Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: SQpzDApHXFCnjatxPyXdabnG4Enx9J7E4/r5W6ULluQ=
Subject key identifier: 52:07:6E:78:0F:38:D9:74:BD:EE:55:7C:33:4A:98:53:35:EF:4F:40
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 01A1C21CD2E1529AFF4F26E1DF637C637AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 168C
Signing time: Mon 09 Nov 2026 21:00:31 +0000
Manifest this update: Mon 09 Nov 2026 21:00:31 +0000
Manifest next update: Tue 10 Nov 2026 21:00:31 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: kUahxHtLN0/EgsPP5zsxeG+XvA/ZIQlN23X64N3p1oo=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:1c:d2:e1:52:9a:ff:4f:26:e1:df:63:7c:63:7a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Nov 9 21:00:31 2026 GMT
Not After : Nov 10 21:00:31 2026 GMT
Subject: CN=52076e780f38d974bdee557c334a985335ef4f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:71:9a:3f:9e:dd:6f:eb:fd:ce:50:c2:91:
ba:f0:50:0f:66:6a:70:91:90:c1:5e:2b:c0:06:30:
09:a3:fd:41:01:bb:3c:d5:ce:5d:d7:a7:0e:3f:d9:
43:ee:66:71:c3:45:db:90:ae:ea:99:7f:dc:5e:1a:
b4:9f:53:d5:99:5a:77:7d:9e:6a:71:90:ee:95:f8:
9f:9e:cd:38:4f:91:3f:63:06:28:43:01:9d:cd:bd:
d9:17:b6:24:13:64:78:cf:a1:03:30:bd:6e:62:e1:
38:9d:8a:c5:e1:53:6b:45:40:cd:2b:a4:9a:24:63:
fd:cf:6a:52:44:4e:5c:a5:cb:70:d1:7d:d6:a5:6e:
11:ac:91:6b:aa:28:48:06:3c:f6:ce:bb:9b:c8:7b:
67:66:e5:6e:83:1e:7c:47:29:8e:a2:a7:09:ec:90:
34:5b:d6:1f:34:f9:6e:19:6a:c4:fd:35:c3:62:8e:
19:7c:2b:04:bc:31:fa:58:00:ae:57:62:83:8a:d4:
8f:bb:81:39:e3:83:cb:6e:dd:83:bb:c9:61:e5:f9:
d0:9d:98:99:ff:dd:cd:f4:bd:dd:7b:ef:94:d4:06:
85:5b:86:4d:33:5a:cf:3d:61:17:d8:3b:bc:44:95:
c4:9e:ba:9b:cc:72:2a:17:d5:39:60:03:8e:95:92:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:6E:78:0F:38:D9:74:BD:EE:55:7C:33:4A:98:53:35:EF:4F:40
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:60:d8:e9:d8:1d:85:88:c0:53:9f:4b:01:a7:e1:74:16:b3:
89:ce:fe:c9:0e:7a:cd:cb:ca:4b:aa:4f:12:2a:c1:0b:c1:10:
91:0b:6f:f9:f8:35:7a:de:26:11:a1:2d:f5:42:60:7e:8d:eb:
ca:db:c6:57:aa:08:93:4f:45:56:5f:47:d1:28:6b:d8:cd:8f:
ef:8d:ca:0d:25:59:6c:cf:bc:22:14:3c:87:2d:14:94:9f:f6:
7b:f7:9c:d8:fe:d9:41:87:9b:59:2b:16:84:bb:38:9f:1d:71:
2a:d8:9b:bf:d5:cf:4c:ab:35:1e:a9:40:4e:66:87:f4:71:10:
49:4e:4b:96:98:1d:12:41:75:33:28:50:20:3e:57:50:02:16:
66:dc:f7:f8:9e:a2:49:88:a6:6f:98:25:61:2f:46:26:af:d2:
df:a0:da:90:32:77:26:21:43:0c:9d:57:2c:50:02:5d:08:9f:
1f:41:5f:89:5a:6a:5d:7e:be:c8:46:93:fc:9f:a0:65:0b:4c:
9c:be:34:28:4e:f2:bc:54:41:de:e4:8f:71:af:65:e3:39:b9:
68:a0:01:89:e7:55:16:c5:56:2a:1a:36:eb:c5:94:06:5f:86:
a5:bd:9b:0d:96:01:31:95:b6:79:5d:52:2d:d3:f9:d1:a5:f3:
8e:df:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:11:11 2026 by rpki-client