
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: d/K17MvIXokXgkA5OOedeoLuh/scey5pFRJNMEU5w5c=
Subject key identifier: D8:1A:60:23:9A:5C:2D:A2:8E:C9:48:C2:9F:02:3E:65:76:34:67:C3
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019EBE7ED1BDE177D078EA949652F9EA7661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 1559
Signing time: Sat 13 Jun 2026 01:00:42 +0000
Manifest this update: Sat 13 Jun 2026 01:00:42 +0000
Manifest next update: Sun 14 Jun 2026 01:00:42 +0000
Files and hashes: 1: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: aFOfFrjt3lUWvEmORMKE9jhlu4qTD5wFDtTKLdFKd7Q=)
2: g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa (hash: ENAgFJa6dqHP3ZHjhcKA/BIcppzlZ/9wq2mVnrsfeV8=)
3: lJb5lAFohzfMydj804z3JPUVnyc.roa (hash: PyjYKIx7mQvs4uA+2fO0dKGHiZ5xO9frfNP8obB2rXI=)
4: s280gYIfz7LLg7UI8DnH_9zZ-nc.roa (hash: 0XvpQfwjTnUeeYMt2sG5z+LAZnoLxsExJ4JPz1TlC3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:d1:bd:e1:77:d0:78:ea:94:96:52:f9:ea:76:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jun 13 01:00:42 2026 GMT
Not After : Jun 14 01:00:42 2026 GMT
Subject: CN=d81a60239a5c2da28ec948c29f023e65763467c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:27:bd:6d:b1:31:c5:8c:5e:f3:b9:71:62:
0a:05:3b:cc:49:d3:fc:89:6c:17:b2:ff:ae:4f:74:
93:cc:f9:6d:da:35:79:d8:7c:1f:e8:37:45:b8:24:
0d:31:d3:e6:2f:12:69:2a:ca:cd:64:b8:c0:3e:69:
3e:4f:72:bf:11:a3:42:c1:aa:e1:ff:36:87:ff:94:
22:b9:e5:0f:08:61:8a:59:aa:13:fb:3e:a7:59:83:
87:e9:44:ad:d9:0c:89:fa:31:c2:c9:d0:5a:e2:58:
d8:7e:9f:33:10:da:02:cf:68:a2:0d:ae:5c:a2:f7:
84:02:08:cf:3c:c5:0f:f6:67:ad:09:f7:78:31:df:
cd:f1:f0:91:5e:dc:74:e9:ab:68:bb:70:26:24:00:
77:eb:42:d9:95:95:f4:ba:ab:dd:fd:0d:6b:75:a7:
eb:cd:28:4c:89:ab:98:84:2c:5f:67:41:ab:b5:fb:
fb:bb:ad:29:31:8a:ee:8c:3d:b2:38:56:92:00:e8:
7a:c2:1c:38:67:4d:ce:ae:3b:ea:5a:1d:63:ad:80:
71:a1:f5:ff:d2:66:d9:08:3c:9f:85:bd:48:f5:7b:
2d:ef:eb:d1:c2:ab:ec:d9:9b:e2:71:37:e3:35:d9:
fc:89:03:40:5a:92:6a:62:bf:a6:7b:9d:eb:50:52:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:60:23:9A:5C:2D:A2:8E:C9:48:C2:9F:02:3E:65:76:34:67:C3
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:3e:3d:bb:88:4e:1d:39:15:50:28:1b:2d:3e:fe:c6:04:
4c:1a:77:ad:56:a4:e0:ed:68:ed:6f:3f:cb:98:91:ea:03:26:
3c:d4:2a:23:d0:bc:cd:b3:56:2e:a7:06:b5:63:a7:97:8f:2b:
26:c7:c0:ed:3e:38:9b:1c:f3:a4:fb:75:2c:78:29:bf:46:44:
1b:25:28:cc:82:b8:ec:a1:8b:64:ac:b6:b4:9e:21:d7:5b:9e:
35:8d:67:93:1e:6f:3b:7c:60:29:c6:12:80:6a:7a:02:f5:90:
8e:46:b4:a7:fe:a7:9a:d5:19:ed:1e:e4:a9:a3:58:ca:09:73:
7d:15:0f:bf:ba:e3:64:da:d9:76:91:c8:4a:f4:a7:2c:41:ba:
f5:7c:9a:c7:0c:81:a6:fb:0c:9c:34:8d:73:94:e8:2e:75:3b:
22:48:bb:c5:26:25:aa:62:cf:27:10:f3:7f:76:33:af:b1:88:
4d:04:c6:26:bd:f3:5f:fd:92:f3:08:11:bd:c3:b2:ca:9e:55:
2b:8d:ff:f9:0e:2a:22:40:d9:76:6c:d5:25:5c:f7:9c:2b:f2:
01:31:fb:c8:89:94:99:8f:0b:d2:6d:04:3d:f8:07:91:12:f4:
fe:7b:5c:a5:8f:12:99:4c:5e:54:c0:65:f6:48:a5:9a:c2:03:
bc:cf:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:39 2026 by rpki-client