Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: lClpn/bEMCf3ofslgellewt+BdZexuf3TqWWqW4hxas=
Subject key identifier: DC:B8:B4:81:72:D0:68:F5:2D:8A:EC:F4:6E:C8:A3:D4:80:97:70:CB
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019D37F6E00CAC55E25E019C584EC330268F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 1028
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: +ko5kAkEzWylGr/kZf3lu4tK1km2x/2Loey0Q71dEO4=)
2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e0:0c:ac:55:e2:5e:01:9c:58:4e:c3:30:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=dcb8b48172d068f52d8aecf46ec8a3d4809770cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:e2:0f:56:b9:c3:46:54:ea:59:b3:dd:46:
d3:c1:02:1c:6e:be:83:91:2a:47:36:c2:0d:d2:65:
ac:8f:6f:f4:88:68:11:1e:7a:0c:1c:75:78:e1:a2:
f2:0d:68:19:4d:e8:28:d9:8a:d8:2b:dd:e1:f8:81:
e8:aa:b1:db:da:06:7a:ba:78:24:63:08:4c:40:ba:
aa:cd:04:e4:e8:8c:87:28:20:a9:28:71:e9:8f:85:
bd:b1:d8:52:2f:36:fd:33:07:ca:74:09:4c:54:7d:
53:8e:ba:2e:6d:74:8d:bc:91:15:65:b4:df:c0:05:
e9:f8:b5:18:a5:a7:d5:62:90:58:40:40:84:69:95:
f5:a3:71:1b:75:83:9b:29:10:2e:78:be:eb:01:a3:
dc:a9:89:86:ef:ee:bc:80:a1:cf:45:ba:fd:14:3d:
08:d1:55:be:8a:41:29:da:0e:38:6c:7d:d0:86:98:
8c:b3:bf:09:92:e4:62:16:5a:1d:00:1c:12:46:79:
70:24:22:b8:72:5e:6b:0d:85:33:24:6e:94:f0:f4:
61:81:1b:c6:56:04:ee:9a:47:6c:3c:66:81:2b:ec:
a3:d0:08:87:78:11:d7:be:98:9d:e1:cc:b8:c9:48:
9c:7d:f2:34:89:66:87:ba:a0:9f:c2:6a:2f:dd:f0:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B8:B4:81:72:D0:68:F5:2D:8A:EC:F4:6E:C8:A3:D4:80:97:70:CB
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:4f:2c:48:44:ee:2c:97:c8:fb:d2:06:f8:58:5c:e2:b1:
be:a1:00:0c:db:81:65:1b:0d:5c:fd:9c:ae:fc:c6:4f:64:0f:
4c:39:2a:61:88:f3:5b:73:61:86:e4:a4:b1:e8:bc:46:4a:67:
f3:4a:c9:c6:cf:b7:06:83:de:e5:c4:9d:1b:1f:c0:bc:47:ad:
c6:5d:8d:b4:11:64:75:2a:fc:f7:14:f0:81:b9:54:87:16:ae:
4f:6c:e1:ec:ab:6c:1d:f0:b2:b6:00:f5:e9:11:fd:00:77:b2:
f5:cc:1a:39:a3:fa:12:62:5c:74:f6:4b:cc:7d:02:b1:c0:4e:
c0:c7:f7:57:a7:bd:3a:56:4d:0b:3d:97:c8:f0:05:dc:68:ff:
f4:cf:94:74:f2:d8:e1:11:3e:1e:86:50:f0:48:f3:aa:96:30:
73:1f:fb:6f:03:41:e6:69:5c:80:dc:2a:db:f0:2a:29:5f:59:
bb:27:17:27:ed:5d:86:98:ed:6f:be:9e:58:70:a3:51:6b:a2:
e5:9c:bb:7b:d1:a2:bd:45:18:61:ef:26:39:18:3a:6e:b6:2d:
be:5a:da:45:8f:87:de:25:de:cd:45:ff:7c:82:5a:dc:1e:aa:
96:8a:5e:47:48:6b:7d:2e:ba:67:50:d4:ad:e7:1f:e8:4c:38:
ed:d0:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:04 2026 by rpki-client