Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: /Pt+x47+Cp717hicuuFdLnUqVIECJDXmqh8ElQGzxTY=
Subject key identifier: 8D:CC:47:49:DE:AB:7C:C6:73:60:D9:32:38:70:31:A7:B4:B8:89:CF
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019D29293FB6348EE7102616C4418E663025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0741
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: YsgH9nWas3tnY3c6HQ+Osjpb8BeEF+jjaNoz7z8FAvs=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3f:b6:34:8e:e7:10:26:16:c4:41:8e:66:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=8dcc4749deab7cc67360d932387031a7b4b889cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:43:c7:bc:13:6a:43:5c:43:40:4c:dd:a0:
cf:da:41:f6:6b:4b:71:f6:d9:04:ae:39:90:ba:6f:
52:09:25:e5:50:ce:de:1f:e9:04:2e:12:ec:86:75:
0a:2c:f0:40:37:8a:fb:36:88:84:66:f8:68:fc:8f:
d4:4c:08:73:e3:83:84:3a:cd:f9:a5:59:6e:30:57:
34:8a:71:fa:1a:73:bc:0d:ad:31:01:c8:20:c2:61:
91:11:ab:37:a7:f8:d8:7d:ae:c4:8b:0a:fc:8f:3b:
fd:9e:16:52:66:5b:0d:7e:3f:bf:16:be:b5:8e:1b:
6e:6b:e6:0f:b2:70:8b:bb:28:76:2a:8b:25:22:ad:
1e:03:a7:1c:aa:b7:7a:32:4f:04:4e:ab:ed:c2:84:
44:dc:34:ec:aa:b3:9a:82:1c:71:a3:cb:e9:11:eb:
c5:90:65:02:e5:c0:78:04:10:e4:4d:d8:f1:f3:ee:
6b:93:6c:0f:8f:f3:b1:cd:d1:14:fc:ce:07:d9:63:
d3:57:51:04:ee:f1:20:54:78:74:63:d8:04:fa:5d:
66:c9:33:75:03:04:6f:31:6b:c3:c6:f0:db:d8:68:
49:f9:93:f0:a6:2a:c5:f4:b9:eb:f1:29:38:91:79:
6d:65:47:1d:db:a0:b4:63:71:a0:1b:dc:46:72:06:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:47:49:DE:AB:7C:C6:73:60:D9:32:38:70:31:A7:B4:B8:89:CF
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:05:ec:3e:00:cf:95:e4:0a:b5:a0:7b:1a:7d:62:86:a5:
46:62:49:2c:b5:ee:96:65:de:0a:e0:bc:32:94:75:27:7a:f3:
b0:f7:38:8a:0f:1d:8b:d6:3a:4e:a3:3d:01:69:32:95:be:53:
d7:ad:cc:1b:3b:92:bc:e5:b0:47:6b:fd:e5:d7:01:a7:48:f5:
79:b7:05:2a:52:52:39:34:22:70:08:47:60:c1:64:f1:ba:11:
e7:6e:fe:e6:1a:f7:64:6e:f7:36:b8:e1:eb:b8:f1:96:de:60:
5c:dc:21:0c:c3:dc:fc:82:ef:80:cf:8f:c1:3e:e6:b1:1f:62:
9d:50:72:3b:5c:32:a9:b3:49:42:1e:52:c5:81:3c:d2:72:03:
3f:ee:34:d2:78:da:a2:0c:7c:94:d6:36:b1:17:f9:77:4a:a8:
c1:03:f7:f7:99:97:d4:c2:cf:4d:3f:c9:12:49:52:1f:8e:ab:
6a:cb:68:39:c0:25:dc:47:53:c7:8b:da:be:37:03:c4:c0:49:
44:4a:59:e1:7a:c6:10:4e:6f:1a:de:7f:77:d6:01:ee:ea:f2:
ca:5b:ee:56:43:6e:df:75:38:2c:90:e6:d2:2c:0a:36:99:2d:
65:21:f6:6b:e8:18:9e:08:99:76:0c:fe:af:30:85:53:7b:ad:
5d:0d:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:43:48 2026 by rpki-client