Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: uAsesMvm2wHoLaqvSkBNY5opiMcHZx4/YcFK+5j00wc=
Subject key identifier: A7:45:FB:AD:1D:E7:C1:77:D4:F4:C0:D1:15:20:75:F7:12:A1:C1:CF
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 019D284D89D7C9B0FB74631FAD87A7A02134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0F37
Signing time: Thu 26 Mar 2026 04:01:03 +0000
Manifest this update: Thu 26 Mar 2026 04:01:03 +0000
Manifest next update: Fri 27 Mar 2026 04:01:03 +0000
Files and hashes: 1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
2: TcH4GIuktxSUfHtquYZnE0nBhtE.roa (hash: rpQl9MUfMf8qQcoJFxTK9nJpUXGjE7ncDisSQXNZN4E=)
3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: TnGfbgG/g6eSNHbo2ubPLWGHUvk/nGDemhUeAfd4vSY=)
4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:89:d7:c9:b0:fb:74:63:1f:ad:87:a7:a0:21:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Mar 26 04:01:03 2026 GMT
Not After : Mar 27 04:01:03 2026 GMT
Subject: CN=a745fbad1de7c177d4f4c0d1152075f712a1c1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:e4:82:8e:94:28:8a:98:5b:3b:72:c9:84:
f1:e9:4a:2b:df:2d:37:c6:7d:e2:e6:68:d8:80:e2:
48:f4:71:2c:e7:e3:90:55:24:6b:4c:c5:a7:f7:d6:
f5:f4:67:c2:da:d3:44:01:6c:d2:f1:96:74:d5:0f:
47:70:e4:4f:97:ca:a6:1f:1f:9b:ac:0f:7e:20:7b:
40:1d:a6:44:92:eb:34:9f:45:00:9c:8d:f7:27:59:
35:7e:15:71:89:92:76:e0:a8:0d:67:96:50:42:16:
e5:c0:58:dc:a3:1b:fc:08:e6:63:08:f8:56:12:48:
c3:f3:d0:f1:36:73:d7:55:cc:d8:15:4b:f7:bb:08:
8c:20:57:d7:7c:38:d8:53:eb:d0:39:58:40:63:c2:
d4:93:b5:ac:e0:dc:bd:fe:4e:85:04:56:21:ed:3c:
55:c9:f7:23:4f:06:4b:7c:9b:3c:74:6b:fe:9b:1f:
23:e7:69:f2:75:a0:f7:1b:73:36:fd:5a:61:5f:bf:
88:2d:a5:81:5a:97:ec:8e:38:31:21:c9:28:69:15:
f4:8c:6a:e7:2e:99:62:66:f1:d3:7c:18:94:71:b7:
b8:c9:c5:1e:91:4d:ab:af:df:7e:a2:5f:ed:7e:3f:
5f:cf:c8:13:62:a9:f7:3d:b2:fa:fe:cd:82:bb:bc:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:FB:AD:1D:E7:C1:77:D4:F4:C0:D1:15:20:75:F7:12:A1:C1:CF
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:37:dc:46:41:28:1e:67:e0:46:17:8a:9b:2a:1e:06:ed:
0e:09:4d:54:7e:14:a6:ef:31:cd:74:41:fd:ca:c1:ac:99:7a:
eb:19:7c:4e:c0:20:36:4b:5c:44:fd:4b:70:d5:92:c6:b4:1b:
ee:a5:a8:58:92:b4:e3:c1:64:64:ee:1a:27:44:68:fc:ac:4d:
b8:69:0a:08:81:69:a9:b3:03:c0:ea:af:58:24:fb:77:b6:3d:
aa:22:b6:8e:ef:6d:d4:5d:da:3d:ea:74:62:31:de:da:b0:1e:
5d:70:00:5d:9b:85:a7:6f:5d:2e:59:98:21:6b:5d:9d:e4:69:
2c:fb:aa:8f:67:fe:05:f8:20:6d:bc:9d:2e:46:13:02:bf:17:
3b:3a:cb:e3:f9:75:53:01:ab:9d:33:43:fe:f3:fd:e2:53:1a:
5a:51:b0:77:ea:83:79:2e:2b:7f:25:97:31:e7:da:b6:c7:14:
a8:1c:77:1e:85:0c:cf:98:6a:99:7e:8f:d3:c9:ef:2b:c7:b0:
b8:dd:a1:81:e0:68:ae:b1:eb:52:f1:ef:9d:9d:6c:5d:5c:06:
c3:37:a7:41:d4:36:75:5d:5c:00:93:09:ac:fa:4e:80:3c:70:
e9:06:01:93:de:f8:3c:1e:42:ef:46:8c:e9:4f:13:47:04:f1:
50:bf:d1:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYnXybD7dGMfrYenoCE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl
YmM3MGQwHhcNMjYwMzI2MDQwMTAzWhcNMjYwMzI3MDQwMTAzWjAzMTEwLwYDVQQD
EyhhNzQ1ZmJhZDFkZTdjMTc3ZDRmNGMwZDExNTIwNzVmNzEyYTFjMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtizkgo6UKIqYWztyyYTx6Uor3y03
xn3i5mjYgOJI9HEs5+OQVSRrTMWn99b19GfC2tNEAWzS8ZZ01Q9HcORPl8qmHx+b
rA9+IHtAHaZEkus0n0UAnI33J1k1fhVxiZJ24KgNZ5ZQQhblwFjcoxv8COZjCPhW
EkjD89DxNnPXVczYFUv3uwiMIFfXfDjYU+vQOVhAY8LUk7Ws4Ny9/k6FBFYh7TxV
yfcjTwZLfJs8dGv+mx8j52nydaD3G3M2/VphX7+ILaWBWpfsjjgxIckoaRX0jGrn
LpliZvHTfBiUcbe4ycUekU2rr99+ol/tfj9fz8gTYqn3PbL6/s2Cu7z6ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdF+60d58F31PTA0RUgdfcSocHPMB8GA1UdIwQY
MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt
MDg3M2UzOTk0ZDBlLzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl
LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoQ33EZB
KB5n4EYXipsqHgbtDglNVH4Upu8xzXRB/crBrJl66xl8TsAgNktcRP1LcNWSxrQb
7qWoWJK048FkZO4aJ0Ro/KxNuGkKCIFpqbMDwOqvWCT7d7Y9qiK2ju9t1F3aPep0
YjHe2rAeXXAAXZuFp29dLlmYIWtdneRpLPuqj2f+BfggbbydLkYTAr8XOzrL4/l1
UwGrnTND/vP94lMaWlGwd+qDeS4rfyWXMefatscUqBx3HoUMz5hqmX6P08nvK8ew
uN2hgeBorrHrUvHvnZ1sXVwGwzenQdQ2dV1cAJMJrPpOgDxw6QYBk974PB5C70aM
6U8TRwTxUL/RXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:12 2026 by rpki-client