Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: nCoOG/LrJGdCQchHx1FS+XdWc+Lj8Lv9BK1VbUSW0M4=
Subject key identifier: F9:BA:F2:AA:58:B0:33:CB:33:37:56:5B:58:37:EB:FC:61:9D:5D:AB
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019E1C7DBD61FD4C6813717773DDF5A69A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 07BF
Signing time: Tue 12 May 2026 14:01:02 +0000
Manifest this update: Tue 12 May 2026 14:01:02 +0000
Manifest next update: Wed 13 May 2026 14:01:02 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: LfCEsrFbMFWBZpTbqgFJU3d4cAWdmIci/CQDkDetg+k=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:bd:61:fd:4c:68:13:71:77:73:dd:f5:a6:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: May 12 14:01:02 2026 GMT
Not After : May 13 14:01:02 2026 GMT
Subject: CN=f9baf2aa58b033cb3337565b5837ebfc619d5dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:ed:2c:8a:d0:8d:87:d7:3e:17:9d:a5:a9:
28:7c:bc:c1:f9:bf:8a:f4:df:db:c0:be:fd:f6:63:
08:42:8a:ba:bd:d5:21:1f:62:4f:bd:8d:64:d1:77:
5e:8d:33:66:e8:61:a1:da:b7:35:33:e9:b7:82:38:
5d:03:96:f7:5a:6b:c6:3f:18:66:6e:c5:2b:08:ff:
ee:a3:a5:00:c5:30:ef:06:5a:a5:4c:89:6b:02:78:
33:04:8d:a0:03:f2:42:63:a7:5a:6e:e9:38:c7:41:
8c:1d:e3:96:37:85:71:8e:fe:c7:71:4b:e1:72:c7:
c1:87:ee:b2:66:dc:a3:c8:56:38:c8:ea:ca:57:60:
4e:7f:08:5a:52:69:9c:f9:2c:cd:01:60:84:34:0f:
d2:8f:12:da:be:6c:e5:c0:8e:4d:6d:3e:d1:fd:1d:
5d:2f:a2:cf:d4:9a:4b:79:2f:2f:90:b4:bc:ab:4d:
3e:e5:09:6f:8a:1f:27:8d:20:e7:83:59:78:0a:60:
02:2d:c6:7f:be:95:94:e7:4c:5d:9d:9c:88:58:17:
47:00:f7:a4:5d:9e:21:f9:56:a5:ce:84:c1:ec:72:
d0:30:58:74:7a:1d:94:9b:c9:16:47:68:5f:9b:78:
4b:80:dd:9f:2d:20:e5:51:79:9c:66:af:57:2a:d8:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:F2:AA:58:B0:33:CB:33:37:56:5B:58:37:EB:FC:61:9D:5D:AB
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3b:ad:f9:05:35:05:a8:6b:a8:c7:f5:10:6b:a9:18:f9:19:
42:c3:bf:ce:7a:5c:a6:23:15:9f:fa:5f:ff:50:fc:e2:cb:a3:
bc:32:b7:16:1d:07:ed:4e:64:d0:ad:99:cb:a4:ae:cd:de:77:
30:61:08:bb:63:12:67:c4:9f:47:3a:1d:b8:6e:8e:4c:49:0d:
7d:8c:bc:d3:e3:5b:3a:5c:81:05:18:b9:61:35:88:c2:7d:c9:
3e:39:5a:8b:b0:ec:84:5f:ba:2f:72:fb:e0:47:9a:18:ac:d3:
7b:74:50:7b:bc:33:87:5f:42:45:d7:4c:b0:0b:bf:d3:ee:6a:
6b:32:72:b0:95:1c:f5:ed:3f:8b:78:45:08:c7:8b:90:f0:c7:
33:c5:64:b0:4d:92:0f:49:8b:f8:05:b8:a7:c9:b8:e9:4e:33:
da:c2:4b:8a:43:85:07:c6:86:2d:b5:81:a5:3c:e0:e9:06:9b:
60:03:aa:4c:70:4a:be:14:18:8d:ee:aa:b0:cb:6f:3e:3a:57:
d6:9e:8c:bb:eb:60:5c:d6:d4:c7:51:a1:18:be:b0:b9:66:cc:
82:1d:92:e1:b8:df:9b:11:c1:0d:54:aa:07:47:3b:cd:fa:39:
20:ca:88:1b:d3:13:03:f0:a6:34:b6:95:94:ef:30:80:5d:e4:
5f:24:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:45 2026 by rpki-client