Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: P/pFHE9kOh7Odihng7jXPKPIwbzJ5uG+DVE/9WPpu8k=
Subject key identifier: A5:14:B9:DD:60:5F:46:FD:57:D6:75:5A:D6:16:34:25:24:C6:D1:38
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019F93246049A91A61E2594B4E1A20FD0692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0881
Signing time: Fri 24 Jul 2026 08:01:02 +0000
Manifest this update: Fri 24 Jul 2026 08:01:02 +0000
Manifest next update: Sat 25 Jul 2026 08:01:02 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: sxrZ/EybVURlb9qU4Wrv5SkyZ3jH0C/Xl4BJmD3wezk=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:60:49:a9:1a:61:e2:59:4b:4e:1a:20:fd:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Jul 24 08:01:02 2026 GMT
Not After : Jul 25 08:01:02 2026 GMT
Subject: CN=a514b9dd605f46fd57d6755ad616342524c6d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:53:2c:59:2f:2f:a7:31:09:10:00:68:c4:
97:54:71:86:ed:e4:f6:b5:e1:3c:87:66:47:4a:d7:
c0:00:d3:53:69:5d:61:15:96:fd:9e:1b:6d:a1:ac:
af:e7:71:27:4d:db:4b:79:67:88:b0:c3:2e:a0:e8:
69:f2:15:9f:1e:6f:7b:1e:b4:2d:1c:b1:58:37:9f:
4b:54:95:aa:c9:bc:13:60:72:67:c1:87:3c:7c:b6:
eb:60:32:36:aa:ec:19:7b:09:2f:55:c9:fb:a3:f9:
2d:2d:3d:ea:75:39:48:c8:54:bc:fe:fd:07:56:3f:
89:38:c9:eb:ed:b4:86:bc:d1:ae:69:cf:6a:b2:94:
81:15:6b:23:a4:9f:23:07:60:1f:8c:35:60:e6:14:
c4:d4:76:6e:f4:fe:b0:ab:7d:9f:a4:a2:7a:bf:3f:
57:ef:9b:3d:ea:36:99:d2:43:95:1e:70:6f:38:e0:
05:04:07:95:c3:f2:e1:9a:3d:c6:c0:85:2f:e2:93:
d5:81:23:30:4a:45:89:2a:9c:10:69:b4:b7:4c:ec:
1f:41:6a:37:03:59:66:26:19:d5:b1:0e:c5:15:49:
fe:be:fe:43:5b:63:d2:b3:3a:c2:62:9d:f0:92:a2:
06:7b:b1:d6:5b:73:c3:4e:b4:63:ed:50:47:1d:06:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:14:B9:DD:60:5F:46:FD:57:D6:75:5A:D6:16:34:25:24:C6:D1:38
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a5:6c:a0:85:9a:44:97:72:9f:01:ea:63:76:56:2a:15:16:
03:d3:84:43:5c:f3:aa:66:eb:2e:56:9a:1d:13:6b:42:99:63:
78:05:d7:ed:6e:85:aa:2c:cd:e4:65:06:7b:f1:0e:30:4d:b8:
46:41:8f:3f:26:b8:90:ef:61:d3:d4:26:f1:1a:f0:a5:53:c8:
91:74:52:cb:40:e4:26:85:20:a0:f7:bc:d3:8c:43:61:6a:28:
1f:5e:29:5c:23:53:63:6f:ca:04:2c:e3:21:20:33:ae:98:a4:
eb:21:11:87:45:8f:4d:2c:a7:61:ec:1d:d7:97:f2:93:b1:f3:
c9:78:24:4d:d2:9f:31:9f:28:cc:cf:e8:c8:a5:bb:fc:a6:21:
9c:5f:76:23:01:55:ab:12:12:ff:af:98:6d:a0:78:c3:8c:ec:
11:fa:24:12:2e:ca:ea:dc:ab:68:d0:1c:5b:bc:9c:17:17:e5:
0c:13:4c:7f:ec:93:4a:f5:3d:bb:d4:93:8c:3d:cf:9d:bf:7a:
16:30:b3:eb:86:ec:0f:aa:1d:27:a9:c1:48:77:11:4c:45:12:
6f:36:d5:2a:46:6c:22:d6:cc:c2:5a:06:cd:d0:d2:33:74:b7:
84:45:d7:f3:34:57:7f:69:3d:d1:f3:a0:8c:c4:47:bd:10:7d:
c3:5c:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:15 2026 by rpki-client