6a:bf:0f:56:
79:ae:3e:8b:2c:7d:2a:a6:26:96:98:1a:48:94:07:e6:2e:c5:
8f:07:fd:f8:49:3a:36:75:c0:ea:98:94:90:c0:3d:dc:f1:cf:
43:d8:4c:a8:52:8a:f9:0f:88:62:b9:9f:0e:11:cc:40:c2:32:
9f:6e:03:76:90:47:06:03:8a:9f:17:dd:b8:02:18:06:b0:6b:
af:bd:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:03:51 2026 by rpki-client