Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: a7UO2SSn45dCvrHe63E+heO9EDHNOtGOIaaWSeMYq6E=
Subject key identifier: 43:37:91:16:E8:84:C5:04:59:3A:76:FE:60:3E:84:81:A4:02:E9:22
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019E311773DDBD0F2D9DB44681474ADA3FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0FA3
Signing time: Sat 16 May 2026 14:01:20 +0000
Manifest this update: Sat 16 May 2026 14:01:20 +0000
Manifest next update: Sun 17 May 2026 14:01:20 +0000
Files and hashes: 1: 2i6zWb34lFP74zuKjfx43_CZktA.roa (hash: SyIPJNrwpK4gLULaUZ1q9R1c7xsI2Dmeouc4YZXDwwY=)
2: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: y3CymwBOSNDdbgwRSZJyGdbuO83J8X3DbxAyQAUU8hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:73:dd:bd:0f:2d:9d:b4:46:81:47:4a:da:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: May 16 14:01:20 2026 GMT
Not After : May 17 14:01:20 2026 GMT
Subject: CN=43379116e884c504593a76fe603e8481a402e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:a4:06:4e:d6:3f:00:35:35:45:97:da:d3:
97:58:87:d4:fc:71:84:04:25:ce:92:00:eb:22:58:
d6:6e:66:11:06:e8:40:a5:8c:7e:c6:a9:85:a2:de:
58:0e:0d:62:f1:b9:07:a2:b9:03:98:7e:35:bb:2c:
7c:f9:df:55:27:fb:35:ef:1a:5d:c8:3a:71:05:90:
c0:34:30:e4:77:0b:16:f5:b8:df:bc:c3:77:d7:6e:
b9:3e:06:ab:14:91:f9:db:30:3f:c3:9f:01:cc:ca:
d1:53:f7:68:9b:0c:bf:4f:a3:56:c4:1d:5c:85:0a:
e5:a1:eb:5d:6d:6d:2e:e7:99:ab:69:24:36:85:ee:
5c:2b:9e:d6:c7:0e:5f:87:cf:bb:d9:dc:27:3c:34:
84:d0:54:ad:be:46:57:92:61:db:6c:8c:b3:d8:2a:
4f:4d:74:e8:bf:b9:75:a8:87:dd:d9:6d:35:9b:21:
99:b6:5b:00:d8:95:5b:27:ea:80:9a:6a:33:5b:34:
ff:ea:4e:82:d5:24:42:b6:52:40:fc:e4:f6:3b:c8:
33:e6:80:9a:64:d1:4c:32:44:37:ec:10:3e:a4:50:
61:c6:66:d2:1d:19:52:3c:c1:a0:0f:43:96:49:43:
04:9c:18:d3:bc:b0:0b:05:5b:1c:50:5e:eb:1f:6f:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:91:16:E8:84:C5:04:59:3A:76:FE:60:3E:84:81:A4:02:E9:22
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:50:07:6b:9f:94:52:38:75:fe:63:7a:e5:40:59:65:60:65:
cf:38:f2:a8:a8:1d:b5:e1:52:94:92:90:1c:95:ec:01:49:69:
f0:38:58:e4:31:40:9c:9c:05:03:63:6c:ef:20:ea:18:3c:e1:
bc:55:44:40:ba:21:fb:78:e1:2f:60:bd:c2:0e:ec:ea:b0:7b:
92:76:9e:ec:50:a1:2f:e8:2b:e1:ab:39:91:38:90:57:bc:3d:
5f:3c:23:46:0a:fb:d2:40:22:9f:3c:84:bb:ff:c5:b6:d5:32:
bb:87:19:81:47:3e:54:b9:0b:d1:de:95:ac:15:12:0c:44:49:
f6:11:07:06:e2:a1:ca:5d:97:f4:68:d0:bd:b0:5b:b9:98:26:
fa:8a:f6:12:58:2b:dd:3e:b7:38:f1:bd:48:33:9c:70:67:85:
b4:db:56:7c:87:4a:dc:87:57:32:58:8b:fa:7b:ee:16:72:fc:
6e:91:8d:78:4d:e0:af:b4:5b:a6:bc:5e:ab:8f:c1:e2:3e:e3:
98:76:07:e2:70:36:13:5d:91:1e:a8:75:c1:77:77:26:c5:3b:
70:e8:4f:13:7e:5d:a5:8f:3a:62:06:e5:3b:10:4a:8e:e0:c1:
79:3b:48:b7:ae:e9:e8:13:a8:08:b8:58:0a:52:89:c7:24:fd:
86:af:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:54 2026 by rpki-client