Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: Ut/pgtBvzfFSJctmx8MDNLvMJPWFy7K6PXFltJ1dIW0=
Subject key identifier: 0A:C4:9C:FC:DE:9D:56:F2:CE:AC:7F:47:45:E7:93:15:D6:38:99:35
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019CA90E866470E37A8EBE629F2F53BB3FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0FDE
Signing time: Sun 01 Mar 2026 11:00:27 +0000
Manifest this update: Sun 01 Mar 2026 11:00:27 +0000
Manifest next update: Mon 02 Mar 2026 11:00:27 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: IuJDj8Z3Jkq3sUldeRjhArpirU6F/MC5aplVja3FxqA=)
2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:86:64:70:e3:7a:8e:be:62:9f:2f:53:bb:3f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Mar 1 11:00:27 2026 GMT
Not After : Mar 2 11:00:27 2026 GMT
Subject: CN=0ac49cfcde9d56f2ceac7f4745e79315d6389935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:1a:db:c4:cd:e8:d6:73:5c:e8:55:45:ac:
91:3e:55:6f:60:c4:af:8f:fe:3b:4e:ca:a0:87:8f:
77:ea:d0:02:0e:8f:8f:2f:21:27:62:40:7b:7e:39:
5b:4e:11:b7:cb:e7:2d:af:89:db:4b:ee:09:d2:f8:
35:b3:84:eb:44:85:e1:dc:50:8e:22:df:58:cd:0a:
ed:e8:50:87:79:56:77:3c:3b:72:85:85:41:d3:41:
a5:71:b5:cb:06:e2:a5:e0:20:88:13:21:07:fd:c5:
5b:39:c3:3d:24:5c:88:90:02:53:55:70:e0:b6:db:
74:c7:b4:4b:28:31:9a:b0:62:28:35:d8:f7:52:fa:
97:f7:83:17:24:32:87:71:b8:42:b2:5e:b1:7c:54:
2a:a0:39:ed:52:55:c2:8d:40:db:9e:d7:96:45:49:
ba:3a:09:52:2c:6a:d4:3d:4c:48:a4:02:01:a5:8d:
77:9e:ee:16:96:b0:76:29:58:8d:8f:70:d8:02:ec:
35:f3:b4:91:50:a1:df:65:ec:ed:a2:1f:c3:08:ed:
e3:57:88:ca:64:42:c9:1a:23:81:4d:2e:7a:3a:bf:
a1:2a:5a:f4:af:3c:f4:06:5e:7f:30:62:f1:85:77:
e7:b7:c6:71:f3:6a:cc:f5:49:9e:6f:3f:1d:e3:d6:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:9C:FC:DE:9D:56:F2:CE:AC:7F:47:45:E7:93:15:D6:38:99:35
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a3:7e:40:82:a1:dc:9e:00:80:a0:e3:50:e3:44:cd:74:32:
22:be:00:46:32:06:12:c3:98:b5:6a:e8:2d:79:6b:22:c3:51:
33:fe:e8:69:96:37:e8:81:3b:ca:88:7e:65:9a:20:16:24:f3:
14:fb:ce:d9:8e:62:b4:53:36:77:c1:10:b0:b7:0f:01:9f:0e:
f3:ac:ae:8d:08:7a:aa:35:d0:00:a4:45:98:d8:a8:30:23:44:
dd:8d:ea:df:d4:a0:fa:5d:dc:53:7d:0b:07:1a:c4:ad:33:d9:
1d:dc:00:30:3f:a3:88:6b:6f:e4:97:4d:79:2e:2a:63:41:fc:
6d:2e:00:06:c9:fe:18:41:43:aa:d8:3a:ae:8c:2e:a5:53:cc:
7a:b7:94:3f:7a:4a:41:59:83:f7:7f:b5:4f:b4:df:a1:3a:c9:
05:0f:14:a3:75:6a:33:04:ee:49:6d:30:f0:f5:3d:03:ea:b9:
d0:66:18:35:40:af:9a:3e:55:42:ce:d0:ea:83:04:c7:8c:63:
b3:a2:88:60:5f:61:71:d0:80:60:f7:40:93:68:ba:69:f7:cd:
c0:a4:1d:f2:52:1f:c9:cd:db:19:47:ff:ad:08:cd:57:9f:30:
7a:48:90:e7:6f:3e:69:f0:b0:f1:0c:91:34:2f:20:85:00:3a:
ec:75:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:29 2026 by rpki-client