Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File: 96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier: YLLpB1PkkRVkgi70T5PJmImG9/O9IJxOXJfyrtn8p6U=
Subject key identifier: 50:A5:4D:15:AA:AA:59:1B:E0:D7:77:73:3A:8F:AB:F2:0F:8C:69:43
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer: /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial: 019D25BA2F249E874142A04DAB9F94428283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number: 0ABE
Signing time: Wed 25 Mar 2026 16:00:51 +0000
Manifest this update: Wed 25 Mar 2026 16:00:51 +0000
Manifest next update: Thu 26 Mar 2026 16:00:51 +0000
Files and hashes: 1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: JzlalAZ+/0S+8RyTmfD00RfpGJifALE7XM7oqJOQuzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:2f:24:9e:87:41:42:a0:4d:ab:9f:94:42:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
Validity
Not Before: Mar 25 16:00:51 2026 GMT
Not After : Mar 26 16:00:51 2026 GMT
Subject: CN=50a54d15aaaa591be0d777733a8fabf20f8c6943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:40:50:30:3b:b6:68:c0:9d:46:56:62:e1:
50:72:77:54:10:45:ee:43:57:1a:55:ac:96:f9:f7:
2f:10:23:16:c0:ca:1d:b7:b5:9e:9f:e5:40:45:a6:
f6:79:c0:eb:5b:b7:90:7d:44:42:40:68:80:b5:eb:
5a:c6:e7:2e:d2:59:8b:f8:d1:b2:ec:cd:82:54:60:
bb:8a:66:ab:42:a6:70:84:8a:53:ab:33:b7:8c:1c:
a5:6c:3f:9a:b9:43:ea:2f:e8:99:b9:5e:d1:09:91:
27:cf:1a:1a:f4:1c:66:92:1d:e5:95:1c:c8:e3:45:
5d:db:07:3a:f2:a1:4c:98:dc:a0:05:38:45:0a:3a:
f3:c2:23:e3:e0:e5:4a:03:b0:8b:74:af:32:83:86:
45:18:89:a2:cf:0e:2d:32:49:80:75:4e:e9:64:2c:
b7:58:2d:d4:e7:a7:a5:de:cd:41:5d:69:79:74:0e:
b0:17:e5:00:c5:92:2f:9f:63:3d:82:f0:19:69:0b:
6d:17:5c:ea:99:6b:f4:a5:eb:58:b0:6f:e2:8d:1d:
62:fa:74:87:a4:bc:b4:bd:02:06:ca:af:e4:f5:d4:
ff:0c:77:18:55:2d:cd:65:57:2c:1b:d4:b8:09:72:
2a:18:94:ea:c4:09:47:da:6b:fb:0c:f1:a7:bd:f3:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A5:4D:15:AA:AA:59:1B:E0:D7:77:73:3A:8F:AB:F2:0F:8C:69:43
X509v3 Authority Key Identifier:
keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:3f:7a:49:5d:fe:58:d6:92:53:53:75:48:08:ee:61:41:
97:f0:a9:c7:00:59:bc:5f:2b:11:9c:b4:c7:2c:c4:8d:b1:d1:
64:28:fe:b9:54:75:56:0b:b6:4a:14:e7:1f:cc:11:5e:b9:8a:
2e:e6:02:d4:f6:c0:4d:8f:b9:d9:d7:27:6d:0e:64:2a:32:24:
72:12:f3:36:d2:3f:66:3d:18:02:9f:0c:83:f0:e1:86:26:98:
1c:65:fc:71:d6:6d:c6:2c:ab:b0:a4:44:f9:aa:7b:fa:62:15:
60:e4:c9:b8:ae:7d:6a:0a:04:cb:36:11:f1:7e:c4:d0:17:d0:
7f:fc:d7:87:48:69:cf:fb:d1:08:10:d6:ea:c3:0e:fd:6c:2e:
e3:73:5a:e9:a0:a9:3e:60:73:91:52:3a:10:9a:cc:9e:85:5f:
d2:56:b6:ec:82:1e:b0:6b:0c:e0:26:cf:7b:f9:7a:9a:f1:de:
65:57:1f:ef:e4:e2:54:4e:0b:9c:24:e1:ec:6b:d1:1c:42:c5:
a1:63:09:c6:1c:3b:54:37:98:36:ad:2b:ec:2b:80:b2:d1:7b:
ef:82:90:4c:96:f2:c8:7a:27:0c:d1:46:98:00:50:e9:13:ee:
7a:ad:0b:13:49:97:91:15:ee:07:c8:d3:9f:a7:bd:2b:df:0b:
06:fe:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:34 2026 by rpki-client