Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: FDKAg93NsqK8qN5Qu2Q6QWIQOoRFK4W3jlagucpvkoc=
Subject key identifier: 9F:4B:84:C1:45:E9:8A:9A:4E:B3:77:C5:12:76:9F:8E:E5:3D:EE:8E
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019D9C6392B12669CD12B47D0F009B1DBC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0F56
Signing time: Fri 17 Apr 2026 17:01:04 +0000
Manifest this update: Fri 17 Apr 2026 17:01:04 +0000
Manifest next update: Sat 18 Apr 2026 17:01:04 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: 7Hk1B4CQSTxaKHMUlQxGJTYmK4+AG6W1xhoRqG2mWRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:92:b1:26:69:cd:12:b4:7d:0f:00:9b:1d:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Apr 17 17:01:04 2026 GMT
Not After : Apr 18 17:01:04 2026 GMT
Subject: CN=9f4b84c145e98a9a4eb377c512769f8ee53dee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:6a:15:72:bd:a2:92:71:c7:f6:b0:e4:9a:
90:2f:5f:d9:b6:c0:40:cd:b2:6b:52:3c:9a:e0:3d:
41:84:e9:01:3e:90:12:dd:0e:a1:7a:da:29:95:6a:
f9:42:d0:ac:2a:52:07:17:0a:0a:b9:a3:62:aa:f8:
e1:e7:57:44:59:7d:9a:4c:62:89:0c:da:e8:54:b6:
d2:66:d9:b0:86:43:01:9d:62:18:11:3e:3e:1c:03:
d2:63:0d:b8:aa:6a:60:a9:c0:95:64:0a:ab:18:fb:
81:44:f7:1a:44:d7:a4:b2:a7:2b:3a:8e:61:6d:2c:
b0:1b:58:77:c0:a1:f5:e3:06:33:87:48:06:78:f1:
7e:32:bb:9a:ca:44:ab:96:07:06:f6:f6:f4:6f:14:
d8:14:e5:2f:d8:05:f8:0f:1e:c6:c9:e8:d5:71:ab:
a6:0b:41:0b:b9:33:48:f6:69:22:b4:94:50:b8:c7:
74:2a:d9:5e:f6:dd:e7:81:ec:bd:c9:12:da:a0:f8:
45:b3:bb:8f:25:e1:e4:13:11:2b:49:48:42:c3:85:
fd:c3:17:c4:1f:0c:2a:2d:0c:ae:03:94:c6:79:74:
b0:4d:11:49:cd:5a:0d:09:41:29:6d:51:d0:74:62:
0d:56:3b:9e:88:e7:b8:03:36:ea:3b:0b:df:e1:e7:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:84:C1:45:E9:8A:9A:4E:B3:77:C5:12:76:9F:8E:E5:3D:EE:8E
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:32:ba:7a:b3:e2:f4:46:25:cc:e1:87:71:c6:70:93:98:77:
70:fc:ed:bd:74:26:ae:78:09:4e:ac:23:30:5f:2e:61:25:3d:
d2:a4:a5:e3:e0:bc:6e:97:9e:5c:f0:27:4e:59:ee:f6:06:39:
d1:b9:53:3b:c2:c6:22:5a:26:76:cf:46:a7:67:cc:95:bd:54:
c6:e7:08:59:17:3e:07:6a:10:56:bd:b0:5e:5b:19:e2:39:9c:
68:98:50:21:db:91:67:f6:96:de:a8:e7:f2:bf:fa:d2:23:8f:
b6:00:f0:ca:db:ad:0f:52:d6:98:0b:24:7d:9a:28:97:94:78:
15:9f:13:c2:f2:d2:f9:90:de:d2:ca:4f:07:70:e1:c4:fd:d5:
b8:0e:cf:eb:55:33:04:4e:48:5f:c6:4b:ca:e5:aa:19:a5:fa:
70:8d:04:dc:0a:d4:b2:7a:d9:53:cf:d6:5e:08:43:da:ce:ca:
bd:94:85:55:b9:74:2f:69:5e:de:e5:39:e2:e7:94:fb:67:6e:
a5:f1:42:05:bb:b8:22:8e:59:8d:d2:41:56:25:48:12:d2:0e:
29:31:3f:3b:5a:47:64:da:ec:49:a4:a6:11:93:32:96:9b:32:
7a:c6:43:43:0b:cb:59:09:e0:71:71:dc:52:c7:9c:ae:b7:ad:
e7:cd:0e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY5KxJmnNErR9DwCbHbx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjJiYmYxNWRlMzQ0YWNkYjVmNzgwMDQ1MGYyYzgyZDc5
N2Q3OTgwHhcNMjYwNDE3MTcwMTA0WhcNMjYwNDE4MTcwMTA0WjAzMTEwLwYDVQQD
Eyg5ZjRiODRjMTQ1ZTk4YTlhNGViMzc3YzUxMjc2OWY4ZWU1M2RlZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBtqFXK9opJxx/aw5JqQL1/ZtsBA
zbJrUjya4D1BhOkBPpAS3Q6hetoplWr5QtCsKlIHFwoKuaNiqvjh51dEWX2aTGKJ
DNroVLbSZtmwhkMBnWIYET4+HAPSYw24qmpgqcCVZAqrGPuBRPcaRNeksqcrOo5h
bSywG1h3wKH14wYzh0gGePF+MruaykSrlgcG9vb0bxTYFOUv2AX4Dx7GyejVcaum
C0ELuTNI9mkitJRQuMd0Ktle9t3ngey9yRLaoPhFs7uPJeHkExErSUhCw4X9wxfE
HwwqLQyuA5TGeXSwTRFJzVoNCUEpbVHQdGINVjueiOe4AzbqOwvf4eekYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9LhMFF6YqaTrN3xRJ2n47lPe6OMB8GA1UdIwQY
MBaAFN9iu/Fd40Ss2194AEUPLILXl9eYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMt
YTBmMjU5MWRkMmJkLzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMtYTBmMjU5MWRkMmJk
LzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTK6erPi
9EYlzOGHccZwk5h3cPztvXQmrngJTqwjMF8uYSU90qSl4+C8bpeeXPAnTlnu9gY5
0blTO8LGIlomds9Gp2fMlb1UxucIWRc+B2oQVr2wXlsZ4jmcaJhQIduRZ/aW3qjn
8r/60iOPtgDwytutD1LWmAskfZool5R4FZ8TwvLS+ZDe0spPB3DhxP3VuA7P61Uz
BE5IX8ZLyuWqGaX6cI0E3ArUsnrZU8/WXghD2s7KvZSFVbl0L2le3uU54ueU+2du
pfFCBbu4Io5ZjdJBViVIEtIOKTE/O1pHZNrsSaSmEZMylpsyesZDQwvLWQngcXHc
Usecrret580OLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:00 2026 by rpki-client