Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: IMIjD+vum2O/G6EUMxMCrMVq39BsmDZmZ9Nt6+gnDPw=
Subject key identifier: 43:22:5F:26:3F:6E:DD:A4:15:AD:90:47:BD:2A:6A:4E:C7:36:74:90
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 01A0F00BD83A5C4CAD45ED992F5B0AA1B340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 1216
Signing time: Wed 30 Sep 2026 02:01:43 +0000
Manifest this update: Wed 30 Sep 2026 02:01:43 +0000
Manifest next update: Thu 01 Oct 2026 02:01:43 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: k3qqoyiQ9xqwtnxdrDYQiFmgukyI+rmpoR3j9ubITnY=)
2: 6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (hash: aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:d8:3a:5c:4c:ad:45:ed:99:2f:5b:0a:a1:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Sep 30 02:01:43 2026 GMT
Not After : Oct 1 02:01:43 2026 GMT
Subject: CN=43225f263f6edda415ad9047bd2a6a4ec7367490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:88:62:60:4c:e9:9c:bc:b4:b7:3e:30:8d:
35:26:87:78:0a:6e:d4:b4:61:5d:15:30:54:67:a3:
e3:2c:98:ac:dd:ba:c0:3e:4e:fc:11:02:bb:6e:ce:
b3:0a:f6:38:8c:49:27:04:f2:81:2e:41:d2:4e:8d:
5f:46:9c:5e:70:39:67:ab:b2:02:85:eb:42:10:5c:
3f:d2:06:80:ec:24:87:f0:d3:34:94:c1:7c:c0:9a:
f9:1e:39:f2:95:38:ed:e8:bd:63:74:5f:f0:c9:d9:
b2:4c:c3:10:48:d5:7e:a6:7e:a3:7d:f1:3a:91:c3:
1c:a6:0c:d2:a4:1c:e1:d6:b9:ac:95:8e:48:fc:14:
2a:6c:87:97:dc:46:75:71:43:30:70:a1:b3:7a:25:
78:63:9a:c6:a0:25:88:03:7f:1b:56:23:9d:67:6e:
65:b8:af:c4:7d:8f:5f:3f:70:00:bd:1c:a6:43:a0:
58:a8:cb:16:6b:b9:48:1a:da:fd:d0:71:91:38:70:
2e:a7:c9:16:d0:ec:dc:5c:10:12:a3:62:89:81:2e:
d6:1a:df:03:cd:6a:17:f2:81:22:d1:0e:9e:46:5a:
d4:bb:ae:e7:c3:a8:5f:39:d1:33:66:f4:d2:f6:db:
73:b4:ea:70:c8:46:2a:19:b4:7e:4a:d4:6f:37:ba:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:22:5F:26:3F:6E:DD:A4:15:AD:90:47:BD:2A:6A:4E:C7:36:74:90
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:fb:8c:41:6b:21:6b:93:56:50:2a:04:26:2f:6e:4f:b2:
ba:0a:e4:9b:ca:61:c0:b5:6e:f6:b8:13:b2:ef:6d:81:22:88:
dc:85:fa:74:0e:a6:c9:bf:de:4d:11:2a:38:84:d0:3f:31:37:
1e:84:2a:98:30:89:4d:61:7e:8d:f3:38:a4:4e:cd:93:8a:dc:
6b:18:74:ec:4a:38:d0:d0:b0:db:76:00:9f:fe:78:ff:38:98:
5e:f5:39:b4:44:bf:ef:39:f4:2a:77:d5:e1:73:71:62:38:b2:
5a:b2:b3:32:e8:19:41:7f:c4:49:19:a0:6d:08:99:ae:85:ef:
5b:5a:c9:b1:bd:9b:1a:77:0e:46:05:4a:9d:43:44:3d:92:ee:
71:ec:b0:ed:ec:af:14:fe:9b:cf:a2:f8:fe:5f:77:35:38:06:
8a:36:67:75:90:91:4c:e1:04:89:03:02:30:2c:d1:32:fd:f5:
a4:5d:99:90:0f:ab:67:d6:b4:0e:ae:fa:6d:22:50:95:ef:6b:
15:a5:3a:5a:9c:40:69:08:3e:b2:d3:39:35:96:35:0e:7a:05:
3e:60:bc:75:8e:23:3b:20:59:0e:0f:74:db:60:24:20:3a:11:
1c:37:5b:29:0a:b3:80:d5:f1:83:e3:1e:d3:3b:8f:fe:e2:24:
b9:89:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:02 2026 by rpki-client