Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: igaYrJ4VwCbjEnAzulPh9FoCbdlYFWcdDssyqKMrOH4=
Subject key identifier: FD:76:21:A9:D6:43:DE:06:D2:46:D8:F5:04:26:7B:26:0C:14:2A:FD
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 019F921118057EF3829E168421147AF39366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 156A
Signing time: Fri 24 Jul 2026 03:00:21 +0000
Manifest this update: Fri 24 Jul 2026 03:00:21 +0000
Manifest next update: Sat 25 Jul 2026 03:00:21 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: D0uRX/XA9l9pfcNXSPEAAdG268J2yVsWCidsDVfmg+0=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:18:05:7e:f3:82:9e:16:84:21:14:7a:f3:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jul 24 03:00:21 2026 GMT
Not After : Jul 25 03:00:21 2026 GMT
Subject: CN=fd7621a9d643de06d246d8f504267b260c142afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:79:ca:95:66:19:69:bb:4f:83:7a:1b:85:
bc:df:33:15:9e:6b:4a:02:5e:08:fe:90:09:4a:99:
09:10:45:1f:f8:42:be:27:59:8d:03:22:82:4b:ce:
98:9b:4f:64:17:1a:d1:67:08:f7:b9:8d:b7:b2:7a:
1f:2b:63:04:ad:f5:ce:33:8c:cb:cf:df:7d:2b:05:
93:04:fe:56:42:1a:35:f6:17:ea:3c:8d:4a:1f:50:
16:2e:18:ae:b0:ca:22:76:0f:56:bd:2a:44:dd:6a:
f8:2d:f3:00:8b:c2:b3:23:66:c4:c8:fc:ea:9e:2d:
45:ad:ff:43:25:44:55:70:c6:e3:97:06:1d:97:b7:
74:96:36:98:82:5f:d1:20:bc:cb:30:0e:5c:2f:68:
c6:66:01:6d:38:56:f0:be:79:96:7b:37:ac:9f:d6:
8e:7f:58:69:77:fa:04:ff:4b:8c:d3:d7:f1:40:2b:
66:a9:57:63:de:1f:04:4b:7d:ca:a1:05:2d:07:be:
13:61:26:4e:16:8b:b5:a4:a2:60:a2:b6:16:87:ef:
de:65:74:4c:3f:c1:a7:16:15:19:0b:58:26:ea:0e:
dd:d0:3e:38:d2:6a:ff:79:30:e4:9f:6e:82:4b:2f:
f0:36:d6:d3:94:f1:50:22:d6:75:fa:68:29:a1:be:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:21:A9:D6:43:DE:06:D2:46:D8:F5:04:26:7B:26:0C:14:2A:FD
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ff:92:18:8f:2e:b5:93:7a:03:9e:c1:ee:9f:cf:df:d0:9a:
78:59:c6:06:bd:1a:11:dc:7a:60:4a:13:34:0e:f1:19:0a:95:
0b:d7:93:3c:a0:c0:76:ec:c7:b4:84:ec:b7:d6:72:58:a3:10:
19:41:10:c2:02:d0:2b:72:5d:73:5f:16:a4:e1:50:61:ae:7d:
c8:08:bf:6f:7c:3f:04:75:06:12:df:ae:cb:b7:2e:cb:fa:5a:
d4:18:6a:77:73:78:9c:85:94:2d:80:b4:64:27:64:ce:ed:02:
fa:c0:2f:fc:4c:1d:51:29:7a:aa:06:66:4a:f1:ad:a9:95:45:
3e:50:82:70:c6:76:51:af:b1:d1:43:1f:eb:02:b7:c0:42:8d:
33:76:ee:5e:e6:9b:8b:fe:1f:ee:d0:f9:b6:fd:23:fe:a8:03:
78:52:56:59:d2:85:ab:d2:a0:7e:a4:79:c9:34:f1:3d:70:ff:
6a:72:ce:06:41:f1:92:e6:6b:63:ba:0d:b1:f6:79:a2:8b:4d:
1b:47:27:ba:77:4a:6d:30:51:b1:ef:78:8c:21:38:60:13:a6:
8f:13:7e:72:49:d1:2e:f1:0e:90:7c:d1:25:85:19:2f:ee:00:
cf:72:20:b2:71:c8:8a:31:71:ed:62:7a:ab:b4:ed:cb:e8:21:
f9:46:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:43 2026 by rpki-client