Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier: rSP/9Uvo2jlD4XJHtk/r0Owq5zzjIZ5Vm7/oG+iPAro=
Subject key identifier: B7:F6:5A:8D:95:E1:E8:C0:85:BB:49:26:46:D7:43:A8:20:5C:6C:38
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial: 01A1C51E7786B7AA5A8E10D0C3D3DFE53AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number: 1AEB
Signing time: Tue 10 Nov 2026 11:01:10 +0000
Manifest this update: Tue 10 Nov 2026 11:01:10 +0000
Manifest next update: Wed 11 Nov 2026 11:01:10 +0000
Files and hashes: 1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: w5tcVCx0sNU1uRJhBck/l7yHDszH5lkB0inu+8RypZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:1e:77:86:b7:aa:5a:8e:10:d0:c3:d3:df:e5:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Validity
Not Before: Nov 10 11:01:10 2026 GMT
Not After : Nov 11 11:01:10 2026 GMT
Subject: CN=b7f65a8d95e1e8c085bb492646d743a8205c6c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:38:01:05:2c:68:08:09:78:6a:11:9b:ec:
eb:d0:3a:c3:41:53:cc:24:38:d6:0d:c5:6f:a5:f1:
9e:0d:c2:9f:06:38:52:ed:58:12:49:01:14:ca:73:
01:74:22:2c:69:ec:b3:a4:5c:39:16:de:33:18:48:
b3:a9:0c:3c:eb:50:f9:24:e9:b1:71:24:89:0b:5a:
b4:a6:50:16:6c:fe:17:45:6a:c0:c4:00:b9:7d:2e:
79:19:ba:8b:10:c0:ae:ce:a3:6f:5c:fb:3f:2e:77:
44:3f:ae:c5:e5:aa:b7:bb:bf:13:c5:77:6b:94:93:
0b:a2:fb:fa:78:fc:f8:60:da:6d:1f:7c:af:58:c3:
b9:7d:05:c9:e8:0e:76:73:24:f9:78:ac:9e:20:3e:
cc:ba:1f:60:a2:18:59:1d:b9:71:16:f7:bd:b0:2d:
ca:56:1d:47:e5:95:1e:73:6b:f7:3b:2c:68:fd:94:
1c:a0:ec:31:a9:86:95:a4:f9:ae:31:a0:f1:a3:fa:
74:02:37:f1:b7:47:be:1e:a3:f5:c0:84:fd:99:b2:
0a:7d:ff:cd:07:be:71:9a:ef:f8:0a:53:09:db:bf:
0e:ae:67:c2:b7:92:33:2d:e1:e4:66:bf:d2:fd:72:
a1:b7:1d:5e:0f:bc:fc:85:28:2a:c4:ef:eb:e5:b3:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:5A:8D:95:E1:E8:C0:85:BB:49:26:46:D7:43:A8:20:5C:6C:38
X509v3 Authority Key Identifier:
keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:56:d2:d8:ee:9b:ec:52:00:24:98:12:8e:38:d6:c3:b6:63:
6a:3a:07:32:71:fd:02:fc:78:1a:20:21:48:36:50:8a:89:6f:
d0:ec:a3:f1:e8:7f:6b:30:56:ed:d4:d9:96:38:7a:62:41:32:
77:00:63:b5:81:87:c4:f8:c8:d2:d8:ef:70:7b:7f:ed:44:d7:
ad:22:62:11:64:18:06:5d:40:5a:0f:a1:59:9b:15:7c:0d:55:
ce:b5:e0:e8:17:f4:92:14:8c:85:b8:f3:eb:9f:59:ea:83:f3:
ea:b9:f0:0b:e6:09:ca:d2:5e:93:b5:c2:3f:6e:58:6d:fe:d2:
37:ae:62:27:4c:0a:18:3c:44:5f:49:a0:23:ba:11:64:a6:ea:
c1:a6:ef:2e:c1:12:28:86:ff:7d:96:1b:71:30:27:42:bf:42:
0b:82:6a:83:8d:f4:c8:25:6b:28:da:1e:5f:2f:39:c8:6a:83:
9b:fb:5b:e7:d3:de:1e:c7:52:7a:96:b5:c4:63:b9:59:c7:64:
f4:e4:7d:21:16:a9:e2:2c:77:f9:9f:f6:81:69:5f:69:ba:74:
dd:da:54:67:86:e2:31:15:89:81:5e:cc:f6:b2:6d:2d:76:57:
e5:f1:35:d1:20:17:bd:86:d8:9e:6e:db:dc:05:23:70:84:4e:
cc:b5:e5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHFHneGt6pajhDQw9Pf5Tr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi
YjFkZWYwHhcNMjYxMTEwMTEwMTEwWhcNMjYxMTExMTEwMTEwWjAzMTEwLwYDVQQD
EyhiN2Y2NWE4ZDk1ZTFlOGMwODViYjQ5MjY0NmQ3NDNhODIwNWM2YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGk4AQUsaAgJeGoRm+zr0DrDQVPM
JDjWDcVvpfGeDcKfBjhS7VgSSQEUynMBdCIsaeyzpFw5Ft4zGEizqQw861D5JOmx
cSSJC1q0plAWbP4XRWrAxAC5fS55GbqLEMCuzqNvXPs/LndEP67F5aq3u78TxXdr
lJMLovv6ePz4YNptH3yvWMO5fQXJ6A52cyT5eKyeID7Muh9gohhZHblxFve9sC3K
Vh1H5ZUec2v3Oyxo/ZQcoOwxqYaVpPmuMaDxo/p0Ajfxt0e+HqP1wIT9mbIKff/N
B75xmu/4ClMJ278OrmfCt5IzLeHkZr/S/XKhtx1eD7z8hSgqxO/r5bO0WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf2Wo2V4ejAhbtJJkbXQ6ggXGw4MB8GA1UdIwQY
MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt
YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw
LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVbS2O6b
7FIAJJgSjjjWw7ZjajoHMnH9Avx4GiAhSDZQiolv0Oyj8eh/azBW7dTZljh6YkEy
dwBjtYGHxPjI0tjvcHt/7UTXrSJiEWQYBl1AWg+hWZsVfA1VzrXg6Bf0khSMhbjz
659Z6oPz6rnwC+YJytJek7XCP25Ybf7SN65iJ0wKGDxEX0mgI7oRZKbqwabvLsES
KIb/fZYbcTAnQr9CC4Jqg430yCVrKNoeXy85yGqDm/tb59PeHsdSepa1xGO5Wcdk
9OR9IRap4ix3+Z/2gWlfabp03dpUZ4biMRWJgV7M9rJtLXZX5fE10SAXvYbYnm7b
3AUjcIROzLXl7g==
-----END CERTIFICATE-----
Generated at Tue Nov 10 15:35:29 2026 by rpki-client