Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier: ecPA7G1bOlFEGCcdJPM5GJfZPOcflum4xTpCi3hNg1I=
Subject key identifier: 50:CF:EC:D6:7F:AE:D8:5A:1B:F6:34:83:C3:66:58:73:20:FD:71:14
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 01A0CE24217E43F174C74B2A86C77F04C56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number: 1119
Signing time: Wed 23 Sep 2026 12:01:09 +0000
Manifest this update: Wed 23 Sep 2026 12:01:09 +0000
Manifest next update: Thu 24 Sep 2026 12:01:09 +0000
Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: rz08FruGN2n37l/h+esDRS93jWjOJ6hmolSEMPPCPDQ=)
2: 3N8RjBOaHqysfsXcuS4moMiqHcA.roa (hash: iQaQoggeO3tLMHb/V/COJC4hr6BU8lu4S0DICLg++wE=)
3: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (hash: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM=)
4: W_FOHMjyvQTaAri5A_zDlx2DY2k.roa (hash: njRnMCxu5gn2zsVJDrc4Nj/3Yt4VdpnpXJ0wh2X6tGk=)
5: fdth4-LheaAtkNOEJz6pHobfl_k.roa (hash: rTpg5aqyYW2RH+xhrSVpQRy6U3wJBueXqcjg7bGUFhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:21:7e:43:f1:74:c7:4b:2a:86:c7:7f:04:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Sep 23 12:01:09 2026 GMT
Not After : Sep 24 12:01:09 2026 GMT
Subject: CN=50cfecd67faed85a1bf63483c366587320fd7114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:0e:c3:a5:35:8f:5a:5e:a6:d5:1b:c0:9a:
fb:52:28:7b:b9:95:81:c9:f5:1e:e3:c1:67:df:c8:
13:79:90:43:a0:1c:f1:c9:35:7e:2c:fc:3f:33:08:
97:27:e7:af:80:df:73:48:09:67:08:a2:13:0e:d3:
f8:96:6c:5f:43:d5:b7:ed:ff:a6:03:5c:98:bc:94:
03:a1:2a:5c:15:bc:c2:d8:4b:b5:cb:6c:4d:e6:3a:
97:15:3f:05:ee:3a:b9:a1:e3:6f:7f:39:f7:aa:fe:
cf:59:74:2a:15:4a:74:c2:c7:c0:25:8d:c7:70:03:
8e:14:39:4b:2e:0b:7b:d3:91:91:37:3f:e4:b3:62:
17:d5:a8:f6:07:35:4b:58:1a:81:6f:3a:63:e8:e5:
25:9e:c2:48:85:71:7f:54:74:68:a5:76:d5:13:b5:
b6:3a:cb:5e:68:a8:78:7e:12:74:44:cc:6a:6d:56:
06:d4:f0:e3:e1:ae:5d:ef:d3:b5:e1:51:49:ca:c0:
2e:d7:c8:97:f6:f7:86:1f:6d:bb:9e:af:fd:40:32:
03:c9:dd:ef:52:63:4d:c6:a0:7b:99:92:27:b9:17:
d7:a0:c2:ec:76:a8:60:af:7b:00:28:ff:ca:43:ef:
1b:98:f3:d9:22:27:97:ed:78:86:24:30:5e:f4:71:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:EC:D6:7F:AE:D8:5A:1B:F6:34:83:C3:66:58:73:20:FD:71:14
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b1:b0:a8:f9:c7:13:e5:cd:fd:3b:4e:cc:d8:23:03:b6:4c:
e0:a5:05:ce:32:cb:7d:7f:2f:b6:c3:5c:cf:74:a2:23:f8:89:
d3:17:64:4c:16:0b:61:bd:4e:65:1a:9a:9e:6d:dd:1e:9f:ff:
0e:a1:18:7c:b0:6a:13:bc:2c:bd:33:f2:31:01:66:1a:fd:5f:
d5:9f:ad:bc:e9:5e:96:8b:99:b7:31:a3:e2:a1:2a:af:60:83:
ef:4d:fe:6a:2a:34:9f:3e:dc:ec:c0:92:7f:e8:29:90:92:ba:
f8:e7:8f:a4:10:14:1a:56:53:bf:6e:96:2e:e8:12:d7:e2:28:
8c:e1:65:8b:7b:57:70:f7:42:26:38:16:12:3d:d9:ce:cb:7e:
fe:a9:0d:11:5e:e1:b4:39:00:b2:df:08:4d:0c:20:22:41:d2:
6d:32:24:b5:06:a0:1a:3c:f6:17:46:2f:21:a1:1a:fc:05:83:
d9:a8:5f:d1:2d:0e:a2:07:48:3d:ba:3e:35:ed:1b:45:8f:fc:
f0:5b:ab:dd:f7:b2:bc:e6:e1:5b:df:71:4c:23:51:66:11:99:
42:77:fb:b2:4e:ae:cb:da:73:14:e6:58:0a:ed:cb:b3:b9:03:
c2:49:f7:3b:0e:05:1e:00:64:30:db:63:76:86:d2:a6:6a:a7:
9e:07:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:53:55 2026 by rpki-client