Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: 8XssvJX3v1SONleS10DiFjmsyzHW8+9vRChamPksOEw=
Subject key identifier: 47:77:B5:61:12:5A:59:D4:9F:0F:6B:D4:F3:12:9B:7C:D7:2E:8F:98
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 01A198B34B3637A01730A20737240C5CCEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 098D
Signing time: Sun 01 Nov 2026 20:00:49 +0000
Manifest this update: Sun 01 Nov 2026 20:00:49 +0000
Manifest next update: Mon 02 Nov 2026 20:00:49 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: +kdAGnkq9u89UdCCg/h1PUSN6u4/lR7wnwIWVr4VZK0=)
2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:b3:4b:36:37:a0:17:30:a2:07:37:24:0c:5c:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Nov 1 20:00:49 2026 GMT
Not After : Nov 2 20:00:49 2026 GMT
Subject: CN=4777b561125a59d49f0f6bd4f3129b7cd72e8f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:32:f9:2d:0a:94:c8:84:2b:7a:95:19:0b:
66:7c:e8:2f:7a:36:8a:b9:58:e7:92:0b:ca:6d:4a:
1d:2c:91:0a:8b:8f:7c:c9:ce:48:da:e4:17:77:df:
e5:05:61:b9:73:f3:3a:0d:cd:e3:1b:94:b6:cb:f9:
57:b5:75:f3:0c:36:54:da:8c:a6:71:85:93:5d:04:
eb:d8:55:4a:75:59:17:7d:d6:f9:d0:e6:5c:e2:56:
8c:f7:93:9d:6e:31:f6:5f:99:cd:1c:23:7d:ea:32:
69:2b:6b:49:7a:11:26:8c:4d:29:dc:db:c2:5c:f8:
c0:b4:5f:69:a5:98:c1:d3:81:40:5c:05:18:9c:e7:
43:8b:19:94:98:71:e7:c8:81:b7:3d:ca:32:57:ce:
72:75:ef:2f:b1:26:0b:ff:35:2b:3f:ec:51:eb:80:
d6:7e:ad:98:4a:a4:f5:96:63:cb:c7:48:d5:44:2b:
ca:fa:e4:b7:15:a9:46:5c:1f:78:0d:54:c4:20:52:
40:36:79:26:f0:6d:f2:3d:55:0f:0b:3a:b4:40:98:
76:0c:91:9a:f9:4a:9a:06:11:7a:aa:e5:6e:3b:f3:
98:32:12:41:7d:73:6f:b7:87:e9:35:37:83:52:bd:
eb:9e:aa:e4:33:3e:1c:5e:17:23:62:28:74:aa:41:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:B5:61:12:5A:59:D4:9F:0F:6B:D4:F3:12:9B:7C:D7:2E:8F:98
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ed:56:4a:5f:15:81:5e:88:e7:c6:a4:78:08:21:aa:ee:67:
95:2e:64:15:fa:1e:74:22:91:54:b9:44:af:8a:57:e4:2e:67:
f3:a4:f9:e9:41:5d:74:5a:58:c1:d2:68:16:33:53:65:08:de:
2c:a6:a6:70:0d:50:eb:3d:33:07:5e:9d:4f:eb:b0:f2:10:34:
e1:a6:60:95:fb:0c:ba:ec:f6:ab:c7:d2:b2:a9:77:ea:df:46:
70:78:af:1f:63:85:12:5b:79:1c:15:13:86:ad:95:50:88:8d:
65:e0:7b:d7:30:d1:d2:9a:64:13:b3:44:b3:e6:81:04:4a:04:
54:cd:4d:93:6d:18:88:c0:d2:b5:8a:17:f9:4b:2a:63:6b:b3:
ad:6b:a1:74:b8:6f:f8:df:35:29:96:dd:d4:77:dd:14:d5:42:
f5:0f:a9:8a:ae:3d:56:35:38:f9:1f:88:49:14:c8:cb:a8:c5:
51:43:93:a8:9c:4b:0b:a2:79:50:e4:77:4a:03:45:3f:45:3c:
ba:3a:16:bc:af:ac:ad:4c:14:6a:3c:ab:2a:63:57:d8:c3:34:
8f:c9:40:6a:70:ac:94:52:f7:3d:55:d7:98:af:c0:6e:6d:a4:
82:80:fd:49:79:06:7d:0e:f4:a8:81:a2:a9:ce:78:9e:76:03:
6a:06:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 04:43:17 2026 by rpki-client