Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File: 96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier: pLsxDeYtF5eYViQO1fpn8uCHdW14CDkjag1fOSo+jF4=
Subject key identifier: 71:39:AA:07:A5:7E:DA:2A:31:95:9E:FB:20:AF:76:91:43:E2:38:84
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer: /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial: 019D382ECD9F5D9E10AE9545FA25980CD70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number: 05F2
Signing time: Sun 29 Mar 2026 06:01:24 +0000
Manifest this update: Sun 29 Mar 2026 06:01:24 +0000
Manifest next update: Mon 30 Mar 2026 06:01:24 +0000
Files and hashes: 1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: vKlWxDDgM5j7wGA0vIyBeOhELlJ0miQWUW71n14DU1Y=)
2: d4KrySsXtgR3TbJYSM5N4Uqx4KU.roa (hash: EHWSR+qUf6znYV7HsqlNW+Vcbs+/lAqwQEe/T0CiYVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:cd:9f:5d:9e:10:ae:95:45:fa:25:98:0c:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Validity
Not Before: Mar 29 06:01:24 2026 GMT
Not After : Mar 30 06:01:24 2026 GMT
Subject: CN=7139aa07a57eda2a31959efb20af769143e23884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:e6:2c:98:78:e8:16:c8:52:69:79:64:81:
a2:5e:0d:33:b9:0e:d9:36:69:1b:3b:2a:8f:4d:af:
4e:4b:63:d4:6a:33:54:32:9e:70:17:fd:e7:37:3c:
f7:80:04:e5:19:1a:ff:95:8c:6a:64:bb:60:66:10:
c2:e6:41:ff:23:71:e5:b9:d5:63:21:9d:bf:19:3d:
16:f3:2a:92:14:13:bb:f9:bd:af:2a:b6:78:38:2b:
26:be:57:d9:ae:b8:d6:2c:a2:4b:2e:a6:f0:99:99:
19:e6:ed:c9:78:24:c9:c6:ad:6b:e2:04:d5:f7:35:
6a:3b:5b:61:a8:88:19:51:90:25:4b:a6:e3:76:86:
7e:61:8d:63:c5:d9:d6:cd:8c:86:ea:ac:b8:bb:e9:
1d:e4:76:59:0f:df:30:2a:08:78:b7:5a:ca:7c:87:
ac:f5:89:3a:d0:6e:4f:65:61:b9:a3:97:f9:d7:16:
1c:01:9b:f3:85:6e:51:b7:2d:e9:58:72:ed:a7:d9:
f2:c0:91:aa:85:d6:ec:40:17:83:93:11:40:69:42:
fe:01:0a:7d:22:82:ee:1e:9e:09:e3:65:c7:11:51:
bb:f2:44:c8:99:9d:73:ae:34:75:b0:06:ca:32:dd:
73:2d:52:91:a4:d7:d7:5f:76:03:5c:89:0c:c2:ee:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:AA:07:A5:7E:DA:2A:31:95:9E:FB:20:AF:76:91:43:E2:38:84
X509v3 Authority Key Identifier:
keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:d0:83:02:c8:cb:67:a5:9b:47:0a:e9:5e:bb:17:19:a0:
54:b0:18:35:74:4e:e3:0c:ba:80:50:e8:da:b9:59:df:57:90:
6c:66:44:ae:f9:3a:04:20:82:ef:04:02:f3:38:65:54:2a:ef:
0f:31:c3:73:e5:77:06:0b:46:21:f2:53:81:76:be:c2:cd:11:
66:b4:be:2f:25:56:88:0a:dd:32:62:2c:c8:04:14:10:d5:02:
ff:bd:3c:a2:75:e4:b7:8b:be:76:2b:08:03:bc:c2:60:14:39:
eb:35:30:56:06:21:a6:92:25:34:2d:9f:77:ae:1a:c8:28:20:
df:ff:d4:38:0c:8b:7f:dc:e0:64:40:58:48:da:70:25:88:1a:
52:8e:c1:bd:19:43:a2:b8:23:17:36:80:07:41:c6:3a:3e:93:
44:f6:1d:81:a1:7f:5d:b9:5f:8c:4b:e9:6c:80:00:0b:92:69:
c2:6d:93:36:21:d4:7b:77:b7:21:bf:62:aa:fc:97:79:40:73:
d4:66:27:f5:c7:b2:d5:f9:77:0b:5d:08:57:3c:9c:3e:0d:1d:
60:58:3f:b8:60:bd:c9:7d:7a:28:ec:82:e6:46:15:eb:b7:e9:
95:c5:79:e1:67:bb:82:bb:98:bd:d4:e2:a2:bc:cd:6b:c2:e9:
99:7a:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:50 2026 by rpki-client