Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: iGO6sDeXziJ/S1QIm72f+mWef4EPDbFQjJIUCGMZ4mk=
Subject key identifier: 2A:8C:FD:FF:96:95:C8:67:3B:CE:0A:A1:13:A8:8A:C6:D2:44:25:98
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019D2A725D98931CBB60B46C636EE15CCCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0F1B
Signing time: Thu 26 Mar 2026 14:00:31 +0000
Manifest this update: Thu 26 Mar 2026 14:00:31 +0000
Manifest next update: Fri 27 Mar 2026 14:00:31 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: GZ2bKfFhiyFaLAxy7RGyh6gIRCSxPLoyA9yBiTfkf0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5d:98:93:1c:bb:60:b4:6c:63:6e:e1:5c:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Mar 26 14:00:31 2026 GMT
Not After : Mar 27 14:00:31 2026 GMT
Subject: CN=2a8cfdff9695c8673bce0aa113a88ac6d2442598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:b4:a7:75:9f:f4:95:23:32:11:ca:5b:84:
d0:93:40:f4:a3:5c:ef:63:5c:04:4e:59:ea:c4:d4:
5e:01:c5:b1:3c:eb:f8:7a:8e:3a:bf:f7:75:8b:59:
4f:3f:ba:a6:0f:f5:2e:14:52:08:fb:43:43:f4:b4:
a0:10:80:f1:23:85:5e:2a:16:02:8a:3f:25:3d:58:
b1:80:02:24:43:56:3c:cc:f4:a3:93:35:f9:e9:e8:
cc:4d:7b:3d:99:05:bb:82:f0:19:62:2e:55:d0:72:
5d:74:6d:a8:90:2f:f8:1d:6b:5d:4c:4f:c5:81:41:
2d:cd:21:71:a3:69:52:3f:6c:70:98:00:0f:5d:39:
e5:be:d1:33:77:59:ac:01:59:6a:1a:55:87:68:b5:
dc:fd:54:a9:23:6b:09:86:a4:46:85:44:1d:74:9d:
2d:30:2e:ba:18:9c:e7:30:7d:db:9b:f6:bf:24:67:
40:02:f7:88:ae:fc:dc:ab:9d:ab:65:c1:71:cb:a9:
55:93:94:d6:21:27:4a:0a:1a:3b:a1:3c:c4:3a:0a:
d3:c3:ef:50:6f:dc:68:0b:1d:8b:2f:7f:c0:9e:c3:
02:c7:2e:db:ea:01:7c:58:cd:26:dd:8e:14:8c:a8:
6e:84:d5:6b:d3:1e:38:4e:2b:af:18:a1:c4:25:dc:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8C:FD:FF:96:95:C8:67:3B:CE:0A:A1:13:A8:8A:C6:D2:44:25:98
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:6d:a0:29:94:d6:9a:f1:eb:ac:db:c9:b0:ef:1c:8c:5c:
ea:fe:58:ce:d9:64:7d:51:78:cd:b3:a6:ad:f4:86:fc:b0:94:
23:f1:b3:42:65:2c:50:3d:6c:34:fa:f0:28:d8:7a:0e:93:22:
a7:35:30:bb:94:3f:f2:93:e4:d2:1c:bb:42:97:b2:4f:1e:37:
e5:b5:93:68:1e:52:76:e3:ff:99:3c:ac:41:f4:14:a2:fb:79:
c4:c9:c8:45:68:fc:fa:01:5f:cb:cc:73:de:8b:55:e5:ff:fb:
e7:30:06:7f:fa:07:dc:21:8d:5e:48:03:08:43:4a:c6:f3:25:
9e:7a:7e:5f:d0:9a:30:f1:14:b9:18:1c:17:5a:2b:bd:23:31:
58:50:e7:f2:bc:bf:d0:86:67:5d:30:b0:d5:91:96:37:1c:08:
31:2c:98:0d:62:b8:a3:3d:9b:ed:ec:10:20:4c:8e:74:13:04:
7d:cd:70:71:b9:d0:b0:9a:f1:9e:73:77:b1:1d:c3:44:9c:dc:
1e:bd:f2:c6:e2:eb:de:33:43:fc:d1:ab:f9:2f:31:1d:7f:28:
c1:b1:ca:40:40:c2:ab:a1:6d:b4:3b:6c:13:e5:ef:b9:1e:73:
2f:8e:4f:f8:df:e5:c3:85:e1:8c:a9:87:e5:a4:0a:04:a9:20:
27:bd:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:57 2026 by rpki-client