Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: yCT+zP/gjD1tBbFFLAXcM7mAQtLdysbDMPZoa/3cYrg=
Subject key identifier: 40:8D:71:BE:00:02:B5:59:CC:F4:E0:07:F4:55:29:51:1F:96:FA:86
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 019D26962A9F734A0B9D14A11B32DB238084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: 0302
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: 15QLA2sZZoZYBnDiiA8lC6v2G1qPtypPaPtrinbbzZw=)
2: LQP9SipEK8e5U74WFjF_PdUAZHY.asa (hash: mMlwPy1khc9v0JJ9UVzb69Pk+mDFPAOK68BWxHNwUKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2a:9f:73:4a:0b:9d:14:a1:1b:32:db:23:80:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=408d71be0002b559ccf4e007f45529511f96fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:e0:e8:2c:4a:b2:ac:7f:ad:f4:a8:44:2c:
b0:5f:22:24:fd:cd:de:65:09:48:8e:b0:82:7b:14:
23:49:45:5d:f4:b7:1d:68:29:45:64:6d:02:0d:03:
ef:93:f9:54:b1:1e:91:e4:bc:d4:2f:7f:ba:0a:b3:
62:f7:12:f8:29:80:66:98:10:28:84:b3:3f:ce:44:
8f:47:1c:4f:a1:fb:d9:55:93:c6:ed:d2:a6:b2:0f:
a1:ed:fa:44:9f:f5:0f:05:74:6d:29:42:68:0d:a7:
16:d0:5b:32:6c:06:0a:be:75:2e:e5:92:bf:9c:60:
2c:cc:6b:6f:48:75:d5:e8:4e:c1:71:20:f8:7f:ad:
5a:33:f7:b0:8e:74:e7:43:68:51:02:fa:02:8d:03:
eb:54:83:06:40:60:6f:4d:db:5f:71:cd:99:10:d9:
ec:33:db:d6:1f:08:83:c6:46:04:2c:d5:18:3c:39:
40:40:5f:a6:f8:61:7b:3f:59:3e:65:3c:3c:ac:c4:
21:e6:3b:f3:0e:76:d6:77:61:e4:e7:80:99:4f:7c:
73:9a:ae:52:db:0e:22:8d:bb:26:7d:12:01:f2:e6:
c6:9c:f8:82:92:00:eb:97:9f:5b:1d:45:d0:3b:6b:
4d:b3:86:06:72:4a:25:ab:09:17:17:f0:ba:cf:8e:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:71:BE:00:02:B5:59:CC:F4:E0:07:F4:55:29:51:1F:96:FA:86
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2a:83:3c:8b:f7:a0:a4:90:d7:f4:2e:4c:74:20:67:d5:08:
c2:ca:e0:a2:c0:be:b0:12:8b:5a:47:32:e6:e1:a5:5c:77:b9:
b8:48:fd:1d:25:e0:b2:55:a8:f1:d3:c2:41:02:b7:c4:98:fb:
3b:9e:ee:b6:18:83:cb:5a:5c:ee:71:0f:bf:12:40:ea:dd:f6:
4e:0f:f8:b0:47:f3:50:f6:da:b3:df:a6:8d:13:d1:8d:4a:fe:
8e:38:04:07:76:f7:35:b3:2e:cf:08:d8:51:fb:a8:21:0a:d3:
0c:b6:7d:f8:67:ab:84:9a:87:42:ad:2a:d2:a8:d2:f0:4a:85:
82:48:51:52:e8:6a:36:92:2a:02:1c:f0:52:63:2c:31:24:27:
10:55:4d:88:5a:f6:e1:78:22:10:0e:0c:e3:5d:dd:1f:ee:20:
67:3a:16:36:6a:09:23:64:d0:59:b8:67:f9:92:4d:89:7c:98:
4f:3f:3b:e6:4a:8f:8a:57:6a:cd:bc:87:3e:4f:f1:5b:f2:cf:
bd:6d:0c:57:a5:9f:6f:41:92:11:e2:39:60:01:45:b6:dd:3e:
2e:19:6f:e8:d1:b3:3e:6c:b3:08:15:9c:10:bb:ca:b0:2e:e7:
70:2c:f4:f8:62:02:ab:9b:90:08:77:e1:20:dd:1f:8b:18:ed:
e1:96:0b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mliqfc0oLnRShGzLbI4CEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWE1MTZjMDZkMTIwZDM3NmU1NzUxMTMxMzRmNDRmZjYy
NWQ4ZTcwHhcNMjYwMzI1MjAwMTA4WhcNMjYwMzI2MjAwMTA4WjAzMTEwLwYDVQQD
Eyg0MDhkNzFiZTAwMDJiNTU5Y2NmNGUwMDdmNDU1Mjk1MTFmOTZmYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotDg6CxKsqx/rfSoRCywXyIk/c3e
ZQlIjrCCexQjSUVd9LcdaClFZG0CDQPvk/lUsR6R5LzUL3+6CrNi9xL4KYBmmBAo
hLM/zkSPRxxPofvZVZPG7dKmsg+h7fpEn/UPBXRtKUJoDacW0FsybAYKvnUu5ZK/
nGAszGtvSHXV6E7BcSD4f61aM/ewjnTnQ2hRAvoCjQPrVIMGQGBvTdtfcc2ZENns
M9vWHwiDxkYELNUYPDlAQF+m+GF7P1k+ZTw8rMQh5jvzDnbWd2Hk54CZT3xzmq5S
2w4ijbsmfRIB8ubGnPiCkgDrl59bHUXQO2tNs4YGckolqwkXF/C6z44SkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECNcb4AArVZzPTgB/RVKVEflvqGMB8GA1UdIwQY
MBaAFPeqUWwG0SDTduV1ETE09E/2JdjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgt
MDA2ZDQxNDg3YzQ5LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgtMDA2ZDQxNDg3YzQ5
LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCqDPIv3
oKSQ1/QuTHQgZ9UIwsrgosC+sBKLWkcy5uGlXHe5uEj9HSXgslWo8dPCQQK3xJj7
O57uthiDy1pc7nEPvxJA6t32Tg/4sEfzUPbas9+mjRPRjUr+jjgEB3b3NbMuzwjY
UfuoIQrTDLZ9+GerhJqHQq0q0qjS8EqFgkhRUuhqNpIqAhzwUmMsMSQnEFVNiFr2
4XgiEA4M413dH+4gZzoWNmoJI2TQWbhn+ZJNiXyYTz875kqPildqzbyHPk/xW/LP
vW0MV6Wfb0GSEeI5YAFFtt0+Lhlv6NGzPmyzCBWcELvKsC7ncCz0+GICq5uQCHfh
IN0fixjt4ZYL7w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:36 2026 by rpki-client