Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: fTOBOyev9VhH5hA3d1xlxEmQiJ78AhJwC5M4nZLhpJg=
Subject key identifier: E4:59:87:49:67:2B:1B:AD:01:AD:62:47:DB:E6:FF:BD:8E:75:61:58
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019F946E19216E8FAA1C54A8086525B45490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 105B
Signing time: Fri 24 Jul 2026 14:01:11 +0000
Manifest this update: Fri 24 Jul 2026 14:01:11 +0000
Manifest next update: Sat 25 Jul 2026 14:01:11 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: lIPYasjfIJSeGkBRox9SFtkDojourvrhbmGxX4K0DN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:19:21:6e:8f:aa:1c:54:a8:08:65:25:b4:54:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Jul 24 14:01:11 2026 GMT
Not After : Jul 25 14:01:11 2026 GMT
Subject: CN=e4598749672b1bad01ad6247dbe6ffbd8e756158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:c4:4d:c3:a0:fd:d4:86:48:c6:14:3c:ef:
ee:40:f7:9a:61:ec:78:a0:28:71:e1:b4:2f:7e:c6:
d2:27:c5:d8:1e:e2:c7:39:2f:e5:ea:2d:2d:cb:28:
a4:d3:7b:25:bc:a5:49:45:a8:d6:d8:ab:23:05:06:
2b:40:2c:dc:f2:d9:bc:d5:2f:7d:5b:0d:1a:37:c3:
3b:12:ef:4e:46:30:71:a5:d3:45:5c:12:ff:3d:12:
0e:49:b2:8a:cd:0e:a3:6c:2f:e5:63:b2:75:56:58:
cf:61:f8:c2:4c:21:e8:6f:25:85:ec:5f:9b:29:1e:
a2:e8:18:0a:33:f4:d2:ee:1e:27:ef:2c:bc:99:ca:
e1:b0:2a:76:ad:0e:e7:23:85:22:16:2d:0c:8f:f3:
e5:dc:9d:55:aa:e0:e8:8d:fb:79:64:aa:28:06:5c:
ec:c6:d8:14:a4:24:97:2f:20:79:9b:56:08:3d:c5:
78:0b:22:94:73:88:3b:90:a2:82:0b:55:6d:25:0a:
ed:56:5b:48:2c:74:fc:18:e8:ec:3d:40:67:a6:3e:
17:4c:c4:ed:c9:f9:16:49:4a:79:f8:a7:37:50:45:
03:47:ac:b0:99:3c:f1:0a:79:62:49:55:9d:63:de:
5a:e0:cc:dd:41:16:84:98:35:30:02:e2:42:a3:79:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:87:49:67:2B:1B:AD:01:AD:62:47:DB:E6:FF:BD:8E:75:61:58
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:bf:e4:99:91:9b:6a:e6:48:07:d2:6a:a2:0a:0c:60:30:
ba:57:13:e7:e5:6c:42:11:86:0a:ad:e1:71:59:3a:b3:93:bd:
f2:83:80:13:2e:cf:c2:7d:ad:c1:d3:a4:b9:9e:78:2d:5b:3a:
8b:73:9e:b1:95:77:6c:18:1f:f5:8c:98:28:b4:84:74:bf:c5:
ba:90:22:ff:29:be:d1:48:cc:b2:01:1e:8f:88:4b:52:56:c6:
d4:35:c3:3d:31:c4:e2:e8:22:49:47:26:57:21:70:6d:44:cc:
15:8e:e1:95:13:f9:f9:2b:1c:13:d2:5a:e3:93:3e:5c:72:42:
b6:f8:55:cf:e3:10:57:4e:4f:84:68:1c:1b:90:dd:9c:3c:9c:
40:f3:6d:34:8e:79:7a:81:4c:d4:31:87:d8:19:f0:29:e6:db:
16:86:da:b3:e5:99:44:64:70:f8:c5:42:59:a5:01:5a:76:0f:
ac:ba:04:4f:cc:c7:15:29:b7:94:69:19:f9:ef:c5:61:0b:31:
d2:f2:72:fe:1b:ba:5f:0a:f3:0c:c6:0a:a7:9f:e6:67:de:71:
44:ed:fb:2e:3c:82:dd:2f:5e:09:83:cf:d8:23:19:b4:7c:f0:
4f:08:ff:4a:ea:75:22:86:49:60:b5:19:5c:86:bd:c5:19:7f:
b5:3b:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:55:08 2026 by rpki-client