Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: ppFjkn3HmPYS93Gj9pI8bOZFC68esIxIdBPeezyuO74=
Subject key identifier: 16:1B:7B:43:31:6B:4C:70:3A:48:AE:23:16:58:28:EC:49:84:D3:DC
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 019DA4537D2D33FB8CE1F2E7002350EE7DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: 0344
Signing time: Sun 19 Apr 2026 06:00:28 +0000
Manifest this update: Sun 19 Apr 2026 06:00:28 +0000
Manifest next update: Mon 20 Apr 2026 06:00:28 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: CMgX4HA7ToPNUdONyRy96BmVSlnkvB1Y1JZJKn0jPAA=)
2: vFFZFK4TX8jTQjPiOmHhG-k5aWs.asa (hash: bQCPabHWJRjhgkG97BUmmClqLPQ5AFMWR4jfl/SuARM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:7d:2d:33:fb:8c:e1:f2:e7:00:23:50:ee:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Apr 19 06:00:28 2026 GMT
Not After : Apr 20 06:00:28 2026 GMT
Subject: CN=161b7b43316b4c703a48ae23165828ec4984d3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:f2:2f:08:57:80:3e:58:6e:c0:c5:fc:58:
72:70:72:f4:c2:c7:2d:af:b3:10:b5:07:3e:f8:55:
1b:d8:31:6a:36:0e:a5:e1:45:da:db:d7:1b:36:a1:
2d:de:15:06:ec:2b:53:c4:5a:a3:9a:ee:22:04:9e:
66:6a:a7:6b:d8:08:85:67:47:71:98:97:cc:de:9b:
86:1d:f4:a5:70:50:bd:21:bb:4a:76:ce:c6:88:3e:
db:0c:1c:a7:3a:25:84:38:d2:0d:90:6e:15:43:6e:
7f:c5:7c:9e:2c:df:33:44:c0:f4:c5:e7:05:3c:56:
6e:59:be:83:8c:74:62:03:57:44:1b:5e:92:b5:29:
48:d3:02:f1:ba:b1:c5:03:e7:cf:0a:b7:e0:99:44:
31:38:4c:7d:7a:df:a4:2d:66:da:0b:5c:b6:e9:57:
fb:1a:18:00:4f:f0:e6:b4:ff:31:8d:2d:94:9f:24:
51:fc:ab:dc:14:5e:f9:89:27:64:5f:8a:b6:1b:53:
09:de:0d:5d:7a:d4:88:f4:e9:ac:e8:52:e0:66:44:
73:69:62:3d:75:29:eb:a6:1e:71:b2:20:a2:a4:06:
e1:0e:4c:a9:fc:ec:4f:6f:8c:ae:67:81:29:ef:24:
0f:09:75:8e:37:77:6d:ec:37:3c:cc:aa:77:cf:3b:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:7B:43:31:6B:4C:70:3A:48:AE:23:16:58:28:EC:49:84:D3:DC
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:4f:4e:0a:76:95:6d:23:30:6a:5b:80:86:65:16:a1:c9:
dc:bf:95:84:4c:00:5f:27:cf:cf:3b:4d:a8:8b:bf:a6:08:fe:
17:ca:a2:ee:39:5c:8e:78:5f:ac:c6:56:0c:d1:62:59:fd:3d:
37:a0:9e:3c:60:05:23:72:eb:c9:a2:61:5b:e2:a1:ea:38:9a:
93:16:7f:ef:a3:ba:ea:64:80:0a:9b:03:05:a6:a0:98:d7:15:
e0:cd:fe:4e:78:f2:65:3c:2c:6b:de:41:a2:c9:ac:01:de:e1:
b8:77:5c:cd:e5:9a:18:9b:de:55:c2:ac:ea:78:58:5c:6f:05:
c3:85:1b:21:81:bd:7f:8e:f2:88:c4:b9:e8:0d:29:1e:8f:08:
82:9c:7a:40:d0:b4:b6:ca:65:58:24:4c:87:b7:36:ab:4f:8e:
fc:a2:36:20:b7:31:f2:91:18:35:b2:a8:4c:b1:c9:f1:40:49:
37:a9:da:e4:aa:31:5c:7d:68:9c:b5:3f:a7:d1:58:1f:34:d8:
e8:b8:a3:14:05:82:bc:bb:7e:64:c3:6f:1d:1f:a2:64:e1:b0:
37:89:52:8d:f8:02:c5:7f:e3:15:b6:42:36:96:ed:ea:c6:d4:
0f:89:05:21:7c:c2:46:ab:4c:e5:bb:5a:a3:67:56:8a:99:97:
3d:ac:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:27 2026 by rpki-client