Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: 82EshwuI79cVmFGcvAQvDbtx4lS/E7HMXIgEL6fSV24=
Subject key identifier: FF:B8:60:3C:CD:5C:D7:7B:16:92:1E:4E:EC:09:92:D2:F6:06:77:A4
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019D37F79765A9652FE1063F129E96F00D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0F22
Signing time: Sun 29 Mar 2026 05:01:06 +0000
Manifest this update: Sun 29 Mar 2026 05:01:06 +0000
Manifest next update: Mon 30 Mar 2026 05:01:06 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: n2Xyv25XcI1tU9it3TPI+yXzFp0RM3E7wuI7FNtma1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:97:65:a9:65:2f:e1:06:3f:12:9e:96:f0:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Mar 29 05:01:06 2026 GMT
Not After : Mar 30 05:01:06 2026 GMT
Subject: CN=ffb8603ccd5cd77b16921e4eec0992d2f60677a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:31:b8:83:f7:2a:02:04:c2:c4:5c:e4:43:
94:e4:ae:b0:04:57:47:48:d0:a1:a3:03:b6:ec:88:
57:52:76:f4:6c:94:28:31:9c:ad:bf:32:c6:b6:7a:
b4:ff:03:9a:d8:a1:8e:0b:9a:88:c0:09:ef:e8:8f:
d9:61:6c:35:ed:95:cf:6c:82:e4:22:bd:1f:17:bd:
20:df:5a:de:34:06:5f:12:77:29:b3:af:d6:7b:b1:
0b:eb:3f:37:bb:70:f3:c2:1a:6e:ef:ad:18:05:86:
fd:00:73:82:09:96:5d:33:bb:f7:3d:59:72:d9:e8:
d4:ab:37:3b:05:83:7e:a0:f2:65:a0:c7:86:0e:61:
46:b9:88:7a:59:77:37:3d:d4:29:e1:83:f0:d9:52:
cb:d7:ce:e8:f8:e4:be:99:b4:8a:cb:9c:4e:6b:43:
51:45:4d:12:a2:87:0d:f1:5d:76:72:14:ae:33:6a:
8d:b3:42:34:a0:69:c3:05:30:e5:b5:bb:5a:b2:92:
08:d8:75:a4:09:5d:f4:ce:ca:2f:e0:8b:75:1d:16:
aa:2c:d7:15:f9:5e:39:af:54:b3:d3:cd:73:a6:35:
f4:f4:cc:e0:bf:c6:e1:85:2e:07:6f:4c:96:5a:11:
dd:c8:ac:b8:cf:7a:f2:d7:a0:fd:51:e9:5d:30:73:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:60:3C:CD:5C:D7:7B:16:92:1E:4E:EC:09:92:D2:F6:06:77:A4
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:60:aa:fd:8f:29:a3:a9:20:e3:52:62:76:3f:cf:23:82:
4c:b4:2f:f7:ff:e6:10:24:56:b5:b5:e7:92:64:13:1c:00:ed:
92:66:39:75:38:92:60:87:4c:0e:f7:6f:fa:12:80:d4:57:ac:
05:90:fc:a1:ab:71:38:15:40:51:8c:a5:90:5a:86:65:09:4f:
37:14:3c:c6:31:60:14:6f:3d:71:3c:66:18:87:6f:48:4e:3d:
42:70:8b:a6:77:b3:fd:4a:b7:28:fa:a5:d5:93:59:ea:ef:60:
ad:8a:b8:c8:d0:71:13:50:3f:5a:e6:75:3d:11:2d:84:c6:f9:
95:e7:7b:bd:45:76:a7:52:5c:af:49:90:38:3a:91:95:34:3a:
22:20:46:c4:a2:ed:1f:2b:3e:ee:1d:96:d5:57:f7:84:f1:11:
e7:25:19:8a:27:30:03:d6:ac:af:68:b7:2e:e8:f8:19:7c:ee:
47:75:fe:10:64:ca:83:85:fa:d9:cb:89:ce:ab:d9:c8:9e:57:
f8:af:72:4b:41:1f:e6:bc:28:71:fe:0e:b5:8b:60:c4:6c:14:
8f:90:94:ff:c7:76:6d:72:b0:6a:a3:83:d2:fa:a4:22:31:8f:
3c:fa:73:ee:3b:95:d1:b3:e9:76:20:0a:dc:95:e4:86:ad:fd:
a7:c3:03:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:07 2026 by rpki-client