Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: LBffJnnkzT5HoNncDQgXWv3heYp8iZUVPPxyD0MeAvg=
Subject key identifier: F0:6A:B2:68:2D:11:2E:2D:99:9B:1B:82:55:FF:39:08:4F:5A:83:C5
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 01A0F5D668D1BBCFEE14241011B55B56EE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 1219
Signing time: Thu 01 Oct 2026 05:01:04 +0000
Manifest this update: Thu 01 Oct 2026 05:01:04 +0000
Manifest next update: Fri 02 Oct 2026 05:01:04 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: IhRTpTxSmmnP5D1R/wM/1cHb6FfTMCPcm9crE7DiGik=)
2: 6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (hash: aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d6:68:d1:bb:cf:ee:14:24:10:11:b5:5b:56:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Oct 1 05:01:04 2026 GMT
Not After : Oct 2 05:01:04 2026 GMT
Subject: CN=f06ab2682d112e2d999b1b8255ff39084f5a83c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:34:2c:34:69:9b:ea:ff:58:e7:e5:1f:d1:
6c:69:48:9e:fe:e8:12:67:cc:88:a2:73:a5:c7:c8:
1c:12:83:2e:11:14:69:db:0f:52:37:db:e1:bb:d3:
ec:8e:39:33:96:56:9e:dc:6c:65:4d:24:04:4c:6f:
4d:e3:19:0e:64:b8:00:d2:e3:3f:07:00:85:05:85:
fc:17:f5:cb:2d:f8:75:6e:fa:e2:99:48:2f:69:4d:
d8:66:6d:4c:fc:63:a5:0e:9f:51:91:29:ef:25:9c:
a9:c7:d1:f4:db:1c:c7:25:a1:e4:08:4d:8a:9f:64:
e6:1a:8f:64:58:48:c0:41:83:86:e8:fb:1c:38:1d:
a6:b3:9d:0e:ac:36:4e:2e:5f:6a:7b:18:37:c0:ec:
74:97:e9:72:fa:ae:00:a4:c2:76:50:e0:39:28:92:
bf:a7:fb:1f:a3:7a:c1:37:aa:04:9e:b4:81:5b:17:
88:c6:e6:03:12:59:09:0d:42:a3:f2:2b:d9:14:24:
7d:9b:9b:a5:1f:bd:83:56:f5:9f:76:8e:da:9f:35:
e9:1a:4f:5e:5b:d6:2a:9f:55:14:99:cb:6c:e0:23:
a0:73:87:a9:c9:9e:5a:18:78:50:49:b4:d2:70:2a:
a6:b9:5b:d1:4b:32:9d:5a:82:3e:5d:f2:7b:29:a2:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:B2:68:2D:11:2E:2D:99:9B:1B:82:55:FF:39:08:4F:5A:83:C5
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fd:47:a3:dd:c9:b9:64:54:dd:76:2c:dd:33:c9:aa:07:ac:
62:79:8c:47:9a:60:81:83:9d:30:86:04:af:bb:60:26:16:22:
4a:b9:ea:59:d7:29:1d:4e:9c:0c:ea:d5:97:2b:04:d5:29:d3:
c8:6b:b0:d4:3b:3a:75:8b:13:0e:f0:97:52:7f:6c:0f:c4:03:
63:c8:c4:e6:c8:c5:97:8c:af:c1:71:fe:8d:93:e2:26:ef:0c:
c6:fa:92:8a:f3:8f:44:d4:79:6f:ea:ef:3e:b3:fd:74:70:03:
30:d0:7d:46:ac:3b:43:65:4e:95:4f:2f:51:d7:5d:a7:47:ee:
09:16:5a:2c:88:3f:67:47:73:0a:0b:d2:c5:15:61:0f:aa:cc:
a8:e6:42:b4:f3:82:7b:2e:41:d5:2c:1e:6b:55:47:7e:2f:02:
fb:64:e4:3f:c2:ad:01:d7:38:b2:3a:2a:ba:32:7e:3a:f7:53:
82:16:e8:38:53:af:59:fb:ed:98:84:c0:ef:27:31:c2:84:58:
4a:72:18:07:3b:84:1a:44:8b:46:bb:44:c4:c8:9c:aa:32:6d:
56:c9:69:f3:52:58:ce:40:ce:af:37:8d:2d:35:7a:9f:69:55:
ce:8e:96:8b:7a:40:37:f4:32:e1:2c:ff:ed:23:19:ad:34:b7:
f3:31:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:25:07 2026 by rpki-client