
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: auVM0MZ+dmOtegP0YX7zwgkw1c0AmEoNdwc+X8xd1fo=
Subject key identifier: 41:14:06:E4:ED:51:A6:A7:44:C9:A3:EE:79:59:A8:15:66:D4:19:F5
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 019F9DDF08DB128BFAA46FCDBB62747EBC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 107D
Signing time: Sun 26 Jul 2026 10:01:07 +0000
Manifest this update: Sun 26 Jul 2026 10:01:07 +0000
Manifest next update: Mon 27 Jul 2026 10:01:07 +0000
Files and hashes: 1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
2: TcH4GIuktxSUfHtquYZnE0nBhtE.roa (hash: rpQl9MUfMf8qQcoJFxTK9nJpUXGjE7ncDisSQXNZN4E=)
3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: MeCHdY9Twt/Beq0QOY+R75RaAJxH1cM7srJgeXnhO/A=)
4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
5: nkfXYoc4Mcgj_WnSgw1MfRAkUv8.roa (hash: uTw63Gl3rRgs6l5JsMFtSBnpBCOYFjYiM97n8RknJaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:df:08:db:12:8b:fa:a4:6f:cd:bb:62:74:7e:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Jul 26 10:01:07 2026 GMT
Not After : Jul 27 10:01:07 2026 GMT
Subject: CN=411406e4ed51a6a744c9a3ee7959a81566d419f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:52:af:06:76:49:99:47:6c:4c:a6:de:5d:
5f:36:48:70:97:7c:7d:83:dc:70:e3:88:67:a0:6e:
cf:bd:ad:05:1a:df:9e:f2:f1:14:0c:d4:ec:5f:55:
d3:e6:67:4a:1e:4c:13:f0:5f:f6:a3:15:db:04:0b:
35:23:a8:c3:bd:d6:cc:68:4a:4e:d2:e7:b3:55:3b:
0b:8f:84:09:f9:02:56:e6:c8:8a:40:9b:70:22:a7:
d0:64:d5:2d:34:c7:f6:d1:62:11:f5:e1:68:26:0f:
14:d2:87:49:bf:d3:14:7a:e7:a1:b4:f0:8e:67:14:
41:8e:ea:b3:af:73:30:83:4e:75:34:e4:ec:df:32:
b2:a0:7c:8e:00:e6:f7:a2:56:e4:42:54:9c:09:25:
15:87:9b:fb:11:fe:94:26:64:1d:46:f3:a1:30:26:
db:ba:69:57:b9:9c:06:9e:ba:99:9e:30:f2:6e:3e:
a5:72:60:12:8d:ae:88:fb:a0:ba:ef:e9:97:18:62:
4d:54:1d:cb:20:92:cc:37:f3:65:70:5f:03:13:c0:
87:a4:8f:6f:ff:48:41:15:dc:0e:4c:32:0b:09:8c:
0a:39:38:66:2c:5e:95:ec:0e:b5:ae:0f:67:f5:32:
b6:d2:92:0d:35:5c:67:e0:0b:74:5a:6a:d0:d9:51:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:06:E4:ED:51:A6:A7:44:C9:A3:EE:79:59:A8:15:66:D4:19:F5
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:85:ec:d6:b5:22:36:37:4f:aa:85:5f:22:dc:4a:cc:e1:06:
cd:f7:09:65:4f:47:a6:5f:75:5c:d8:4d:b7:02:f3:34:7b:51:
b7:82:ac:8a:58:22:80:77:f5:aa:2a:53:9d:a3:78:d3:52:9b:
84:97:43:c9:dd:1f:c3:02:e9:79:64:17:cb:ce:52:42:a3:7c:
ea:18:60:8d:49:e9:e6:9f:07:b2:8a:7a:bb:72:a1:87:94:76:
97:f3:52:b5:e8:86:e6:c9:a8:71:b5:63:57:72:05:5a:92:9b:
ab:5b:c0:55:99:2a:43:24:3c:38:a1:ee:be:24:7c:7f:18:11:
c8:22:65:ca:52:8e:8e:cf:b1:cf:3f:f7:b7:80:e0:a8:3a:ad:
29:66:9f:a4:7a:25:90:c8:07:f7:2d:ec:b5:b4:12:75:73:b9:
c8:2c:0f:be:61:da:2a:dd:95:43:95:bf:52:73:fc:e1:c4:2f:
dc:5c:fe:0a:82:1e:53:e6:97:fa:ba:03:a1:4f:3f:6c:ca:04:
9f:6a:1e:15:6b:55:04:12:4c:0c:b0:d0:c3:f4:ef:71:8c:d4:
61:0b:57:00:15:61:bb:50:cd:2e:12:0a:2d:b4:30:59:7c:3d:
d9:11:23:fa:8b:62:8b:50:ad:5d:70:9f:02:d6:83:13:32:78:
04:24:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:05:20 2026 by rpki-client