Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier: nKeAfsdcbjzJdgCkXVxdcqk60ToRYCXOUgzE7ePbxzk=
Subject key identifier: 3A:E6:18:F0:89:BD:F5:2F:A1:80:C3:B3:AB:64:21:02:01:4B:7B:F6
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial: 01A0C6332B956BFF31329CC3EA26C5F1D820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 23:00:37 +0000
Manifest this update: Mon 21 Sep 2026 23:00:37 +0000
Manifest next update: Tue 22 Sep 2026 23:00:37 +0000
Files and hashes: 1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: x51Um5LfqGOs31ZyGEEYdslnk5HSS8BpHiyZixF4I2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:2b:95:6b:ff:31:32:9c:c3:ea:26:c5:f1:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Validity
Not Before: Sep 21 23:00:37 2026 GMT
Not After : Sep 22 23:00:37 2026 GMT
Subject: CN=3ae618f089bdf52fa180c3b3ab642102014b7bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:c1:ac:b7:c7:c4:ce:2b:36:d0:e0:93:ce:
aa:f1:88:d2:b5:ea:e8:14:b3:ce:79:45:a2:d2:c3:
29:b9:18:c1:95:5c:7a:e3:bf:66:b6:1f:57:c3:8c:
23:db:23:d0:b4:ad:53:cd:b0:06:f6:30:39:2b:e7:
13:46:1d:35:f1:b2:0c:92:11:0f:21:ef:d5:a9:f0:
1f:b4:43:c3:b5:4e:c2:1a:23:42:79:10:16:d7:b7:
d5:e0:d2:b6:73:ad:f6:43:3e:b2:07:ea:e5:6d:ad:
2c:7b:cc:f6:c6:f2:e6:57:64:2f:ee:db:3b:75:2c:
0c:62:ac:a7:1f:eb:5f:56:e0:62:f4:20:07:be:2b:
61:73:1c:6d:5d:c5:bf:de:1a:e3:d7:e1:af:62:7c:
49:fb:28:39:b0:9d:fc:f9:75:b6:ea:b9:19:42:81:
87:f1:ea:2f:af:f2:19:07:09:26:61:e5:6e:8e:86:
7b:3c:3f:4c:e8:fb:5e:a7:86:f2:4e:c8:e7:ef:a0:
49:02:de:c5:de:88:aa:a4:43:89:c9:39:82:f7:73:
f6:d2:c0:c5:4b:1c:1b:7f:47:76:68:e1:9d:ba:a7:
68:e3:e4:ed:bc:f9:3f:05:fa:d1:07:20:3e:d1:aa:
d3:5d:2b:48:4e:2c:33:84:6f:40:68:af:74:f4:d6:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:18:F0:89:BD:F5:2F:A1:80:C3:B3:AB:64:21:02:01:4B:7B:F6
X509v3 Authority Key Identifier:
keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:3d:cd:09:6e:b9:ef:e4:49:bb:cc:e1:43:09:df:0a:11:
50:80:77:10:bb:86:08:93:76:88:7e:2e:27:be:e3:76:37:a0:
8d:15:22:3b:05:e1:00:ba:d0:44:e1:b1:d1:e7:4c:d7:44:00:
bd:21:b5:7f:e4:05:45:61:e6:79:f9:0f:74:ad:5c:47:e6:2b:
97:38:59:62:2f:2b:f3:a6:9d:18:cf:8e:fa:87:e0:df:9c:55:
59:5b:69:85:65:c8:70:77:f5:03:d9:6e:52:41:47:50:c8:95:
71:37:7f:13:68:10:c5:40:4d:45:74:57:ed:fe:55:f4:dc:39:
aa:be:e8:5c:5f:e0:85:ef:98:07:b3:ef:08:44:76:70:9b:53:
d4:63:db:7d:5d:b3:56:db:84:c7:ad:d3:3f:22:c7:7c:35:99:
50:51:92:b6:2b:ef:71:16:09:ed:8b:67:87:12:d8:f6:85:d3:
91:30:a1:e0:06:7d:34:cb:ad:28:07:7e:22:02:56:a9:f4:1d:
f1:ad:74:fe:7c:7b:9e:84:a5:2c:c6:79:fd:a6:8b:a4:ef:fe:
59:cd:c7:af:5a:c7:f3:da:d7:5f:b4:93:c1:48:83:23:0d:51:
08:96:92:57:68:c6:85:40:82:76:09:b6:1b:b2:76:64:9e:3c:
f6:0e:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:44:06 2026 by rpki-client