Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: zaEMzrozXeZBSQlqsOS+3sm2rnzFkbVIOlvJndI93JA=
Subject key identifier: B6:DF:37:CA:19:DC:E7:7D:89:81:4F:E7:B7:34:A0:40:9B:84:94:8F
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019CAEDA265C29080CC8C8A2E8752159F651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0EDB
Signing time: Mon 02 Mar 2026 14:00:58 +0000
Manifest this update: Mon 02 Mar 2026 14:00:58 +0000
Manifest next update: Tue 03 Mar 2026 14:00:58 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: rXoP6Ymj9qKwWh1L6Oxw92UNj/NXJ0ii0t2AwaDZMn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:26:5c:29:08:0c:c8:c8:a2:e8:75:21:59:f6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Mar 2 14:00:58 2026 GMT
Not After : Mar 3 14:00:58 2026 GMT
Subject: CN=b6df37ca19dce77d89814fe7b734a0409b84948f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:a4:ae:00:d1:23:ac:a8:f4:3b:22:1f:72:
3a:30:1a:4e:68:e8:6b:bd:02:94:54:53:8a:a2:42:
c3:d3:db:d9:bd:3c:27:bd:53:bd:db:4c:b4:d7:3c:
f1:57:fb:4d:04:12:c1:25:cf:33:fd:64:a5:e5:1a:
f9:dc:4c:61:ac:58:6e:67:d2:16:58:29:80:cb:56:
3d:76:10:5b:42:a6:80:c6:d8:35:ba:de:59:4f:d1:
2e:22:85:74:ae:fa:fd:f0:62:c7:8e:fb:59:b2:63:
c8:d8:f1:c7:63:db:6b:f5:23:90:dc:46:9f:80:40:
4c:c8:0a:f0:c7:2b:26:8b:47:98:c0:ed:d1:0b:7a:
6c:88:16:a8:ee:62:f4:f9:30:5b:60:04:6b:75:54:
75:0b:99:7a:da:23:6c:b1:ac:07:2d:24:38:54:2b:
a2:ea:5d:f7:f4:eb:f8:ae:7a:2f:e9:64:7d:85:f6:
ed:d4:7e:03:b2:79:6e:63:16:12:a0:f2:83:e4:f1:
5d:1d:8b:a4:5b:2e:ec:23:93:78:9f:4c:fc:50:4c:
94:32:15:e9:96:2b:62:35:d2:56:64:28:a2:f7:a0:
d0:d1:10:a2:6e:7a:98:24:fb:1c:cd:05:cf:77:b3:
1d:e4:11:97:c4:5f:4b:e1:61:0e:2c:7d:3c:71:77:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:37:CA:19:DC:E7:7D:89:81:4F:E7:B7:34:A0:40:9B:84:94:8F
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:9b:95:60:f1:ea:b1:b5:01:cc:1d:a2:b5:b6:7c:63:a5:
41:2b:fc:2d:0a:6d:40:10:8e:84:af:4c:82:bd:6d:63:4a:70:
68:60:24:4a:01:9c:fe:39:fd:27:ee:aa:fa:51:02:29:56:68:
7e:34:3a:02:3b:d4:e3:18:39:23:d8:7f:0a:a2:79:19:0c:9e:
4e:dc:90:70:ba:72:32:ab:09:60:b9:e7:ca:0b:7b:74:16:46:
dc:72:81:6c:68:bd:93:de:89:11:77:a7:30:ee:33:f0:be:d2:
8c:88:60:2a:62:1e:c7:40:4b:d0:df:3b:a2:bc:35:a7:73:db:
cd:d8:e3:23:41:cd:cb:78:80:2c:4f:b8:4c:fc:3b:e8:89:da:
bb:16:bb:6d:70:b0:72:12:bf:f9:b3:90:1d:9a:00:33:a2:ba:
30:8b:b3:f8:d5:fe:6e:45:5e:df:0e:5b:df:5f:89:a3:48:11:
1c:4e:ba:5e:8e:d9:22:0e:75:d1:7b:58:a0:c7:be:43:5b:7a:
a9:fe:58:15:5c:e4:85:ab:c5:38:bb:32:19:9d:82:98:26:c9:
e8:a6:c9:2f:00:cc:d3:e2:63:cc:71:ae:6e:69:fc:50:74:27:
36:58:6e:31:53:41:e7:c5:ee:ba:1b:c3:70:06:ff:4d:cf:5c:
03:b8:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:55 2026 by rpki-client