Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: zQN6R4mqd2j0Vr2hkDIu4ny86Q1uGF7uoKQUR0Od8Hk=
Subject key identifier: C6:F9:C7:C2:3A:64:96:37:46:B4:85:98:9A:05:B9:22:5D:84:DA:0D
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019D389C0808380FADBE5675459ED1A2789F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0749
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: Czhs6MzxxsygmHLFI1o2966l4Psco1vxKIoLJMRIe3c=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:08:38:0f:ad:be:56:75:45:9e:d1:a2:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=c6f9c7c23a64963746b485989a05b9225d84da0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:18:a9:cb:ea:d6:f0:8e:eb:1b:bd:a5:7f:
c2:96:bc:0e:78:0f:71:24:9f:1f:c4:56:f8:6d:a3:
ae:98:cf:19:15:a8:0d:4f:44:49:6d:ab:cc:85:94:
67:09:5b:d9:74:1a:12:c7:bb:d3:95:08:cc:48:bf:
65:c5:dc:0b:5c:b0:40:fb:00:8a:ef:3d:e9:c0:6a:
44:30:27:47:33:34:f3:66:ed:34:14:eb:df:cc:15:
4d:b6:a7:d7:e2:81:c7:35:51:b0:6e:4e:4b:41:4b:
ef:04:cf:91:70:e2:a2:88:a4:5e:c2:09:6e:34:8e:
d1:af:bc:e1:ba:06:53:d7:38:cf:24:8f:a4:16:0b:
d1:1b:84:a4:e1:f9:fa:ea:ec:53:08:31:9d:00:3d:
9b:4d:61:46:56:f4:88:15:19:9d:22:af:29:16:71:
b9:c8:4d:09:83:f4:6d:59:51:05:7d:9c:11:9c:ec:
21:44:b0:29:84:0a:a9:10:14:be:91:ee:37:02:b1:
f8:cd:9a:1e:66:8d:9d:ed:2c:62:47:93:6d:0d:88:
2a:b2:62:6d:76:57:3f:6f:d1:ac:49:3e:23:0f:a4:
01:c9:56:5f:3f:a2:e6:04:23:26:f0:14:66:44:5a:
67:fd:63:53:30:81:a2:32:e9:78:dc:2b:82:16:8f:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:C7:C2:3A:64:96:37:46:B4:85:98:9A:05:B9:22:5D:84:DA:0D
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ab:01:1e:29:eb:a9:6c:62:ee:ab:6d:15:2b:bd:fe:d3:e2:
00:0e:93:06:1a:c8:3c:ed:23:12:70:a6:dd:d8:12:6e:24:66:
40:12:de:38:0d:6e:23:bc:0d:3b:6e:8d:4d:cb:4d:d7:8c:f5:
49:8c:8c:5b:22:37:dd:c8:41:3a:59:a4:ad:cf:b2:ed:61:c4:
b4:20:ac:d2:57:bf:ce:53:ca:34:c6:a0:8e:2d:b0:93:14:58:
d1:fc:36:63:4f:dc:10:59:1e:02:00:64:ce:e4:fb:53:e6:79:
c2:8d:8b:de:00:39:4d:cf:dc:0e:4e:6e:ca:79:a5:c2:60:30:
fe:e2:4d:d6:b5:9e:2c:24:10:40:20:dc:de:45:80:8e:51:fb:
0e:e6:aa:f0:67:0a:78:54:93:f1:01:83:6c:4d:8a:94:28:f1:
31:47:30:ee:fc:69:9e:ff:b2:ea:38:0d:0f:ca:06:a5:c1:f3:
b1:73:94:ad:d9:a8:a4:39:8d:27:56:5c:b8:f9:64:b3:a5:b9:
b3:97:3c:c4:b8:f0:82:8e:de:74:eb:a5:ac:cb:7b:1a:96:a2:
44:20:76:02:c8:4d:b4:bc:56:59:ac:45:4a:03:3c:00:db:29:
2a:b6:da:24:3a:1f:0f:8f:94:cc:5b:f0:4b:12:f3:76:01:47:
8f:86:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client