Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: qpe24LcTYOejxi391vQIuMCsPK09B+qWhHONr6mkKt8=
Subject key identifier: D2:12:3E:D8:5E:7D:2F:52:CD:3E:23:7C:EE:2B:62:24:88:8A:ED:4D
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 019D281673AA673C5D3DBF4C05F4955C8A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 142A
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: Dys2d6csdF3OfcPN2CIvQK2wkAhuPNJJ1GHlwiRmuSQ=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:73:aa:67:3c:5d:3d:bf:4c:05:f4:95:5c:8a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=d2123ed85e7d2f52cd3e237cee2b6224888aed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:0a:56:2e:38:a0:5a:2f:80:d3:51:14:da:
e9:07:72:44:2d:ec:38:6d:dd:36:47:44:b6:00:48:
33:b8:f1:51:ce:8a:83:1d:ed:c4:b4:73:07:95:f8:
56:0a:5c:94:7c:ff:73:76:27:91:cf:f7:52:d4:d9:
a2:4a:81:2e:ce:31:b3:37:31:aa:02:58:58:95:4c:
6d:01:8c:55:64:63:64:a9:5d:a8:54:64:6b:d2:97:
46:44:3a:e0:31:07:26:af:0b:4a:c0:e9:44:26:4e:
72:30:38:12:cb:84:08:ca:fe:11:37:56:c5:a0:41:
e8:11:09:b6:5a:1b:f5:f0:89:e2:34:d7:4e:88:13:
95:6a:bf:9f:62:f7:fa:f2:d0:b7:b2:3a:79:d1:54:
9a:fb:ae:62:e7:ac:82:a7:f6:c4:8e:bc:bd:77:48:
95:72:28:71:b6:0e:03:a2:f2:ac:eb:1a:ec:b5:0a:
71:b0:6d:af:1a:9e:39:e3:d4:35:ac:6b:a1:cb:d5:
44:a5:d5:af:89:33:66:00:f0:e5:d7:b2:fc:ae:ea:
ba:d1:bd:0b:03:c4:4a:5e:5f:cd:7e:5c:b9:9d:70:
ff:6f:1c:3a:e8:82:a5:c2:4c:f5:3b:b5:7e:1c:29:
0e:39:7e:a8:3d:92:bb:a5:75:b1:41:2a:a0:62:8d:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:3E:D8:5E:7D:2F:52:CD:3E:23:7C:EE:2B:62:24:88:8A:ED:4D
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:4f:af:81:03:ae:e9:ab:7a:42:3f:1d:ec:01:8b:50:df:
ec:d7:7c:69:04:51:45:8f:ca:bc:99:8a:d1:8e:c6:9f:c8:df:
2f:a2:5b:be:02:1f:50:e6:89:5b:7f:28:c2:89:b9:ee:df:58:
de:f5:1a:fb:1a:4f:88:f1:8d:d5:fa:38:1d:06:d0:01:83:e5:
0f:ba:4e:7b:22:0d:4c:30:22:56:f1:cd:b0:3d:3f:4e:01:10:
61:21:35:77:46:b1:7e:5e:94:d2:52:bf:b3:c3:d9:35:52:c1:
45:9a:dc:43:df:e5:f8:86:c1:c1:ee:ea:c0:5e:ea:ce:73:a3:
98:1a:51:d9:c6:7c:74:4c:14:ce:de:16:13:67:e5:2b:a0:c0:
4d:61:44:4f:d5:6e:10:d0:61:0e:5f:89:34:c4:13:45:94:4b:
b4:5b:16:f6:48:52:96:98:18:a4:10:86:c6:0e:c6:68:77:9b:
de:8f:89:c5:ee:2b:5b:98:ac:25:5e:98:2b:6c:21:df:3a:e9:
f4:60:63:2c:91:1a:13:9d:35:ee:a5:94:24:32:12:4c:09:be:
20:11:6e:7a:c9:34:a0:a2:fd:79:6b:38:60:67:3c:bf:64:bc:
7f:3d:38:58:64:35:f2:f2:f8:cb:8c:c1:ff:68:f3:c1:ee:b5:
1f:61:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:50 2026 by rpki-client