Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: 4PXR0V/J+UygFlGt59bUuLFMi3taJj2kBqzuv0f8cso=
Subject key identifier: 9B:6A:3E:3C:E4:1C:C9:5C:83:76:FD:9E:A1:45:F0:13:C5:2B:3C:98
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019D99624149E9E5B47B4C9D0E2954F05F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 17C1
Signing time: Fri 17 Apr 2026 03:00:46 +0000
Manifest this update: Fri 17 Apr 2026 03:00:46 +0000
Manifest next update: Sat 18 Apr 2026 03:00:46 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: q1/uWf7DaK3XxjgRHSADE6XgcVACMTTEkeyDeo60oMg=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:41:49:e9:e5:b4:7b:4c:9d:0e:29:54:f0:5f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Apr 17 03:00:46 2026 GMT
Not After : Apr 18 03:00:46 2026 GMT
Subject: CN=9b6a3e3ce41cc95c8376fd9ea145f013c52b3c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:9a:91:58:36:6e:3b:fb:18:cf:d7:6b:f3:
9d:b0:f3:6a:91:63:24:3f:9b:ff:54:42:34:d9:9f:
33:f0:9a:52:b3:5f:6b:fb:2e:6a:28:e8:14:3c:ae:
85:dc:98:b2:f5:0b:4e:3d:14:c5:4c:99:78:49:b2:
f5:1b:ab:45:ea:7b:4b:62:7f:07:18:95:6a:2f:f5:
fa:f3:cc:7a:ad:0a:fb:68:53:6c:ea:81:69:0e:22:
9b:d1:36:40:6d:9a:99:5e:62:f2:6a:8b:3f:22:ca:
f8:3d:28:32:5f:83:38:fd:76:35:36:3c:d6:18:e9:
e8:23:87:4a:33:be:8d:2b:6a:82:8b:cf:65:76:d1:
91:83:c1:5d:d8:cf:eb:c3:5f:53:72:f3:80:c3:73:
db:4c:26:7d:df:b6:cc:78:b5:a0:ff:d7:3e:58:df:
ea:f0:e1:02:97:c5:f9:aa:cb:5a:0e:64:92:76:e3:
cc:86:a1:5d:33:ba:ef:1c:ed:50:91:fc:02:28:cf:
2c:2d:83:90:cb:7d:cf:be:13:70:54:26:c7:75:7c:
7a:d8:83:2e:0a:99:d9:aa:dd:e2:7a:44:46:1f:47:
fe:73:21:7e:a1:54:42:aa:7b:5f:22:4f:89:c0:34:
d6:e5:5a:1f:63:3f:b4:8c:57:44:ec:76:31:5f:a2:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:3E:3C:E4:1C:C9:5C:83:76:FD:9E:A1:45:F0:13:C5:2B:3C:98
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:58:7e:39:59:8d:78:67:f9:fa:80:fe:12:ca:33:47:61:
bf:a3:6e:5f:6c:a4:6a:63:df:88:6f:c6:5e:70:ac:59:cd:51:
fb:af:c5:8a:50:2d:b5:f4:54:81:2e:7e:2b:a7:de:29:bd:ca:
a8:17:a5:fd:05:08:ab:d1:33:b8:a0:97:a1:03:65:a7:bc:43:
e8:f2:6e:5a:c5:05:45:40:63:39:eb:cf:cf:7c:8e:65:3d:d9:
a3:49:52:e1:e5:94:c0:22:10:18:64:2e:7b:87:7a:2f:95:4a:
7e:01:b3:3a:12:25:e3:64:9c:2e:2a:93:ae:86:9e:16:5f:a9:
78:de:90:02:be:e7:1b:9f:57:79:ab:80:3d:5b:92:36:b3:ab:
3a:01:23:a4:ec:b8:5b:93:52:25:88:e2:f5:fb:8c:fb:99:f8:
62:23:2b:6a:2b:05:47:5b:be:a4:52:29:8f:81:48:b1:68:a5:
96:5a:fe:7c:f9:4e:56:2a:0a:96:7e:0b:c9:d3:01:2a:42:0e:
74:a2:27:2b:fe:48:d7:2a:ec:c3:78:0b:f8:f1:22:3f:e6:81:
08:6d:a1:b7:44:41:86:c0:42:01:09:72:15:b1:c4:de:ae:6f:
9e:52:84:ce:0d:48:40:a6:46:12:30:96:7c:f1:34:f9:ed:99:
91:04:65:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYkFJ6eW0e0ydDilU8F9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0
ODAwZmEwHhcNMjYwNDE3MDMwMDQ2WhcNMjYwNDE4MDMwMDQ2WjAzMTEwLwYDVQQD
Eyg5YjZhM2UzY2U0MWNjOTVjODM3NmZkOWVhMTQ1ZjAxM2M1MmIzYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDWakVg2bjv7GM/Xa/OdsPNqkWMk
P5v/VEI02Z8z8JpSs19r+y5qKOgUPK6F3Jiy9QtOPRTFTJl4SbL1G6tF6ntLYn8H
GJVqL/X688x6rQr7aFNs6oFpDiKb0TZAbZqZXmLyaos/Isr4PSgyX4M4/XY1NjzW
GOnoI4dKM76NK2qCi89ldtGRg8Fd2M/rw19TcvOAw3PbTCZ937bMeLWg/9c+WN/q
8OECl8X5qstaDmSSduPMhqFdM7rvHO1QkfwCKM8sLYOQy33PvhNwVCbHdXx62IMu
CpnZqt3iekRGH0f+cyF+oVRCqntfIk+JwDTW5VofYz+0jFdE7HYxX6KInQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtqPjzkHMlcg3b9nqFF8BPFKzyYMB8GA1UdIwQY
MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt
ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy
LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlBYfjlZ
jXhn+fqA/hLKM0dhv6NuX2ykamPfiG/GXnCsWc1R+6/FilAttfRUgS5+K6feKb3K
qBel/QUIq9EzuKCXoQNlp7xD6PJuWsUFRUBjOevPz3yOZT3Zo0lS4eWUwCIQGGQu
e4d6L5VKfgGzOhIl42ScLiqTroaeFl+peN6QAr7nG59XeauAPVuSNrOrOgEjpOy4
W5NSJYji9fuM+5n4YiMraisFR1u+pFIpj4FIsWilllr+fPlOVioKln4LydMBKkIO
dKInK/5I1yrsw3gL+PEiP+aBCG2ht0RBhsBCAQlyFbHE3q5vnlKEzg1IQKZGEjCW
fPE0+e2ZkQRlUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:26 2026 by rpki-client