Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: HOHgRp0vwPASEoTNaK9R6PZUOwdbB9l9krGlSoE80FM=
Subject key identifier: CD:A5:A5:F1:C5:9D:91:26:94:94:AD:B8:18:7C:B8:13:F7:02:B3:9D
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019D322C59B9F966A32D70D9D9C29C9BF67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 1025
Signing time: Sat 28 Mar 2026 02:01:00 +0000
Manifest this update: Sat 28 Mar 2026 02:01:00 +0000
Manifest next update: Sun 29 Mar 2026 02:01:00 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: 3ZOjM/6Z3OF7cUEP4xNeBjEIgVY9G265THa5k2NO98w=)
2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:59:b9:f9:66:a3:2d:70:d9:d9:c2:9c:9b:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Mar 28 02:01:00 2026 GMT
Not After : Mar 29 02:01:00 2026 GMT
Subject: CN=cda5a5f1c59d91269494adb8187cb813f702b39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:0d:c8:fc:e2:72:48:58:bb:86:1e:8d:8a:
ad:77:ba:a6:39:c2:af:24:ab:b3:5b:fb:25:2b:58:
23:a9:f8:bb:a7:9c:b6:aa:84:e2:73:2c:5a:19:bb:
92:b9:07:52:ab:c0:59:10:59:c3:d7:18:55:1a:40:
b9:43:a7:95:6f:d0:1e:81:81:c8:81:05:e5:f4:14:
3c:22:26:f6:dc:a5:29:ca:7e:8e:c0:32:9a:18:5a:
e5:21:d5:66:ef:8c:f5:c4:87:4c:86:37:ed:b6:14:
35:28:9f:a6:b5:f4:c3:42:d2:43:c9:5a:c4:fd:73:
63:46:93:b1:6d:a7:1f:03:f6:53:71:d7:c4:6d:15:
b4:f5:ed:8d:e3:d4:8a:f9:87:a5:d6:59:35:fc:04:
7d:84:70:63:6a:ac:69:8e:e8:76:1a:b2:c8:b4:18:
70:c6:a8:c5:be:3a:10:c5:4c:b7:d0:cb:7b:65:1e:
8f:89:a0:b2:f6:c7:2f:9f:eb:a0:c0:4f:89:9f:7d:
45:b7:bf:6e:87:6c:31:ef:15:5b:c4:0a:50:60:2b:
ee:2c:f8:ba:17:e7:87:11:54:e6:2d:f7:f5:d4:59:
a2:5b:33:61:51:36:f8:cd:23:32:b3:37:a4:c6:5c:
50:3f:9b:3e:d3:2c:e6:2f:47:65:55:bb:8b:61:c7:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A5:A5:F1:C5:9D:91:26:94:94:AD:B8:18:7C:B8:13:F7:02:B3:9D
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e5:c5:a1:bc:f1:a3:8d:a6:f4:08:9f:34:0a:32:1b:de:05:
fd:be:56:cf:49:30:14:cf:ea:80:85:80:66:6a:c2:46:85:0a:
42:0e:ef:63:cc:fd:90:4f:b2:ec:3e:93:e5:c8:cd:36:55:d6:
80:8e:07:12:10:d5:30:51:06:b9:2c:92:b3:e7:7a:99:8c:a2:
32:8c:55:35:5e:14:91:0b:eb:21:5a:d9:61:75:f4:ff:26:44:
0d:ad:8a:a4:1d:7c:be:7d:0d:a4:c9:c8:06:e8:cc:a5:a5:60:
e4:6c:f6:2e:b8:5b:65:a9:d2:2b:04:3c:2d:b1:9d:a4:d7:58:
60:4d:fa:46:4c:44:96:b7:03:2e:36:b9:39:90:fd:10:8a:fb:
56:6b:ba:74:b4:3a:80:f1:5b:e3:27:5f:93:92:c6:f0:35:b3:
d7:b2:6e:f7:0b:a0:09:52:99:99:1e:55:56:d0:7e:96:d8:0b:
1f:a0:29:34:cc:d4:f6:04:60:01:54:22:9f:d9:72:dc:9a:88:
fc:f6:3f:dc:41:72:c3:81:61:4c:4f:88:bd:75:bf:08:07:5c:
4f:70:ac:f3:66:0e:f6:9d:52:6c:2d:df:e6:5b:d7:db:4a:ed:
81:3f:a7:1f:b2:c2:0f:01:43:ed:13:86:dd:38:3d:00:2c:af:
a5:54:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:11 2026 by rpki-client