Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: sg+GSXrZxg6w4OEQ/iCYEVXdSzYz4S3sUOMrg4cE+W4=
Subject key identifier: 92:25:CD:04:0B:DF:5E:A1:92:98:FC:5A:46:BD:31:4C:5A:85:C4:AF
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019D29CDBA11838444D17A9C3534741AC133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 139F
Signing time: Thu 26 Mar 2026 11:00:41 +0000
Manifest this update: Thu 26 Mar 2026 11:00:41 +0000
Manifest next update: Fri 27 Mar 2026 11:00:41 +0000
Files and hashes: 1: 9PmCAKMM7Gx59ZxoYK2IciFfbIk.roa (hash: 3XM8c/6mZWGuvlojek43syl+Uho1Ahf7pi/fCF9cLlI=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: 45krWKZjxz+O4VByDMYXGWuZn8QUqxMiVRJtT3RhEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ba:11:83:84:44:d1:7a:9c:35:34:74:1a:c1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Mar 26 11:00:41 2026 GMT
Not After : Mar 27 11:00:41 2026 GMT
Subject: CN=9225cd040bdf5ea19298fc5a46bd314c5a85c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:40:6c:a2:65:da:37:46:13:21:e0:e4:d7:
37:89:61:d2:ba:dd:09:0e:74:3b:31:dd:9d:e1:c2:
52:cb:44:ab:d3:cc:71:39:4c:e7:a8:32:8b:4c:44:
63:fc:0a:04:dd:7f:d0:15:e3:0b:d1:e8:d8:98:b5:
24:f9:66:85:2f:d6:25:ed:cb:35:29:bc:bd:2b:f5:
5d:2f:79:c8:ed:c2:af:14:aa:b9:ec:01:4b:42:28:
06:44:8d:96:5e:5d:38:fa:94:ea:ea:4f:a1:b5:72:
c3:ff:96:e8:af:5a:af:92:2e:7e:18:57:f7:d8:fe:
c6:69:7b:05:d0:f9:5a:c5:7d:da:bd:c8:a1:8d:c8:
ae:21:8b:87:4d:f2:48:69:d5:d8:79:6a:61:92:03:
8a:4f:80:c3:82:20:0f:0c:f6:3a:a8:2e:ca:57:b8:
c4:85:83:18:84:33:6c:d6:5d:ce:48:84:35:fe:0b:
6f:db:42:41:dd:ba:6e:cc:04:db:30:59:d6:3c:98:
db:2c:ef:80:62:3b:ae:bc:7e:a3:62:63:9f:60:80:
d0:fc:6e:42:c4:93:65:14:9a:97:08:c9:31:74:60:
f2:7e:3e:92:34:dd:42:e9:80:6f:c3:bf:25:5d:57:
62:22:66:00:27:ef:71:cb:e2:75:72:aa:60:b4:da:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:CD:04:0B:DF:5E:A1:92:98:FC:5A:46:BD:31:4C:5A:85:C4:AF
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:23:c0:69:f3:f2:4a:ff:b2:e6:8c:8c:01:60:39:93:77:f7:
d2:56:e9:00:ea:a4:29:45:5e:93:8b:3f:32:20:10:66:a7:40:
d9:e8:6f:de:6b:d7:64:3c:c4:f5:9d:3f:70:2f:01:3e:3d:57:
25:40:0d:bf:20:ff:47:33:32:b0:07:f0:d1:14:24:c7:f7:85:
b3:2f:a3:7c:9e:1e:2b:67:64:57:f4:4d:14:f4:94:02:cd:eb:
89:4b:66:39:0e:10:3a:86:0d:5b:f3:62:d0:b4:9a:21:f6:fb:
5d:c4:8e:60:58:e2:cb:46:c6:ad:6b:e7:f5:57:df:29:d4:d4:
60:61:99:c4:22:33:b6:09:50:84:e8:2a:5b:1e:97:23:f8:8a:
62:f3:3e:a6:73:2f:5d:e9:5e:56:ea:b5:e3:1c:60:53:5e:da:
c0:a8:83:d6:3a:79:8f:e1:f6:2c:25:cd:7c:ed:9d:3b:e1:a3:
fe:f7:eb:47:e7:53:3f:2b:2f:74:22:2d:54:b1:50:7b:89:9e:
a5:5a:44:be:ef:2f:d2:51:60:5f:88:ab:82:3a:96:19:db:38:
61:c3:b6:5d:b9:19:f3:8b:35:bc:fb:68:da:3b:a0:2f:8d:14:
68:4d:ac:a0:7c:cb:4a:0d:da:32:45:11:00:cb:2a:f9:b2:3c:
3e:98:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:48 2026 by rpki-client