Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: /2bMJPFUVrRxkf8UV1CBbBvWeeunQbV1qL++Yx9swgk=
Subject key identifier: 80:EB:F4:31:4E:57:20:3D:1D:84:5E:31:EA:30:FB:34:24:20:82:4B
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 01A0D3151376CD96095E391A63B5A675F120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 1207
Signing time: Thu 24 Sep 2026 11:02:48 +0000
Manifest this update: Thu 24 Sep 2026 11:02:48 +0000
Manifest next update: Fri 25 Sep 2026 11:02:48 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: qk3uKbNe1Ee6Ba0S3CPdrv/DHgEprhHEhPNF+VQcOws=)
2: 6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (hash: aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:13:76:cd:96:09:5e:39:1a:63:b5:a6:75:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Sep 24 11:02:48 2026 GMT
Not After : Sep 25 11:02:48 2026 GMT
Subject: CN=80ebf4314e57203d1d845e31ea30fb342420824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:50:b7:9b:f4:16:82:a8:e2:85:b1:c9:09:
6c:4a:f5:88:7e:04:66:2c:17:1e:f6:78:17:73:9a:
70:09:71:33:5d:ff:df:e5:b4:7b:64:7e:2b:ac:75:
d3:e5:43:f9:49:c3:28:35:2a:a3:94:7f:65:27:0d:
8e:70:97:d5:73:9b:8f:c0:79:77:d0:88:e1:e1:06:
fa:c3:fd:70:d9:d4:75:78:20:3a:9e:c9:b6:65:21:
7f:a5:5e:e2:63:85:18:79:11:1f:ae:75:4e:47:89:
a2:5c:95:4c:59:37:24:77:00:7a:ba:97:6b:8c:6f:
58:7c:b5:6d:85:24:cd:91:73:6a:63:c7:91:6d:45:
0c:53:95:6e:17:a2:53:bf:7d:f6:c1:93:8d:a6:8e:
0b:b5:f7:7a:20:ed:53:6c:e5:63:9f:8c:96:d6:fe:
bd:3e:2a:ca:ca:6c:29:2d:51:82:be:bf:18:9c:cd:
39:92:45:d1:ed:06:e5:fd:b3:2c:ef:06:c0:19:87:
29:34:33:67:d3:63:d5:6a:36:59:9f:f4:e2:f4:03:
b4:69:c8:e4:fb:b8:8c:fd:bf:5d:f5:b8:1a:82:a8:
dc:c3:ff:bc:3b:0d:02:24:8e:6b:d5:aa:02:c5:14:
30:4d:01:ff:7b:b5:75:f4:68:31:df:e9:e1:76:3a:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:F4:31:4E:57:20:3D:1D:84:5E:31:EA:30:FB:34:24:20:82:4B
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:d5:74:59:04:2b:7e:4b:cb:46:52:69:ab:b2:3a:14:49:
6f:0d:4e:d1:56:e8:45:08:75:4e:f4:f5:23:65:92:b5:3b:70:
1f:2f:d6:24:21:1e:32:17:38:44:e7:19:9e:50:af:93:cf:8a:
2f:83:32:33:0c:a5:06:df:64:e6:08:00:b7:37:fa:b6:23:13:
8a:3c:35:63:74:04:8f:f3:bc:9d:c0:5d:54:c5:7e:81:09:49:
1f:3b:b3:39:7c:f2:c6:82:5e:82:2b:2e:f9:ef:96:61:b5:7d:
5f:e4:44:94:47:fa:8d:9b:98:62:42:95:f2:7b:da:b4:6a:31:
35:97:b4:4b:22:70:f0:8c:99:1a:76:bb:98:ad:04:7d:e4:5a:
58:19:af:45:be:c4:17:9d:08:8d:b5:3b:a4:f2:46:98:1c:32:
3c:ec:be:0a:3e:9f:eb:be:23:29:d2:f6:3b:1b:59:f0:ff:65:
bb:0a:12:4a:13:d8:85:12:48:1f:06:04:82:1d:f2:34:02:dd:
57:17:96:df:e9:37:4a:c5:28:7e:e8:6d:20:bb:65:28:94:8b:
c2:a5:78:01:4e:89:a6:7c:86:04:1b:92:36:f1:5c:0f:81:7b:
13:82:99:f4:02:61:c7:ea:ae:cb:dd:a5:2f:51:49:35:cc:44:
5c:1e:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:38:46 2026 by rpki-client