Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: XarhaTyybtlaujdjlKFzGe+Lpf9h5UnCfKQfLUM7eDQ=
Subject key identifier: E2:15:DB:2C:E7:02:06:00:29:A7:4E:89:D7:F4:91:D7:04:A0:9F:AE
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 019D9A06C7F30E1A27F1B1EB905523AB2883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 1465
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: +RRQANko7uBNopqX8wJq/0oNjSn/w3DT/QpRbXvDGKo=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c7:f3:0e:1a:27:f1:b1:eb:90:55:23:ab:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=e215db2ce702060029a74e89d7f491d704a09fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:b9:01:b2:9f:22:a8:65:56:ec:75:ad:c4:
20:d2:8a:42:ea:43:d3:bc:1d:f2:93:b9:d7:48:f5:
72:cb:ab:4a:94:b1:bf:db:b8:2b:ce:43:d2:ae:3e:
0f:cf:4e:dd:d3:6f:a8:e7:aa:92:13:97:4f:aa:3f:
d1:69:ee:e9:93:53:6c:53:5f:17:50:01:64:a5:97:
10:6c:00:e0:ee:50:f8:eb:85:09:20:8f:50:72:f0:
16:21:fe:68:52:08:11:4e:ae:dd:e3:ef:27:b3:39:
1d:e1:9f:77:53:c0:41:ce:6b:c8:3f:01:49:7e:a7:
57:1c:62:d5:14:94:18:8b:78:1d:56:e1:22:ae:bd:
af:dd:cb:10:81:b2:f0:e7:d4:84:37:97:19:13:9c:
0d:20:cf:7d:92:f7:fd:9f:8e:94:e1:7f:f2:a2:ab:
77:9d:a2:6f:26:17:09:47:1e:62:87:77:68:3c:e1:
60:e7:8d:48:dc:e5:6b:2f:c7:bf:2f:69:f5:e9:a7:
e4:7e:ef:3a:42:58:c0:6d:12:39:51:02:0c:6c:13:
cf:3a:f3:cd:76:b9:f3:47:29:e0:5e:26:6c:07:02:
cd:94:94:c0:54:45:cb:26:11:4f:b7:22:ea:ea:b0:
dd:30:c7:32:ea:93:9a:df:c4:fc:8e:f9:42:f2:a3:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:DB:2C:E7:02:06:00:29:A7:4E:89:D7:F4:91:D7:04:A0:9F:AE
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7f:4d:d2:d0:4d:82:6a:3d:07:c1:8c:d3:69:c9:67:3f:4e:
41:08:7d:71:e3:ef:0b:6b:99:d9:22:ed:14:18:d2:bd:0e:2d:
23:b2:ca:e3:83:1e:f4:11:4f:b4:1e:c0:ee:e5:96:56:f9:f9:
ad:15:9c:e0:2a:90:54:a9:f8:ed:ce:0a:d1:38:2f:af:0f:22:
56:e1:34:8d:55:76:85:54:de:72:f8:7f:c1:f7:cb:6c:f7:39:
20:c7:ea:54:1d:97:49:25:98:02:ca:b3:fb:4f:aa:07:37:b0:
25:94:10:5d:66:f9:f9:52:68:29:56:bc:bd:ac:ed:b8:41:17:
86:bd:3a:de:4b:e9:27:0a:2d:36:94:07:26:0d:89:41:6f:96:
44:eb:ec:f7:14:a3:5d:bf:c2:4f:a8:31:d9:39:90:a0:b5:5e:
94:59:0f:8b:76:fa:d7:b9:76:7d:e7:87:85:9a:3b:23:a8:b7:
7f:e8:18:60:4b:45:07:41:4f:44:d4:be:d9:de:9b:00:70:ed:
0b:c4:83:97:cd:ee:ec:d8:2a:80:30:e8:c6:2e:52:0f:49:27:
b3:ad:b1:b2:3a:b3:35:dd:40:24:9e:9b:d2:cd:f0:b9:42:32:
d7:57:0a:1c:fb:c5:3b:cc:c9:a5:eb:c0:26:ae:6a:25:59:6a:
ac:24:b0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:53 2026 by rpki-client