Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File: 96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier: hzrnOzIbZEexKlEln/7A9pXnzLx+ZNluD5FjIF6TuSU=
Subject key identifier: 05:F8:AF:56:CB:90:AA:FA:45:81:8A:C2:97:93:DF:EF:0F:1C:00:8F
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer: /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial: 01A0D9F1E4E739AB39FE9E40077DDFF4DB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number: 0CA9
Signing time: Fri 25 Sep 2026 19:01:43 +0000
Manifest this update: Fri 25 Sep 2026 19:01:43 +0000
Manifest next update: Sat 26 Sep 2026 19:01:43 +0000
Files and hashes: 1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: pRshYsawYT3BaE3GEOxkEjGBS+X8LlgXywdwCQSA5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:e4:e7:39:ab:39:fe:9e:40:07:7d:df:f4:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
Validity
Not Before: Sep 25 19:01:43 2026 GMT
Not After : Sep 26 19:01:43 2026 GMT
Subject: CN=05f8af56cb90aafa45818ac29793dfef0f1c008f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:3a:89:a8:a2:8c:f6:42:42:3d:a3:1c:b7:
d7:e7:31:da:46:17:99:c0:9a:b6:2d:e7:f2:11:2b:
de:9a:ea:0e:05:9e:a4:23:18:d3:a9:78:6c:1a:e8:
c0:88:c6:f3:0e:54:8f:52:33:d3:5b:e7:ed:b4:30:
a1:ce:c8:e1:0b:c4:7d:0f:71:42:09:9b:2c:7d:24:
84:f2:15:15:ad:21:df:31:a6:5b:8d:7b:94:53:aa:
e0:b3:86:c6:aa:fe:5b:fd:e9:f0:f1:bd:06:4d:1c:
f6:ae:e3:cd:4d:43:e3:18:7a:92:bc:a3:03:16:59:
80:c2:a8:88:04:8f:c1:b9:23:e1:9e:f9:6e:63:8c:
8e:3e:bb:a3:eb:b8:f3:3e:2b:c6:3d:b0:02:a4:6d:
1c:78:6b:3f:7e:7e:27:07:21:d3:fd:a9:d0:43:29:
1b:64:e2:e6:f7:c3:74:3f:2c:79:90:d2:db:99:e4:
d6:bf:5a:29:6c:d8:08:1b:ba:fe:45:64:e4:dd:2f:
18:f5:1e:55:73:ce:bd:4d:87:c9:76:4f:72:97:d1:
94:7b:5f:df:34:56:8b:84:4e:cc:19:4b:f4:98:13:
0b:d1:c0:d8:f3:c5:fe:64:3a:69:2a:c1:24:f3:16:
36:15:42:94:a3:6f:e7:85:8c:5c:48:d2:80:5a:8e:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F8:AF:56:CB:90:AA:FA:45:81:8A:C2:97:93:DF:EF:0F:1C:00:8F
X509v3 Authority Key Identifier:
keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9f:32:4b:65:24:44:a9:dd:46:c1:8c:84:fe:0f:4e:2b:db:
42:bd:40:84:af:6f:0c:b0:0c:c1:c4:0f:bc:48:04:2b:e1:d2:
1b:44:d4:97:77:9e:75:e6:ff:92:bc:26:d9:9b:80:7b:af:4a:
f1:4d:6c:da:99:3d:96:c2:3a:c5:14:3f:b5:ae:6e:30:79:8c:
d9:3f:c1:5a:9c:d3:ba:39:d5:ff:54:2c:2c:c5:5d:ec:16:b3:
95:b0:6b:f7:81:66:08:3d:67:c5:ca:2f:1a:b5:9f:fd:f0:d1:
cf:d4:14:13:1e:62:90:d6:4b:0b:96:c5:6b:71:66:f0:53:8f:
71:2a:8f:6b:86:94:bb:31:5a:81:e6:25:0b:23:5d:89:53:34:
d0:a3:9b:d0:8b:ed:ec:ed:35:c1:70:06:bd:eb:cb:c3:d8:9d:
a2:f0:89:7f:6f:a8:3d:c8:4f:51:28:df:77:5e:ea:17:44:bd:
e4:bd:cf:a2:5e:30:1f:15:d3:19:bc:63:6d:a0:9a:59:9c:68:
5d:a9:60:95:c8:22:e2:a3:5a:6e:65:d6:0b:47:f2:63:07:43:
53:42:74:94:76:f8:0a:ba:eb:46:29:7d:39:66:5f:e4:5f:ac:
2b:ae:05:63:af:c4:16:a5:48:d4:6f:9a:21:cc:05:55:6f:60:
ae:08:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:10:24 2026 by rpki-client