Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: 9li/cozokfiFZ7kTRs3Z+RXMakXpXboBY9n9en09E2c=
Subject key identifier: 36:FE:E5:5E:0A:C0:EB:C1:1D:98:56:42:AE:11:0C:65:29:3E:D4:63
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019E1FB5AAACBA080560D389054BF44793D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0F9A
Signing time: Wed 13 May 2026 05:00:59 +0000
Manifest this update: Wed 13 May 2026 05:00:59 +0000
Manifest next update: Thu 14 May 2026 05:00:59 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: 4Kmn5WEtYsOTd/UEiHLy5cEjq2+2qlh9oL8Qt58D9jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:aa:ac:ba:08:05:60:d3:89:05:4b:f4:47:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: May 13 05:00:59 2026 GMT
Not After : May 14 05:00:59 2026 GMT
Subject: CN=36fee55e0ac0ebc11d985642ae110c65293ed463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:50:d5:1b:6a:2e:45:bf:4c:0f:f2:82:91:
0b:3b:c6:94:2c:2e:49:28:92:be:fb:94:1f:df:d7:
5d:d1:fc:fd:ae:a1:94:96:65:2b:47:28:e2:75:3e:
a2:67:87:64:93:74:59:66:4c:0a:54:14:af:a7:7b:
4e:ba:49:46:c9:bd:65:16:18:47:ab:fb:fd:9a:12:
41:9d:ac:7c:39:9c:90:84:43:2a:07:04:5d:f2:bf:
34:57:50:92:d3:9a:6d:0c:eb:3d:a8:f2:4e:51:54:
3b:f1:8d:7d:03:45:8b:c2:f7:79:3d:52:b4:24:1b:
21:ce:39:6d:2a:f0:f6:b3:16:cd:40:7d:4c:d5:86:
d5:54:1d:5f:df:3b:c8:7c:7f:46:bb:d1:a7:b0:88:
92:a7:9d:26:45:ca:55:94:c7:f8:0d:71:ff:80:28:
61:0a:e4:9a:74:3d:57:71:16:65:4c:ba:a8:f5:c7:
ae:b4:91:25:e8:cf:9e:bd:ac:e9:1a:1f:c7:cc:9a:
06:52:a4:11:34:12:cc:ce:cd:18:84:02:0e:0e:33:
54:b6:37:aa:89:61:a3:c2:38:7e:13:3e:bf:c0:b7:
3d:47:1b:41:34:8c:28:4c:cf:f6:c7:c2:a2:67:16:
37:19:c1:f6:8f:0a:e3:f8:00:a4:e7:06:4b:2e:69:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:E5:5E:0A:C0:EB:C1:1D:98:56:42:AE:11:0C:65:29:3E:D4:63
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:69:93:a5:37:b7:9a:52:f5:75:32:c6:eb:0b:d2:af:a2:91:
aa:af:4b:2d:8b:83:65:02:11:a9:f1:f6:0d:25:08:fc:32:96:
96:62:a4:5f:7b:12:7f:2c:30:8f:3a:bc:d9:8b:2c:35:67:99:
e4:b1:d2:71:2c:73:26:ac:f9:85:08:ff:ed:5e:6a:14:60:49:
d9:d3:7f:bf:ce:a4:fd:31:34:4c:bf:2d:17:85:47:10:e2:b4:
1a:5f:77:dc:8d:a2:be:c2:65:70:f9:60:c1:32:89:f3:0a:07:
be:6a:62:35:52:6f:22:b5:0d:fc:80:ac:35:d9:91:2e:ae:9e:
a8:0f:59:94:65:44:e7:9b:c7:a3:3a:f8:78:35:83:ec:00:c9:
a0:1b:a7:02:45:13:3b:c3:9b:e0:0e:9e:74:b1:7e:5b:82:ab:
13:54:4e:05:fa:49:bd:4d:25:44:ad:ae:46:7e:ae:af:2e:e0:
84:3f:1f:c8:fa:89:63:ca:ff:52:42:c6:c9:9a:88:0a:a6:17:
be:de:8b:c7:4b:4d:90:f4:88:6a:ce:fd:03:c4:9d:64:f0:87:
eb:14:4e:04:e1:b4:1b:c0:c0:ac:a0:9c:2e:47:1f:ec:38:3f:
f6:a3:a8:28:9e:84:2e:98:0d:f9:7c:5e:e7:cc:43:8a:da:3c:
d6:33:db:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftaqsuggFYNOJBUv0R5PTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjJiYmYxNWRlMzQ0YWNkYjVmNzgwMDQ1MGYyYzgyZDc5
N2Q3OTgwHhcNMjYwNTEzMDUwMDU5WhcNMjYwNTE0MDUwMDU5WjAzMTEwLwYDVQQD
EygzNmZlZTU1ZTBhYzBlYmMxMWQ5ODU2NDJhZTExMGM2NTI5M2VkNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MBQ1RtqLkW/TA/ygpELO8aULC5J
KJK++5Qf39dd0fz9rqGUlmUrRyjidT6iZ4dkk3RZZkwKVBSvp3tOuklGyb1lFhhH
q/v9mhJBnax8OZyQhEMqBwRd8r80V1CS05ptDOs9qPJOUVQ78Y19A0WLwvd5PVK0
JBshzjltKvD2sxbNQH1M1YbVVB1f3zvIfH9Gu9GnsIiSp50mRcpVlMf4DXH/gChh
CuSadD1XcRZlTLqo9ceutJEl6M+evazpGh/HzJoGUqQRNBLMzs0YhAIODjNUtjeq
iWGjwjh+Ez6/wLc9RxtBNIwoTM/2x8KiZxY3GcH2jwrj+ACk5wZLLmmNaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb+5V4KwOvBHZhWQq4RDGUpPtRjMB8GA1UdIwQY
MBaAFN9iu/Fd40Ss2194AEUPLILXl9eYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMt
YTBmMjU5MWRkMmJkLzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMtYTBmMjU5MWRkMmJk
LzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmmTpTe3
mlL1dTLG6wvSr6KRqq9LLYuDZQIRqfH2DSUI/DKWlmKkX3sSfywwjzq82YssNWeZ
5LHScSxzJqz5hQj/7V5qFGBJ2dN/v86k/TE0TL8tF4VHEOK0Gl933I2ivsJlcPlg
wTKJ8woHvmpiNVJvIrUN/ICsNdmRLq6eqA9ZlGVE55vHozr4eDWD7ADJoBunAkUT
O8Ob4A6edLF+W4KrE1ROBfpJvU0lRK2uRn6ury7ghD8fyPqJY8r/UkLGyZqICqYX
vt6Lx0tNkPSIas79A8SdZPCH6xROBOG0G8DArKCcLkcf7Dg/9qOoKJ6ELpgN+Xxe
58xDito81jPbvA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:15:38 2026 by rpki-client