Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: kObhax8d9lJRX36A0QpaJi86it1WHmZGPxAIvjqkpM8=
Subject key identifier: 6B:05:8F:AE:37:E3:E6:B1:A5:A0:14:5D:4A:97:9B:B2:3A:3C:6E:D2
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 019D333ECEE85945137B450C26121DF9A4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 085A
Signing time: Sat 28 Mar 2026 07:00:47 +0000
Manifest this update: Sat 28 Mar 2026 07:00:47 +0000
Manifest next update: Sun 29 Mar 2026 07:00:47 +0000
Files and hashes: 1: 9IUhfW_W_atT4Rdt9waLsluclNM.roa (hash: Yv60tx6MkUHbKTa9fL1Ng3xfyWGESFLss/yfVo5hLwk=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: TclRFcRdMMQ8TlhwEl+g3xy/4vrnH47cr75uXZr8hCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:ce:e8:59:45:13:7b:45:0c:26:12:1d:f9:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Mar 28 07:00:47 2026 GMT
Not After : Mar 29 07:00:47 2026 GMT
Subject: CN=6b058fae37e3e6b1a5a0145d4a979bb23a3c6ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:66:1c:04:63:97:e9:a9:60:ed:2e:e5:b9:
95:bf:bb:70:18:57:7c:c6:2a:cf:68:ca:93:4c:c4:
f3:f7:c4:53:cb:fb:d3:e0:e0:d9:25:1c:74:7c:ed:
a2:e8:28:b1:93:a1:35:7d:92:ff:3d:85:28:29:26:
89:20:7d:58:b0:8e:4f:f3:69:4b:71:22:b7:e3:88:
e1:58:8e:57:a7:ab:60:d2:eb:5c:df:52:c3:3f:89:
57:32:92:c6:64:4d:5c:88:64:0a:cb:27:49:f3:f0:
55:ca:6a:cd:45:7b:0c:b1:d9:72:e4:6d:5c:2b:5d:
1c:e3:7a:47:38:d5:ab:2e:54:bf:80:57:e6:9a:b1:
29:d0:20:e3:fe:b9:08:af:1e:47:6c:d8:20:56:1a:
04:c4:a0:f4:29:2f:3e:85:8e:e6:93:8d:2e:2a:32:
20:0c:93:c4:ed:a5:d1:18:bf:f0:9e:41:4d:10:d9:
a2:c2:b1:00:83:98:b1:26:06:7f:27:26:58:12:20:
7a:91:19:b6:20:e2:46:f8:0e:58:2d:cd:de:0b:40:
d7:ff:ac:7d:c1:af:4a:02:ac:68:a9:a8:28:8d:7d:
12:e7:a2:df:72:c2:09:18:07:b4:0b:06:2b:06:75:
eb:b5:a7:c4:bb:34:2d:0e:25:90:bb:3b:78:0c:5b:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:8F:AE:37:E3:E6:B1:A5:A0:14:5D:4A:97:9B:B2:3A:3C:6E:D2
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:1f:9c:80:37:0e:79:c7:69:4e:2f:fe:6f:70:b7:1a:6a:
e1:af:86:68:f1:ce:18:fb:0a:eb:cc:3e:27:8a:d5:b2:8b:94:
f2:64:57:f6:ea:44:77:07:f2:f0:d4:90:4c:81:90:19:36:f4:
9a:4d:bf:f6:d0:0a:7b:62:36:1e:d7:cc:3b:de:d2:2a:23:18:
57:35:e7:9b:79:f3:95:c6:b4:de:47:dd:e3:56:2d:04:7c:3a:
18:36:bd:fa:d4:4b:f1:dc:73:73:2c:a0:44:0f:10:2d:dd:7b:
de:b8:fa:67:76:ac:32:2c:7a:b7:04:fb:99:29:93:a6:74:df:
73:5c:54:ba:95:0e:0b:fd:df:0e:27:26:61:d5:95:60:76:cc:
bb:e6:68:d6:db:cc:47:f8:25:6b:f8:f7:24:40:30:5a:c2:2a:
d0:d6:7b:87:f3:7b:ca:28:ba:09:a3:69:01:8b:17:fa:a6:28:
39:42:b5:66:bf:d3:c8:58:b4:a0:68:92:94:22:05:51:33:5d:
04:f4:3a:9f:c8:ac:d4:57:6e:a0:a4:c2:22:05:4e:b6:c3:31:
88:80:dd:4b:3a:16:fd:6f:5a:f5:b1:21:db:c6:bf:40:ed:d4:
cc:9d:8a:c9:99:17:8b:a0:77:f6:4a:bf:42:71:14:8a:1d:b8:
71:90:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:18 2026 by rpki-client