Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: JYywAzG4b1IiuJ5s2q6AAZGlKDR0oRWNtOEzCCVpn1o=
Subject key identifier: EF:97:8A:81:5D:9F:1F:5C:31:7A:61:ED:77:AC:D0:D6:C7:0C:66:E0
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019D2772CBD78573AFD774FF6FA87F1804EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1786
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: uDVg3iIjtRwQHHHcwBD6MBOtpu/tfJAuBihSA7RRGYc=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cb:d7:85:73:af:d7:74:ff:6f:a8:7f:18:04:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=ef978a815d9f1f5c317a61ed77acd0d6c70c66e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:bb:41:55:7f:30:1f:dd:8f:80:30:74:92:
72:58:25:11:70:9b:c6:38:91:c1:6a:22:c4:19:68:
75:5e:4d:34:44:09:c7:4c:06:d2:4f:aa:df:99:62:
55:e8:df:d3:99:a4:32:7f:10:1c:9e:40:e0:c9:6f:
ee:fb:ec:20:19:0b:5c:75:9e:47:f6:5f:60:5f:ea:
7e:ad:a0:7a:71:11:2d:7a:b8:fb:dc:bc:a7:de:77:
96:c5:c9:30:86:3f:48:36:7b:cb:be:44:76:12:83:
ef:32:7c:3f:32:c5:e6:1e:35:a5:d5:29:3a:b0:23:
70:fa:8e:e5:b0:d5:18:0c:8c:a6:67:d5:41:3c:5b:
af:8b:ca:30:de:1d:ff:dd:58:87:46:14:55:dd:75:
8b:2a:61:3b:a2:80:b9:5c:a5:da:96:31:0f:e8:53:
8b:6b:66:98:5b:46:cf:5d:67:dc:a3:8e:f1:a5:bb:
36:8f:d8:7b:bb:c2:e2:eb:35:94:0c:ac:60:ea:01:
e2:d7:e6:b1:af:54:56:b7:3c:bb:b9:a2:fa:ea:88:
85:62:71:20:f4:37:5b:b8:1f:73:96:ec:d3:33:25:
eb:df:f2:91:f3:3f:60:06:61:67:d7:9e:b7:50:4f:
e9:89:b6:3d:bf:69:07:a2:e0:a1:a0:e7:f8:45:13:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:8A:81:5D:9F:1F:5C:31:7A:61:ED:77:AC:D0:D6:C7:0C:66:E0
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b0:ca:70:0d:ac:68:43:0a:b3:c8:04:00:50:0a:48:82:ce:
8b:ca:5a:e7:18:8d:b9:37:f1:29:3b:3f:bc:c3:82:7e:41:bd:
9a:42:87:d7:fb:e0:a6:b0:10:f5:bf:8f:f2:81:72:56:1e:41:
6a:1d:77:69:11:67:4e:ca:e2:ef:01:b7:9e:89:de:70:62:a2:
47:41:d7:e3:f5:a9:36:07:5e:41:20:c9:ff:ef:f7:5d:8c:b8:
32:94:f8:9c:36:e4:9c:88:b7:00:02:b1:af:ac:83:c7:be:dd:
43:97:25:f9:17:28:13:28:cf:a4:1b:70:85:b2:3e:7c:e6:17:
d5:f5:0b:50:29:49:4c:64:87:50:f7:b4:1b:a5:2f:95:26:00:
c2:f1:f8:64:8e:59:64:ce:3c:ab:e5:a7:f4:07:00:c3:44:33:
30:c4:98:ba:8f:1c:1f:31:5a:58:e4:bd:df:28:de:0f:81:a6:
44:05:49:58:d5:c1:e2:33:9b:28:87:bb:90:db:e7:b8:82:4e:
9b:61:84:27:da:49:c1:d9:d7:5d:53:c0:d7:cc:1f:2a:21:86:
f6:d9:f2:f1:8d:80:76:37:e8:de:04:13:4a:c0:41:e3:42:40:
ac:24:2b:0b:0a:dc:bc:08:66:37:22:8b:ed:49:f6:78:00:65:
2d:0e:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:55 2026 by rpki-client