Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: TAJejsBg/TtP2DkR6u0nf0cj18dznCrI2//Vp98Evu0=
Subject key identifier: F5:31:0A:C8:C9:70:00:EC:B9:C9:B8:1E:CA:16:A5:92:1F:8B:D0:7B
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 019D2B4F3236B75F374C37CD86C4AAA348EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: 033E
Signing time: Thu 26 Mar 2026 18:01:43 +0000
Manifest this update: Thu 26 Mar 2026 18:01:43 +0000
Manifest next update: Fri 27 Mar 2026 18:01:43 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: U3dcVD2MGLY6iKAm/qreYdE+lvbZBkeheCLl9nxDFuE=)
2: LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa (hash: 9dyJy9KVa6+GZ+Ne1KA1oy9opcxU4ZQ1lYWYUM4EkwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:32:36:b7:5f:37:4c:37:cd:86:c4:aa:a3:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Mar 26 18:01:43 2026 GMT
Not After : Mar 27 18:01:43 2026 GMT
Subject: CN=f5310ac8c97000ecb9c9b81eca16a5921f8bd07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:d8:0a:fc:39:43:15:aa:e6:bb:b9:98:df:
1b:09:e9:7c:df:5d:dc:40:75:2d:ab:b0:09:71:ba:
fe:a4:69:2b:20:6f:8d:1f:e9:6e:3a:8a:e8:fd:1d:
c6:04:4b:1d:ba:bf:d8:0c:cb:d7:96:5a:3b:4b:9c:
f1:a7:e5:6c:83:a2:62:5a:6d:6e:a0:99:50:f4:70:
ab:a9:07:68:88:c3:ce:3b:14:06:9e:a0:cb:ff:06:
dc:4e:f0:f9:fd:9b:d5:82:6f:ca:31:00:fc:cb:31:
d9:7c:46:a4:b4:8c:76:1f:ff:b1:5c:42:70:c8:e5:
ba:7c:a8:4a:15:92:c2:4b:bb:7e:cb:68:ca:6f:5c:
5a:a2:17:6e:70:84:28:1a:93:fd:89:d5:ab:3d:e6:
a5:f6:49:45:16:d6:c5:ae:68:ab:f6:77:c2:c4:12:
8e:bf:f2:3a:4c:a0:bf:0f:45:69:01:27:1d:7e:c6:
23:2e:a9:3e:0c:0a:1f:fc:89:95:98:22:a3:8a:c3:
cb:8a:5a:a4:54:92:85:f3:37:cc:ec:c9:62:52:fc:
7b:f1:5e:6f:36:91:2a:2c:65:22:2e:d6:a6:c1:0c:
2f:0e:24:64:4f:f4:16:f6:3c:05:65:25:1b:b8:93:
55:f8:8c:9b:46:7b:99:e3:b0:d9:e3:bf:6a:17:8c:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:0A:C8:C9:70:00:EC:B9:C9:B8:1E:CA:16:A5:92:1F:8B:D0:7B
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:d6:f2:ec:b9:7b:04:26:ac:42:d2:5f:ca:81:77:c6:ba:
2e:8c:c1:93:3f:0e:00:7c:ad:a3:72:2a:ab:2c:a4:4c:70:39:
fa:75:61:e3:78:84:b8:33:00:4d:7e:04:fd:a5:a5:0c:bd:3b:
19:f9:74:34:74:b0:cc:eb:9f:7c:bd:7b:21:9e:62:b6:87:aa:
87:f9:b6:01:e2:8c:25:02:83:73:e0:aa:3b:c9:b1:17:77:ff:
49:a6:2f:03:25:3a:5f:df:a6:30:fa:fa:43:8d:6f:ab:15:dd:
1d:ea:90:bd:95:80:cf:47:71:8a:24:d8:18:9a:61:ca:11:cd:
c1:e5:e0:6d:4a:25:a8:55:23:91:ad:03:57:70:79:7b:6e:95:
0b:f8:0f:b6:3e:3d:6c:a5:3f:eb:24:fd:5b:a5:22:f7:40:92:
8e:9e:68:f3:b8:9e:e9:0d:93:df:27:34:f2:c2:ff:13:ee:05:
fa:ea:0d:2d:6b:71:0c:9e:08:98:9d:0e:ba:4d:86:ca:f8:95:
2b:49:45:51:98:c3:48:04:6e:21:a3:b3:85:83:2c:bd:1a:c3:
cc:a1:d8:d8:e7:b3:96:7e:45:38:ed:39:2c:a5:d9:bc:b3:71:
e0:a1:14:19:73:23:ca:b8:d5:ad:3e:bf:ce:72:78:dd:c6:e9:
22:c4:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:25 2026 by rpki-client