Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier: BIwzHNn0pO4xr0aiGi7boHjXhCsimYpScWgIppgZkK0=
Subject key identifier: AC:60:CB:DB:37:5C:20:A6:31:99:E8:78:1E:89:51:D4:69:7B:C1:19
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 01A0DD97D54707891F1F66765059D87A520E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number: 1121
Signing time: Sat 26 Sep 2026 12:01:50 +0000
Manifest this update: Sat 26 Sep 2026 12:01:50 +0000
Manifest next update: Sun 27 Sep 2026 12:01:50 +0000
Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: buKwy6kUGOPazmKp7Ems2S3wQ06uH4nPos/24dKOGxg=)
2: 3N8RjBOaHqysfsXcuS4moMiqHcA.roa (hash: iQaQoggeO3tLMHb/V/COJC4hr6BU8lu4S0DICLg++wE=)
3: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (hash: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM=)
4: W_FOHMjyvQTaAri5A_zDlx2DY2k.roa (hash: njRnMCxu5gn2zsVJDrc4Nj/3Yt4VdpnpXJ0wh2X6tGk=)
5: fdth4-LheaAtkNOEJz6pHobfl_k.roa (hash: rTpg5aqyYW2RH+xhrSVpQRy6U3wJBueXqcjg7bGUFhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:d5:47:07:89:1f:1f:66:76:50:59:d8:7a:52:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Sep 26 12:01:50 2026 GMT
Not After : Sep 27 12:01:50 2026 GMT
Subject: CN=ac60cbdb375c20a63199e8781e8951d4697bc119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:61:2c:0e:ca:95:1d:6a:89:ef:fb:14:9c:
46:cd:2d:74:a1:54:38:f7:a2:fa:57:02:a1:41:09:
18:f5:26:1e:06:fb:54:45:04:f8:14:fc:3c:6c:93:
ec:72:5f:fd:85:98:28:83:4c:ae:77:f2:5a:a7:2d:
01:82:1b:cf:58:79:4d:67:79:dc:1d:5a:7a:1f:03:
d0:31:29:23:aa:b0:f1:6d:7d:1f:18:5a:4a:d8:be:
61:a8:60:3a:d5:8c:21:71:2d:f3:fc:f4:13:76:dc:
6d:03:cf:64:0d:d2:c9:52:4a:07:6d:cf:50:1c:35:
ad:8b:3e:25:9b:ce:b1:52:33:dd:01:b0:89:5e:06:
a3:10:e3:d6:0c:ae:ba:00:49:27:af:e6:b1:72:a3:
c4:55:a2:e2:54:c4:5d:e2:d2:e0:bf:ef:d6:39:08:
59:f1:2f:fa:19:8a:88:e2:88:b2:a0:27:40:e5:3a:
f6:ee:ba:33:42:92:9c:92:52:37:f0:10:83:6c:10:
73:fe:7d:16:7a:73:a5:eb:de:90:7f:72:a3:61:52:
60:0f:20:4d:33:35:db:25:e3:20:e0:3b:83:4c:98:
d6:c6:58:ce:a9:c2:68:ae:7f:70:e4:e6:4d:6f:25:
a5:00:6c:1d:36:a1:15:97:60:4a:76:3c:f3:5a:2f:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:CB:DB:37:5C:20:A6:31:99:E8:78:1E:89:51:D4:69:7B:C1:19
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:3d:94:d5:9f:89:a9:60:e7:f1:6e:31:3c:90:02:ba:52:
6d:40:37:45:bd:09:1b:d5:2f:51:fc:78:b3:07:a8:86:03:57:
77:53:a7:b5:0c:e3:96:e0:d9:2c:5a:bd:ca:05:22:dc:59:8c:
30:90:13:08:ca:13:94:bc:19:60:6b:64:2a:1d:3c:4c:eb:99:
cd:6f:9b:14:ed:c5:29:92:ab:ca:07:1b:ce:c3:f8:6d:83:35:
de:99:eb:b2:ff:07:68:98:10:1b:74:f3:2a:1d:af:06:7c:16:
ad:46:cf:2b:6d:9e:6c:95:0b:4e:42:67:35:e6:76:58:7e:cd:
95:da:d8:3a:0b:c0:41:64:d1:d3:9f:2d:43:dd:1f:bd:b1:d5:
f7:1e:73:3b:11:90:87:cd:ef:af:9c:20:c6:e7:83:44:e0:81:
1e:c1:66:4c:f7:ec:01:ab:6e:fe:3e:7f:3e:14:dd:19:ca:93:
1b:22:5d:c9:2e:ed:ab:40:7f:18:06:af:59:f9:0a:ec:28:35:
f6:46:d9:c0:f6:0e:af:00:a9:4f:37:34:a4:5e:42:10:93:b1:
fd:f8:33:57:c3:52:35:9a:78:e5:35:d9:50:7b:f7:a1:22:4e:
be:4e:93:cf:dc:0b:16:fd:2f:ae:5c:13:d8:7f:fb:89:cc:be:
26:7f:e5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl9VHB4kfH2Z2UFnYelIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjFhMjkyMjIzYWQ5YWViYzhhZDgyYzJhNTY0NzVmYmQ5
N2E4MzQwHhcNMjYwOTI2MTIwMTUwWhcNMjYwOTI3MTIwMTUwWjAzMTEwLwYDVQQD
EyhhYzYwY2JkYjM3NWMyMGE2MzE5OWU4NzgxZTg5NTFkNDY5N2JjMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNlhLA7KlR1qie/7FJxGzS10oVQ4
96L6VwKhQQkY9SYeBvtURQT4FPw8bJPscl/9hZgog0yud/Japy0BghvPWHlNZ3nc
HVp6HwPQMSkjqrDxbX0fGFpK2L5hqGA61YwhcS3z/PQTdtxtA89kDdLJUkoHbc9Q
HDWtiz4lm86xUjPdAbCJXgajEOPWDK66AEknr+axcqPEVaLiVMRd4tLgv+/WOQhZ
8S/6GYqI4oiyoCdA5Tr27rozQpKcklI38BCDbBBz/n0WenOl696Qf3KjYVJgDyBN
MzXbJeMg4DuDTJjWxljOqcJorn9w5OZNbyWlAGwdNqEVl2BKdjzzWi9YQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxgy9s3XCCmMZnoeB6JUdRpe8EZMB8GA1UdIwQY
MBaAFN9hopIiOtmuvIrYLCpWR1+9l6g0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYt
NDE0ODdmNGQ0MTcxLzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYtNDE0ODdmNGQ0MTcx
LzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeu09lNWf
ialg5/FuMTyQArpSbUA3Rb0JG9UvUfx4sweohgNXd1OntQzjluDZLFq9ygUi3FmM
MJATCMoTlLwZYGtkKh08TOuZzW+bFO3FKZKrygcbzsP4bYM13pnrsv8HaJgQG3Tz
Kh2vBnwWrUbPK22ebJULTkJnNeZ2WH7NldrYOgvAQWTR058tQ90fvbHV9x5zOxGQ
h83vr5wgxueDROCBHsFmTPfsAatu/j5/PhTdGcqTGyJdyS7tq0B/GAavWfkK7Cg1
9kbZwPYOrwCpTzc0pF5CEJOx/fgzV8NSNZp45TXZUHv3oSJOvk6Tz9wLFv0vrlwT
2H/7icy+Jn/lWg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:02:22 2026 by rpki-client