Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: yEkEuC4fLKMu/umP/2pe0X+IEVW51Jsxv7mwz3dG+vA=
Subject key identifier: 31:1F:42:4D:75:6F:4A:BF:CE:A9:43:8C:D1:D7:F0:A6:8F:97:CB:90
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 01A131B444B98856A8134F3A409CAFC004E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 1131
Signing time: Mon 12 Oct 2026 20:00:59 +0000
Manifest this update: Mon 12 Oct 2026 20:00:59 +0000
Manifest next update: Tue 13 Oct 2026 20:00:59 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: x7Qzky0J6T/6xONT0jt//sD/89u1wv4YBosh8faspXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:44:b9:88:56:a8:13:4f:3a:40:9c:af:c0:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Oct 12 20:00:59 2026 GMT
Not After : Oct 13 20:00:59 2026 GMT
Subject: CN=311f424d756f4abfcea9438cd1d7f0a68f97cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:ea:a0:87:cf:fa:cb:2b:7e:c0:b8:79:12:
08:4d:71:db:64:5d:bd:c2:03:b3:64:18:87:53:00:
29:7b:5c:8a:6f:60:dd:a5:b0:c7:4f:43:dc:ac:d6:
0e:ed:75:85:a9:4b:38:5a:51:b9:aa:f5:43:35:e2:
a4:0c:b0:81:8b:2e:09:8d:ee:ad:08:18:f9:e7:4e:
35:9e:99:35:31:f2:b9:77:88:4c:0e:fe:d0:e9:d2:
7d:4f:ad:86:39:a5:77:b5:0e:54:9e:06:e0:ad:61:
ce:85:62:9d:c4:e6:f0:7d:62:d2:26:60:ec:67:08:
3e:d0:fb:eb:90:cc:d9:33:75:f9:69:53:03:e8:98:
c9:45:18:75:99:0b:08:e1:5f:b5:d7:42:d8:01:35:
69:df:af:98:4c:b6:c1:d3:ea:33:7d:68:30:82:96:
4f:c6:23:ee:f5:40:5a:67:b4:14:1c:c7:a7:6b:46:
87:16:28:a6:8e:98:0a:86:1f:4e:2b:7f:ac:2b:01:
38:aa:c8:0e:dc:c5:a9:69:79:ed:5f:1f:e3:10:ac:
55:d8:5d:9e:d5:a5:a5:8e:8d:f5:56:b0:2e:a8:43:
a5:82:99:df:3b:86:d7:60:38:ad:81:2a:39:17:01:
c2:e4:e9:88:96:4e:dc:52:a6:7a:50:df:45:16:ab:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:42:4D:75:6F:4A:BF:CE:A9:43:8C:D1:D7:F0:A6:8F:97:CB:90
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e3:e0:53:50:17:e0:e8:88:1b:69:60:90:cb:35:24:ea:86:
90:1e:51:9c:92:dd:b7:45:47:2c:03:7a:b4:4f:95:f2:7a:ff:
68:b3:1e:41:4f:b5:05:03:79:1e:b3:5c:55:50:00:77:4b:18:
4d:63:3a:b1:49:39:83:4b:35:c4:a7:96:19:b6:0c:91:42:b0:
2b:80:87:52:bc:cd:db:a9:2d:3d:49:9a:be:6c:eb:66:2a:84:
56:7e:0b:12:be:2d:35:52:54:b0:29:10:e0:b9:95:36:94:37:
ec:14:47:89:b2:ed:97:ff:c8:87:84:c2:56:22:95:b1:0b:20:
92:38:08:dd:22:9d:e2:6f:df:be:e4:8a:74:00:17:02:81:fe:
b2:a7:26:8a:17:5d:f9:0e:15:50:47:99:66:a0:a2:77:cf:42:
e9:fb:13:93:73:32:0e:a6:13:8a:35:d2:dd:30:5c:46:38:d3:
1e:65:75:be:e2:1c:5d:7b:31:56:23:88:78:6e:06:fa:3f:59:
ea:a3:f9:7c:f4:ee:d7:2c:32:02:f2:d1:28:84:2b:f4:30:42:
0d:51:b9:49:43:16:cc:a0:1c:c4:0d:7b:24:96:79:ee:82:5f:
2a:1b:20:db:b1:da:dd:21:8e:24:f2:d5:1c:11:2c:9f:95:f7:
c3:5f:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:52:58 2026 by rpki-client