Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
File: C96-7pRQTNSkVQkebHwCK21Co98.mft (raw, json)
Hash identifier: dbvMEhqp3brInBI+LdWxoboysa/IE448r7zj2dofa/Q=
Subject key identifier: 9C:85:1D:E4:A6:23:42:AA:61:2A:9F:2E:C4:72:2A:34:AE:A0:81:05
Authority key identifier: 0B:DE:BE:EE:94:50:4C:D4:A4:55:09:1E:6C:7C:02:2B:6D:42:A3:DF
Certificate issuer: /CN=0bdebeee94504cd4a455091e6c7c022b6d42a3df
Certificate serial: 019D25BAB19E3E7D36F84F7CE915A6EA40BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C96-7pRQTNSkVQkebHwCK21Co98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
Manifest number: 71
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: C96-7pRQTNSkVQkebHwCK21Co98.crl (hash: LYzvBllOx2JDETP3dEvHfEhFIOfN5GBT9E4al0NjSng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
rsync://rpki.ripe.net/repository/DEFAULT/C96-7pRQTNSkVQkebHwCK21Co98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b1:9e:3e:7d:36:f8:4f:7c:e9:15:a6:ea:40:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdebeee94504cd4a455091e6c7c022b6d42a3df
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=9c851de4a62342aa612a9f2ec4722a34aea08105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:17:7f:b8:17:4c:f1:f4:cf:4e:2c:d1:5b:
f6:fc:47:f6:c8:a6:76:db:33:d4:a9:75:f3:c9:fc:
89:e2:ee:7a:ca:85:ce:9c:ac:81:3d:fa:6c:e5:16:
e5:7e:1a:cf:1e:41:b8:fa:bf:60:98:b8:db:b9:e7:
23:ae:11:5a:b1:4d:ae:e7:12:11:1d:1b:a0:41:a3:
04:6b:b5:d5:67:d3:8f:e3:72:7a:1d:d2:f6:c5:fa:
61:b5:af:b1:a5:ae:9e:e2:d0:e7:e7:90:93:ea:a3:
9b:4b:74:54:cf:24:42:bf:f2:ad:d8:2b:e3:f7:f7:
d1:fc:dc:38:23:0b:27:3a:fc:b4:c7:f8:e8:26:12:
24:03:eb:ed:8b:ea:4e:10:80:c4:ae:33:ee:d9:1b:
96:60:79:1b:ed:65:3d:40:51:63:c7:dd:ec:da:36:
81:d4:2a:ab:d4:c5:64:00:f2:71:15:d7:60:d3:ba:
d1:86:61:20:0c:8f:07:b5:40:c7:15:dc:3c:a9:43:
ad:69:79:c1:33:58:11:83:61:33:c7:ba:fb:0e:57:
93:61:95:ed:62:1e:91:50:00:cd:40:3a:9d:92:a6:
6d:6e:68:ae:70:cc:41:fd:91:e0:ec:a8:1b:88:5b:
ff:08:a6:7e:85:5c:4a:88:5a:9b:29:86:85:8e:8e:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:1D:E4:A6:23:42:AA:61:2A:9F:2E:C4:72:2A:34:AE:A0:81:05
X509v3 Authority Key Identifier:
keyid:0B:DE:BE:EE:94:50:4C:D4:A4:55:09:1E:6C:7C:02:2B:6D:42:A3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C96-7pRQTNSkVQkebHwCK21Co98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d9:79:15:af:de:45:65:89:00:61:c8:8c:cf:99:5e:79:4a:
d6:ab:2b:01:62:6f:b4:0b:4b:42:e0:a8:a5:8b:76:32:d5:03:
e0:f7:f5:ce:6f:20:35:fb:99:83:6c:8d:81:71:74:5e:51:ae:
59:c1:41:ec:ad:d0:ee:2c:3c:f1:86:ba:e5:8d:c9:a9:ef:d2:
58:53:07:d0:9b:3a:d7:89:5f:5a:51:7a:95:83:4e:32:18:7e:
c0:c1:db:97:b3:08:74:a4:9b:c6:8c:39:15:cf:c7:d0:79:4e:
85:fa:ed:ce:59:70:ae:be:a9:6a:1b:2f:72:45:e0:bc:3c:89:
84:ee:e9:3e:78:dd:a1:b6:ee:4d:89:3e:2c:93:83:0c:81:81:
66:26:d4:d3:3b:4b:b3:72:75:0f:ce:8f:0d:70:52:51:13:2f:
e2:98:a7:c4:ac:ec:60:b2:cb:8a:bd:49:38:73:a8:30:48:dc:
f8:29:6c:11:d1:c7:d7:0e:5e:b5:32:56:39:e3:21:1d:c0:8e:
ea:a0:12:2d:08:a1:c4:05:e8:7b:29:36:d7:d0:24:be:03:ce:
30:7f:72:dc:44:28:ef:51:03:3f:0c:44:7f:8b:af:83:ae:57:
c5:ca:a2:bd:3a:66:59:b4:94:2e:33:d8:79:bf:24:8e:eb:2a:
1e:c7:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:47 2026 by rpki-client