Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: UtKj5sjw9nk+lFJqTz8EIAAUH4vHSm4teEpp03/Yt4M=
Subject key identifier: 2C:E6:7C:86:B3:53:48:10:97:C2:7D:8B:12:C6:62:1F:D4:BC:C5:E9
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 01A08E32304DACF341CC64D32FB804046BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0903
Signing time: Fri 11 Sep 2026 02:00:48 +0000
Manifest this update: Fri 11 Sep 2026 02:00:48 +0000
Manifest next update: Sat 12 Sep 2026 02:00:48 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: XhQkzcm2qqiVQ0PrsOmTl9MYGLT2fFPmKZKFFlcwJhc=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:30:4d:ac:f3:41:cc:64:d3:2f:b8:04:04:6b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Sep 11 02:00:48 2026 GMT
Not After : Sep 12 02:00:48 2026 GMT
Subject: CN=2ce67c86b353481097c27d8b12c6621fd4bcc5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:de:5e:42:f9:4b:28:32:a8:f8:54:43:4c:
c2:9a:f9:4c:68:86:4e:88:4d:87:5a:97:40:3b:79:
9e:4b:ab:0d:f9:54:13:c3:95:fd:25:87:b0:d7:ff:
a2:47:13:3d:65:b3:5c:74:32:1f:bf:5d:78:d4:4d:
25:67:90:33:dc:c9:c0:37:e0:9c:e7:68:b0:5a:a9:
f2:dd:0d:3b:bd:d0:1d:c9:56:70:fb:4e:83:87:8b:
2d:d1:c8:d6:77:15:a4:53:01:4f:be:e6:97:f9:50:
e3:3a:4c:ad:68:ee:45:34:33:43:ad:ea:3a:12:41:
b7:2b:b4:30:6d:10:0c:80:38:ec:8d:80:26:dc:42:
f9:cb:c0:dd:67:6c:d4:ce:a1:e5:97:26:88:52:51:
0c:6a:3c:1d:e5:81:81:c7:63:58:03:3c:5d:bd:9f:
96:37:b4:8c:e0:69:c9:ae:c1:86:70:b6:a8:3f:b3:
be:70:4d:49:2f:6a:4e:0a:90:27:b9:37:c2:73:63:
20:73:ea:15:15:14:78:74:f7:6e:31:dc:60:ef:03:
df:76:94:b7:be:21:f8:04:31:bf:49:9a:3b:ae:8c:
03:61:42:08:99:09:75:d8:ae:d4:71:87:0e:60:ed:
31:4d:aa:6d:38:b4:ba:98:ec:2b:28:70:8f:8d:41:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:7C:86:B3:53:48:10:97:C2:7D:8B:12:C6:62:1F:D4:BC:C5:E9
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2e:2f:e8:c7:a3:22:15:2a:df:0e:db:c9:b2:af:97:4e:86:
d5:73:97:38:29:14:f5:15:ff:0b:ec:1b:65:7f:bf:84:ba:50:
25:83:33:bc:a7:51:ea:6a:84:e9:6e:42:7e:c2:da:1c:e0:df:
74:2a:d5:1b:6c:49:2f:70:44:01:25:9b:a9:9a:3e:07:eb:ce:
08:29:b0:3c:26:6b:aa:b2:c7:4e:19:dc:10:72:41:a1:84:b5:
0f:b7:e7:47:25:d7:77:4d:4d:c4:b8:df:93:90:1b:1b:aa:db:
ba:a4:fd:4c:ac:54:d6:f6:87:45:67:8a:e6:70:dd:c0:91:7d:
de:7e:17:7c:e7:07:2b:47:e0:fb:71:cb:0a:1f:11:51:e9:38:
2f:b0:56:75:b4:96:05:7c:60:a1:c1:0f:55:cf:26:cd:19:00:
28:15:34:ef:cf:41:47:b5:87:1b:62:8d:1d:6e:e9:6e:a0:9b:
56:6a:d7:d7:9d:b5:72:aa:5f:1a:86:8a:5f:3f:85:21:5d:4e:
d0:53:cd:73:50:06:ab:ac:3b:b3:83:0b:62:81:67:c3:65:8a:
a0:6d:cb:e2:36:c1:60:84:6c:8e:ed:18:ac:a8:a9:a4:cc:c4:
85:83:d3:c4:03:ae:b4:f5:d2:e2:fb:15:94:ad:2f:a5:33:16:
dd:f9:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:59 2026 by rpki-client