Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: 7Rlh39gRo6aICKUvVvxCODmQposiXhMeIXhyHCF280g=
Subject key identifier: 13:D9:0B:74:3F:70:A4:4E:CA:AF:65:93:87:3E:D5:4F:EE:C5:20:12
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019FA296FABC28033C068F5110C91EE0460D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0889
Signing time: Mon 27 Jul 2026 08:00:31 +0000
Manifest this update: Mon 27 Jul 2026 08:00:31 +0000
Manifest next update: Tue 28 Jul 2026 08:00:31 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: VTfJQSyt9bCQtNWyFqXr8uP8dkeJTw0lc3PKWuUT1ho=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:fa:bc:28:03:3c:06:8f:51:10:c9:1e:e0:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Jul 27 08:00:31 2026 GMT
Not After : Jul 28 08:00:31 2026 GMT
Subject: CN=13d90b743f70a44ecaaf6593873ed54feec52012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:70:be:ea:e5:7e:d3:d0:14:c2:c1:79:db:
3c:f1:cd:8a:9c:a5:3c:4e:92:b1:57:48:08:1d:11:
31:39:6a:f9:d7:04:ca:f6:9c:57:be:eb:f4:30:6f:
8f:c3:89:27:26:00:3f:29:2c:8e:97:dc:04:73:c1:
01:64:d3:5e:85:5b:cb:b4:cc:c1:c0:63:d9:65:21:
35:f8:f2:0a:a2:24:89:2f:96:73:43:35:91:c2:fa:
94:83:8d:ce:35:fe:a8:35:f2:ed:93:78:b6:cc:d4:
77:55:dc:e2:15:7a:ea:a7:ef:82:7e:ef:69:e9:9d:
10:15:1c:4e:89:02:30:3c:08:12:b3:95:e9:6b:b5:
f1:ca:e9:55:ea:84:b9:02:af:92:9d:a7:b8:59:8a:
c5:3d:62:d8:c9:5f:a1:21:a4:05:43:6d:e4:8c:44:
14:1a:d2:61:2c:d8:6d:12:ab:6c:ee:f6:2d:07:ac:
bd:46:c3:75:f1:53:a7:bf:34:85:62:7a:39:67:c7:
c8:db:c8:1f:4c:c1:d6:3f:fb:bb:53:20:8b:93:3c:
cb:8e:bd:17:38:0d:9c:f4:ac:50:75:fb:cb:8e:9e:
8d:6f:91:eb:c7:c4:9f:ae:bf:2b:23:bd:f5:0c:76:
5c:5a:e3:ab:08:42:bf:6c:0c:13:a4:60:a5:0a:ec:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:0B:74:3F:70:A4:4E:CA:AF:65:93:87:3E:D5:4F:EE:C5:20:12
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:c7:bd:77:0f:49:76:15:1c:62:76:0e:5a:2f:4b:1f:4b:
5b:78:33:e2:4a:21:41:8f:c4:5c:99:30:1b:90:2a:de:08:6a:
16:f1:fc:e2:c9:05:69:11:84:f4:35:0f:17:49:62:77:98:4c:
af:e1:cb:48:fe:4b:d1:15:b1:e6:01:5d:8a:f2:2e:69:71:95:
17:d6:b3:5f:09:42:d0:bf:c3:7c:45:6f:26:8f:b6:04:65:54:
4a:74:bb:cf:16:64:7c:2d:0b:d3:25:91:f8:e5:cd:a9:53:66:
e5:70:e8:d3:42:e0:f2:03:c4:e7:e5:02:d1:e2:fc:1a:ad:0b:
70:e5:06:a2:a4:63:fc:de:90:01:97:c7:3f:a9:85:23:2f:b1:
53:ef:bb:0d:51:74:dd:61:57:8b:4f:40:17:0f:a8:45:0f:0f:
00:0f:ba:a4:82:65:14:4d:52:6e:36:7f:03:c0:dd:06:2f:87:
02:77:25:b9:81:db:e7:8d:6e:03:96:df:16:d6:10:1f:c0:b0:
8d:fe:5f:05:60:e9:3f:a3:1f:60:a3:4e:6d:1a:18:19:83:a6:
44:6b:24:78:f6:63:ba:b0:d2:f7:5b:0a:1f:65:2b:53:c1:e1:
89:59:8a:a2:b6:25:8a:94:6f:ee:e6:e0:81:a7:39:62:eb:9a:
aa:ca:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:55:06 2026 by rpki-client