Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: QLgEyFzafc+I3uCZX4lxMDUIWMJbZ620W8r1gRoCXts=
Subject key identifier: E1:B3:D7:D6:25:39:EA:66:19:FB:09:0D:6F:F8:B7:E4:2B:B4:09:23
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 01A0C66A5F15B999229EF099988953F2F7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1966
Signing time: Tue 22 Sep 2026 00:00:54 +0000
Manifest this update: Tue 22 Sep 2026 00:00:54 +0000
Manifest next update: Wed 23 Sep 2026 00:00:54 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: /yN2XToPwfa44DKcc23pFH4VjFzrMHyQnEYjbUqFrt4=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:5f:15:b9:99:22:9e:f0:99:98:89:53:f2:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Sep 22 00:00:54 2026 GMT
Not After : Sep 23 00:00:54 2026 GMT
Subject: CN=e1b3d7d62539ea6619fb090d6ff8b7e42bb40923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:ea:c2:0f:32:10:e0:c8:7b:3b:a8:94:fe:
38:79:64:5a:cd:47:29:b3:82:12:0d:43:45:9a:90:
f0:b1:42:77:c8:78:b9:51:e9:b6:1d:7a:4e:54:50:
69:3e:ce:6d:1b:89:db:7c:72:ec:aa:ed:bb:82:ba:
c5:ec:71:c9:0e:76:18:a0:3f:54:da:e9:2d:c1:af:
13:f6:15:f5:27:8a:79:35:79:89:ba:f2:dc:b4:05:
00:0f:ca:e9:2a:2e:34:78:c6:0d:5d:f6:45:78:0a:
e3:b5:94:0a:17:41:f2:e4:d7:10:39:eb:e9:f8:ad:
bc:ae:e3:09:3f:df:a2:16:e3:b6:32:02:69:af:3d:
1a:40:1e:62:f9:84:a5:7d:cc:66:85:58:b7:f3:4d:
76:b0:d7:3b:0b:ad:54:c4:0a:af:45:cc:dd:4e:cd:
35:ee:02:c3:6a:a1:4e:fd:3e:6b:5d:ec:aa:f4:31:
39:30:34:10:4e:75:75:e4:a5:de:8c:f2:63:b8:89:
86:b2:f6:9a:ea:71:47:cb:df:41:52:3e:ea:0e:1b:
9d:73:2e:f1:61:a9:b9:82:c0:bb:de:a5:9d:23:82:
4c:ba:d7:18:cb:b5:94:e3:0e:03:c2:eb:62:a1:b3:
28:e7:48:c6:17:cc:f0:84:35:aa:d7:b7:a0:f1:07:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B3:D7:D6:25:39:EA:66:19:FB:09:0D:6F:F8:B7:E4:2B:B4:09:23
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:87:3b:87:f4:6d:a2:b4:0f:ea:15:61:2b:54:c6:08:9a:6c:
0d:c8:49:4c:94:a3:14:32:3f:c8:53:ee:7a:55:13:8e:a9:d8:
17:a3:56:3b:df:d0:63:7d:64:ba:4a:79:ec:5e:d6:ce:7b:3a:
52:c3:62:c0:32:79:b2:e3:97:1c:e1:a1:77:a3:2e:a7:e1:bd:
24:a3:68:8a:ad:a9:6f:19:23:d6:9c:f0:1e:6e:0b:16:d8:95:
a3:6b:07:af:d4:6f:3e:0c:76:55:30:db:40:2b:0a:06:1a:8e:
59:0a:49:6a:c8:cb:aa:1f:78:a2:a8:b3:02:e8:92:cf:a2:07:
c4:1c:d8:34:cf:01:40:d7:2d:bf:4c:c5:7c:74:fe:5d:98:71:
1c:67:74:45:2b:04:83:f8:dc:d4:53:43:f6:1b:10:31:56:9f:
3b:93:3e:38:b9:d5:eb:80:73:5f:fd:fd:b7:b2:20:02:9c:54:
36:0c:97:0b:38:38:ae:7f:99:49:6a:54:99:5f:86:eb:c8:6f:
fa:6f:13:23:f7:a2:0b:11:7b:01:9a:ba:72:3f:ca:77:42:0a:
b8:da:18:f2:d8:38:fb:0c:f4:c2:cd:36:ba:74:6b:6d:be:5a:
32:c8:65:5b:d8:98:da:08:c4:fa:52:c8:0a:2e:12:22:d3:ad:
5c:96:42:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:45:04 2026 by rpki-client