Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: lXhHgt2IUdLT+B4vO1zLJ7Nt1chM+9Usj74eV0tMmLE=
Subject key identifier: 85:63:2E:F7:71:B9:22:BF:0C:58:4C:C7:A0:FA:3F:58:D0:5E:9D:E2
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 019EBF91779EB7338541E2E9EBD7A5A012DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 14FD
Signing time: Sat 13 Jun 2026 06:00:41 +0000
Manifest this update: Sat 13 Jun 2026 06:00:41 +0000
Manifest next update: Sun 14 Jun 2026 06:00:41 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: +SQJSyNQOIikyRhqiTAMRAL8dT5k5tP0UHZiPz8pefM=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:77:9e:b7:33:85:41:e2:e9:eb:d7:a5:a0:12:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jun 13 06:00:41 2026 GMT
Not After : Jun 14 06:00:41 2026 GMT
Subject: CN=85632ef771b922bf0c584cc7a0fa3f58d05e9de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:de:e8:19:e9:02:b8:25:e5:be:39:6c:bb:
74:e9:91:2f:3e:b4:65:2e:2a:d7:ff:08:eb:4c:49:
9e:3d:85:6c:d8:84:a5:1b:44:f3:5b:17:cb:aa:e6:
15:ca:86:72:3c:f6:68:ac:b0:95:b4:8e:46:62:c2:
f1:9e:3e:9a:85:be:83:07:ce:62:17:91:e0:50:d8:
6e:8c:0a:2c:a7:b6:43:d9:46:f1:0e:9a:65:cc:9b:
58:1c:bd:c8:a1:e7:0b:68:f5:e0:c1:97:6a:2e:26:
cd:52:7c:38:d9:b8:ac:9e:34:53:f1:95:ca:8f:e5:
e9:34:e5:8b:e1:04:e4:00:76:eb:12:d3:ef:38:de:
d9:a1:b1:1f:81:c6:ac:58:0e:b3:70:64:29:ff:cc:
31:2b:7f:e5:eb:71:69:26:24:ba:fd:27:2f:37:e6:
57:af:f6:73:f4:4b:89:6d:8e:54:55:f7:ad:8e:88:
2e:c8:ba:e3:c2:0a:30:8a:79:76:80:ff:5b:f5:f8:
8a:32:d6:6e:ef:c2:87:4e:7b:b6:67:1f:b6:54:78:
e3:e5:2b:76:4b:85:01:e1:f7:1a:7a:54:39:a6:4f:
d0:3b:07:d2:7a:62:5a:c8:c3:db:57:d1:b0:9d:46:
a0:a1:3e:b3:ef:ec:57:52:fc:a6:6e:ed:36:cd:ec:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:2E:F7:71:B9:22:BF:0C:58:4C:C7:A0:FA:3F:58:D0:5E:9D:E2
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:cd:d3:aa:37:36:2d:42:93:3b:f1:57:b4:35:e0:7f:c3:
24:71:d3:f4:1a:44:96:01:c1:9b:cf:5b:86:14:ed:6d:21:6c:
5b:65:c1:42:3c:04:39:ae:0c:c1:fd:ce:b3:2e:67:57:b7:ef:
ab:58:59:35:d4:08:57:90:ba:86:a6:a1:04:59:44:e2:ba:bc:
3c:b3:99:d6:87:2a:c4:7e:03:cd:18:99:31:fc:47:7e:3a:ce:
57:fd:62:e6:c1:77:4f:4e:92:45:cc:65:5a:e3:4c:54:76:9f:
ea:16:85:ab:00:a7:aa:f4:e8:ea:da:f7:26:1a:1f:91:0f:89:
f0:57:1b:d7:18:c5:1b:7c:f9:0a:dc:b8:17:4e:a6:5e:c2:41:
b4:10:a4:52:41:dc:88:c5:c8:66:06:4b:c1:7b:5a:37:09:b2:
fd:1a:08:6a:2e:41:45:4e:b6:29:ca:5a:77:7b:eb:d8:47:96:
80:35:87:cd:70:d6:1a:f0:e1:3a:50:22:a0:1a:2a:fc:69:83:
50:13:df:2d:8f:01:a4:dd:e0:48:9a:ea:91:c2:c7:2d:45:b5:
00:04:27:b3:88:25:e8:19:6e:80:02:1e:85:96:dc:4f:7b:6a:
e2:79:54:2b:bb:7f:c0:c6:90:34:e5:7f:22:f9:be:a4:e7:fc:
db:97:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:37 2026 by rpki-client