Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: KnO3Ygk6DvOPBzY0OZeCPphQyMJnjRWeSLU1b2AMM2c=
Subject key identifier: 08:54:21:F6:EB:B7:71:7F:38:62:A5:85:FF:DC:47:9D:54:1F:87:CD
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019CA97CF0C1E7571B3EC7A8E4C5FC33DA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 1445
Signing time: Sun 01 Mar 2026 13:01:03 +0000
Manifest this update: Sun 01 Mar 2026 13:01:03 +0000
Manifest next update: Mon 02 Mar 2026 13:01:03 +0000
Files and hashes: 1: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: jX27qqGrROwIdH1IdklrthkJs7C16n2Y9x5z5yN8j5c=)
2: g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa (hash: ENAgFJa6dqHP3ZHjhcKA/BIcppzlZ/9wq2mVnrsfeV8=)
3: lJb5lAFohzfMydj804z3JPUVnyc.roa (hash: PyjYKIx7mQvs4uA+2fO0dKGHiZ5xO9frfNP8obB2rXI=)
4: s280gYIfz7LLg7UI8DnH_9zZ-nc.roa (hash: 0XvpQfwjTnUeeYMt2sG5z+LAZnoLxsExJ4JPz1TlC3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:f0:c1:e7:57:1b:3e:c7:a8:e4:c5:fc:33:da:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Mar 1 13:01:03 2026 GMT
Not After : Mar 2 13:01:03 2026 GMT
Subject: CN=085421f6ebb7717f3862a585ffdc479d541f87cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:10:62:3d:9b:32:c1:5e:ff:8d:e5:11:9a:
fb:cc:99:1d:ad:b6:4e:f3:7a:ea:44:41:18:f7:6f:
5b:1f:94:cf:ab:2f:10:93:4e:ed:63:03:e5:cb:29:
20:5e:21:d1:e5:f5:87:ac:4e:b9:56:b3:39:cf:f0:
f5:e5:1b:98:5e:15:19:2b:88:11:8b:02:b5:f0:1d:
34:5b:c6:da:50:0b:a5:cb:a6:46:35:2b:86:6d:31:
6a:97:2e:fa:db:00:b7:00:7d:b4:30:87:39:be:63:
1a:1c:a0:f0:e0:73:1b:2f:03:27:27:cd:72:00:7f:
dc:d0:e6:35:b6:18:09:95:7a:d9:1d:77:59:d8:54:
4a:53:03:0e:89:3d:42:51:89:df:9f:b9:af:8b:70:
90:0b:0f:ac:0a:37:d1:43:f0:62:5a:f8:35:76:ba:
e1:ef:72:10:36:6e:d3:e3:77:55:50:37:52:e0:c4:
53:ab:c3:a2:b0:bf:93:66:37:53:56:a5:27:67:77:
62:14:8d:2f:85:b4:c0:47:08:17:b6:ed:81:68:64:
ef:9d:44:9d:26:51:17:86:ac:56:e0:04:9a:78:99:
c6:aa:ed:58:b2:6a:4d:34:ca:bd:6a:c3:1d:a7:eb:
2c:69:5f:df:ef:33:13:5d:d5:69:a8:17:99:cd:9e:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:21:F6:EB:B7:71:7F:38:62:A5:85:FF:DC:47:9D:54:1F:87:CD
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:df:52:10:b0:7b:91:31:1d:b2:30:28:32:e8:8c:3e:b9:
f7:40:1b:46:1f:ad:0c:37:ad:85:12:fb:fe:4d:b3:97:c9:eb:
71:22:a0:b1:30:11:35:62:27:08:09:fa:cb:6a:2d:f6:63:9a:
50:33:21:e4:4a:e5:4c:4d:67:17:3b:9e:9f:ba:d7:4b:4d:6c:
20:be:07:7f:89:c2:ad:6b:12:d8:2a:73:ed:60:6b:b3:1e:e5:
9e:83:35:9b:93:ac:f6:46:5c:1d:cb:7a:4f:a9:65:ab:78:44:
45:3d:26:dc:a1:e3:2c:e9:f4:48:87:25:ab:7c:b6:15:f0:18:
54:74:6a:0d:d9:61:60:3f:7b:ac:28:17:3e:4d:a1:90:a0:01:
57:5c:18:9d:ec:5b:4e:fb:8f:82:ed:c6:ef:a5:22:d9:1e:9a:
57:2c:d7:5a:21:30:33:7d:0c:08:d7:59:bc:60:82:0d:75:ec:
40:70:30:d5:d0:ca:f4:49:be:e2:38:56:08:10:99:49:69:c3:
08:e4:01:e7:cf:2d:61:03:70:a8:ba:76:34:9c:10:f2:a7:22:
b3:41:01:25:bf:74:68:d7:8b:25:c2:63:c9:24:bb:71:a6:19:
a0:ea:12:12:65:15:b9:b0:9f:f3:48:35:a4:d6:a5:aa:fa:aa:
b4:18:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:42 2026 by rpki-client