Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: EpY0j/sMb8Du8M3lSh4WItd62PWWfwCWhxuNa90RrxA=
Subject key identifier: FF:BA:88:95:32:B8:BC:2B:99:53:31:CB:26:BA:E8:C6:80:53:D5:C9
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 01A13F39DC63104DC224EBD45E9C0B2EE001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 1138
Signing time: Thu 15 Oct 2026 11:01:58 +0000
Manifest this update: Thu 15 Oct 2026 11:01:58 +0000
Manifest next update: Fri 16 Oct 2026 11:01:58 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: r6s9yxehZwh5KNmtmW4B0w/cYXKAFe2yOfXBxQDYI0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:dc:63:10:4d:c2:24:eb:d4:5e:9c:0b:2e:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Oct 15 11:01:58 2026 GMT
Not After : Oct 16 11:01:58 2026 GMT
Subject: CN=ffba889532b8bc2b995331cb26bae8c68053d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:33:c4:81:21:cc:1b:c5:81:8c:63:7b:3b:
8e:17:f7:df:fc:62:83:70:4b:56:cd:25:6f:b8:ff:
58:b3:87:b7:3e:74:2d:0c:c4:88:9e:19:35:8c:72:
15:1f:d2:d9:6a:f4:ed:60:20:4a:5e:c8:04:cd:0b:
04:eb:c9:d6:ef:12:55:15:62:a7:45:87:cc:fb:14:
39:d2:68:d3:af:47:c5:12:a7:26:40:33:85:ab:f9:
42:b2:37:4b:af:1d:71:81:d1:99:d4:f5:d7:7a:9d:
66:27:42:08:1a:f4:70:a6:21:22:5e:82:fd:01:81:
ef:ec:47:c3:dc:a4:a2:49:38:6a:5a:01:31:a8:e0:
f1:f5:e0:0f:ae:c4:38:01:1e:41:21:be:2b:97:8f:
84:85:18:33:b0:69:27:c2:b3:cf:a2:e5:50:3f:aa:
64:b2:6d:cd:54:26:ef:2d:86:f3:4d:55:5b:2c:5e:
3b:3e:3d:73:60:00:14:be:52:6e:f7:9d:d8:2b:62:
6f:40:0c:58:9b:02:59:23:8f:1e:2c:02:a2:89:36:
01:61:91:49:9b:59:d3:5d:a2:3f:29:78:8b:9d:25:
44:2d:81:72:d0:83:d9:ca:f4:6a:db:fb:e8:0f:97:
02:e9:6b:ad:8f:fd:8b:05:ad:61:ec:d8:58:01:8a:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BA:88:95:32:B8:BC:2B:99:53:31:CB:26:BA:E8:C6:80:53:D5:C9
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d1:c2:b2:ee:b3:ef:17:2b:41:9a:f0:d4:ff:60:11:10:d5:
c9:28:a6:40:9a:f7:cb:db:e7:54:6d:50:fa:a6:0f:76:08:bb:
a6:de:94:57:5b:01:66:36:b3:5b:6e:9a:f2:0d:40:0e:70:6f:
d5:91:5d:69:d8:2e:75:9f:bd:4c:a6:1c:78:d5:eb:b2:ee:25:
fb:2f:e9:69:69:4b:6c:81:95:ad:1c:41:24:98:eb:86:bf:cf:
71:42:3c:9d:be:1c:19:01:42:7b:68:c0:c9:a9:f8:69:08:76:
ec:39:15:aa:4d:6b:58:b8:2d:f1:e7:e0:e1:f8:5e:69:5e:c6:
b0:fb:11:b2:03:67:05:41:68:3e:62:af:f0:c7:7e:76:a5:d1:
0e:57:8e:f2:92:04:87:d5:ca:b8:22:54:18:60:dc:48:35:6b:
cd:c1:5f:53:15:90:3f:9c:d2:4d:f9:8b:e8:d5:1e:df:d0:76:
01:94:82:99:f8:0a:dc:66:13:61:ac:1c:a4:61:d5:0e:46:7c:
e9:20:de:56:2c:82:3f:75:21:f9:ad:ce:a3:2d:df:97:71:7f:
92:7c:0b:14:87:f7:94:2a:c2:2c:0c:86:20:73:70:bc:05:2a:
f4:c3:a0:f8:c0:66:77:e5:7c:54:5f:0f:29:f1:a6:43:73:fe:
88:ce:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:32 2026 by rpki-client