Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: r8z1bxcgul0F9Tru/lOTayvev7RbXrtD+m4E48WG+64=
Subject key identifier: 8A:FB:2A:01:DD:1A:6B:A6:D2:B2:A2:B6:30:D8:E2:8D:BA:C4:FE:59
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 019FA93DFCFCAC163AFDA7DD2BA7249F0290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 1576
Signing time: Tue 28 Jul 2026 15:00:39 +0000
Manifest this update: Tue 28 Jul 2026 15:00:39 +0000
Manifest next update: Wed 29 Jul 2026 15:00:39 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: 5lzy5GhUcdR27wQsdYB90lnqUz24N1SOK+sp7iH2NlI=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:fc:fc:ac:16:3a:fd:a7:dd:2b:a7:24:9f:02:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jul 28 15:00:39 2026 GMT
Not After : Jul 29 15:00:39 2026 GMT
Subject: CN=8afb2a01dd1a6ba6d2b2a2b630d8e28dbac4fe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:41:0c:30:8f:f1:99:a4:96:50:08:ab:1a:
cf:95:07:37:17:79:36:25:e6:67:6f:48:52:3d:80:
ed:83:5c:eb:37:83:5c:47:21:dc:62:a7:f0:45:12:
b3:3d:72:ed:5f:e4:7b:f8:51:fd:99:36:f4:15:70:
21:e7:6d:86:35:86:90:32:7c:bc:07:34:1a:de:26:
2a:77:1d:5f:c4:78:0d:94:a8:e9:df:9d:3f:ab:6b:
8d:2f:a7:16:cc:8e:41:ff:54:33:fd:37:02:8f:77:
ac:3f:5a:3c:6c:45:b8:50:11:db:4e:1e:6b:6c:08:
5a:fc:b8:3d:e9:bf:1d:cc:f6:57:6c:f6:db:08:f3:
87:66:e8:0f:81:79:6b:74:49:1d:be:08:ca:e8:d1:
64:f9:63:4b:5a:44:09:58:6f:cf:ba:8e:b0:0f:78:
72:93:62:61:9a:8f:53:c6:a3:35:8e:ff:86:16:46:
cf:29:c1:8b:c6:f2:f4:0a:4e:4e:99:ce:50:23:86:
60:de:71:56:1a:3f:4f:eb:f7:b1:32:72:b5:99:52:
f4:21:33:3c:2a:ca:2c:8d:72:14:7f:7e:c4:73:28:
5b:fe:f0:5a:ef:6d:5b:23:c2:44:c1:c5:95:2c:b0:
9b:b0:29:09:c7:7a:4d:b4:19:06:1d:f6:43:2e:94:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:2A:01:DD:1A:6B:A6:D2:B2:A2:B6:30:D8:E2:8D:BA:C4:FE:59
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:27:f1:a2:f2:c2:29:12:96:ff:98:7a:d5:54:56:f9:0d:95:
cf:33:71:6b:fa:fa:1c:58:5c:1f:08:36:8e:0d:07:b4:29:20:
67:96:92:d2:02:08:25:0d:09:08:67:28:36:29:e7:70:04:97:
91:fc:6c:06:ad:e5:e3:0a:dd:1d:1a:fa:3a:73:34:da:e9:84:
af:fa:16:cd:91:59:2a:a6:5e:69:84:8d:a1:68:3b:d5:24:dc:
a1:92:8f:6e:5e:a5:5d:98:1c:90:7c:8b:55:33:25:f1:25:eb:
da:4e:fe:35:5b:17:0a:16:c4:65:53:87:bd:6c:dc:8f:0a:5f:
34:88:a0:fe:86:28:77:11:90:b6:31:1d:26:5b:fb:cc:d2:1f:
d1:74:04:0c:f1:6e:19:a1:5f:41:d2:06:a3:40:54:80:e9:c9:
b0:b1:10:09:92:b2:ec:59:65:d8:41:d9:05:15:38:0a:b6:fa:
2e:80:44:0d:2b:c8:39:89:71:68:bc:ed:cd:81:93:a4:a8:f5:
70:73:92:ba:86:98:b2:14:0e:33:69:5b:f8:23:ad:ad:bd:2e:
3c:45:44:0f:ff:7b:7a:ae:fe:68:8a:9d:96:bd:94:0a:7c:ff:
b4:51:96:7e:3f:cb:78:d1:5f:e9:8c:03:28:75:92:98:bb:9b:
18:8d:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:29:26 2026 by rpki-client