Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: qfTvPteXb0DrSh08ipHwb0YVrI5jCqAfVIz/Owe+eDI=
Subject key identifier: ED:E7:92:61:2C:84:FA:C2:08:50:FF:1A:D0:04:AE:67:25:07:D5:46
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019E295E3DFE2B8CDAEC5B04C03074267BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 10A5
Signing time: Fri 15 May 2026 02:01:42 +0000
Manifest this update: Fri 15 May 2026 02:01:42 +0000
Manifest next update: Sat 16 May 2026 02:01:42 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: ZmMIkCm2rmumQv5wJjA/YrBIDFS23tvu7cZmeLWHBco=)
2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:3d:fe:2b:8c:da:ec:5b:04:c0:30:74:26:7b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: May 15 02:01:42 2026 GMT
Not After : May 16 02:01:42 2026 GMT
Subject: CN=ede792612c84fac20850ff1ad004ae672507d546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:14:de:48:04:64:07:9d:31:2e:45:02:0c:
ff:a7:1e:cd:94:ad:c1:df:79:f4:ff:4c:48:00:31:
f7:16:2c:5b:46:f7:b0:0d:4f:01:f8:49:b3:ba:f2:
12:42:1d:31:b3:13:14:c1:42:cc:6a:57:00:9f:36:
0e:b6:79:d5:46:8b:22:5e:d3:ba:21:b2:a8:41:46:
7b:d5:ed:f2:0b:35:a4:51:8e:8a:6b:e4:54:63:ae:
d3:66:8c:37:9c:33:34:05:54:52:7b:70:68:02:81:
09:4a:bb:9b:9b:0f:e9:e0:66:05:30:49:a8:eb:62:
9a:0a:16:b9:c8:0b:8c:92:65:cd:1f:0e:40:9f:77:
35:db:22:38:a7:68:7a:e5:f3:50:c8:c2:34:d9:5c:
90:a9:2e:46:4c:26:76:51:62:49:cd:fc:a4:06:11:
e2:14:8e:f3:49:90:fd:02:55:8c:61:60:18:8b:db:
25:66:79:1e:a5:88:c3:41:c6:fe:25:bc:fb:45:4d:
98:ff:12:99:5c:f8:35:e4:cd:2d:ab:6e:10:be:2e:
a6:5a:45:5f:d1:7c:80:f9:a8:bd:22:c0:ab:e8:5b:
8b:2d:62:89:72:42:84:96:cc:d5:83:53:c3:ef:5a:
bb:0c:40:ae:3a:5f:2b:dc:26:59:1d:52:db:f3:eb:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:92:61:2C:84:FA:C2:08:50:FF:1A:D0:04:AE:67:25:07:D5:46
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e0:44:02:f0:60:aa:36:16:56:72:6c:22:dc:c4:eb:68:2a:
3f:08:6d:d0:71:07:43:0b:fa:b8:6a:0e:cc:46:84:46:05:e5:
bf:53:f9:a4:d6:e9:ea:77:92:fe:0f:2d:a4:5e:8c:cc:4f:cb:
0d:e4:9c:de:13:af:7c:9d:25:5f:da:dd:d2:df:ae:76:b2:04:
96:c5:34:59:8a:88:20:88:5a:c1:a2:04:08:8a:2d:1e:f9:bb:
4f:4a:68:ae:6d:eb:61:31:f7:a1:df:c1:48:be:c5:1d:81:78:
fe:02:18:f2:3f:6d:9c:07:83:fa:4a:3e:5e:dc:39:37:bf:f0:
b5:4f:51:b0:7d:50:06:41:ce:77:31:0d:fc:5e:a4:3a:04:c7:
ae:4a:f4:c1:94:41:6f:79:25:e0:9d:68:b2:b5:db:73:1a:e9:
7b:18:1b:89:da:34:c1:51:44:09:29:64:76:c2:7a:34:38:93:
4f:6a:a6:d4:8c:51:d2:ff:32:e7:45:43:9e:c3:a8:ea:49:9b:
cb:a6:d1:3b:2c:57:2f:47:f9:44:5a:5d:d2:b2:6e:f6:f6:8f:
c6:b0:bf:6a:35:19:78:c3:25:42:9c:2a:cc:b9:79:1c:37:77:
eb:b5:1e:70:20:2c:99:0d:c6:1d:a2:d4:95:09:51:d8:56:18:
c2:a7:40:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXj3+K4za7FsEwDB0Jnv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNmE5MjY3YjE4YjM2ZDgyODg5MGE4NjM4N2YzMTBiODRj
MDRiNjMwHhcNMjYwNTE1MDIwMTQyWhcNMjYwNTE2MDIwMTQyWjAzMTEwLwYDVQQD
EyhlZGU3OTI2MTJjODRmYWMyMDg1MGZmMWFkMDA0YWU2NzI1MDdkNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpAU3kgEZAedMS5FAgz/px7NlK3B
33n0/0xIADH3FixbRvewDU8B+EmzuvISQh0xsxMUwULMalcAnzYOtnnVRosiXtO6
IbKoQUZ71e3yCzWkUY6Ka+RUY67TZow3nDM0BVRSe3BoAoEJSrubmw/p4GYFMEmo
62KaCha5yAuMkmXNHw5An3c12yI4p2h65fNQyMI02VyQqS5GTCZ2UWJJzfykBhHi
FI7zSZD9AlWMYWAYi9slZnkepYjDQcb+Jbz7RU2Y/xKZXPg15M0tq24Qvi6mWkVf
0XyA+ai9IsCr6FuLLWKJckKElszVg1PD71q7DECuOl8r3CZZHVLb8+uO6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3nkmEshPrCCFD/GtAErmclB9VGMB8GA1UdIwQY
MBaAFN9qkmexizbYKIkKhjh/MQuEwEtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUt
OTlmN2JlY2E4NzViLzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUtOTlmN2JlY2E4NzVi
LzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+BEAvBg
qjYWVnJsItzE62gqPwht0HEHQwv6uGoOzEaERgXlv1P5pNbp6neS/g8tpF6MzE/L
DeSc3hOvfJ0lX9rd0t+udrIElsU0WYqIIIhawaIECIotHvm7T0porm3rYTH3od/B
SL7FHYF4/gIY8j9tnAeD+ko+Xtw5N7/wtU9RsH1QBkHOdzEN/F6kOgTHrkr0wZRB
b3kl4J1osrXbcxrpexgbido0wVFECSlkdsJ6NDiTT2qm1IxR0v8y50VDnsOo6kmb
y6bROyxXL0f5RFpd0rJu9vaPxrC/ajUZeMMlQpwqzLl5HDd367UecCAsmQ3GHaLU
lQlR2FYYwqdAhQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:07 2026 by rpki-client