Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: bEdUqCJDJ3g0hZIU003IPc0PhzoFeo7I2jHln6KNcLY=
Subject key identifier: 1B:23:B9:77:88:80:38:99:BD:B3:CC:66:87:ED:DE:5B:6D:C9:A8:1E
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 019D3909B6212674EEFD46EDBA836AB5369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 085D
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: 9IUhfW_W_atT4Rdt9waLsluclNM.roa (hash: Yv60tx6MkUHbKTa9fL1Ng3xfyWGESFLss/yfVo5hLwk=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: lR51Y/lgeGLOhnXwo0ost6np7EtIAhA6clsNTqOEJ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b6:21:26:74:ee:fd:46:ed:ba:83:6a:b5:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=1b23b97788803899bdb3cc6687edde5b6dc9a81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:ee:52:68:43:d1:10:af:09:46:a9:d5:b0:
17:60:b1:59:c2:0c:14:dc:df:9b:82:85:ea:a6:2a:
7b:d1:da:bd:ee:42:dc:13:f7:95:01:8f:2e:62:0e:
29:bd:bb:7b:d4:f8:d6:8d:e3:f7:87:69:44:bc:d2:
a4:7b:e6:bd:e6:f2:49:b5:58:47:9e:1e:3a:b8:d4:
9e:a3:58:15:0c:58:d6:95:6e:cb:f9:14:22:78:f6:
ae:6f:9e:a9:49:f5:c9:51:03:3d:f7:7d:c5:39:71:
13:50:08:6c:28:6d:e3:01:bb:88:6a:57:15:4d:79:
f6:0e:17:4c:99:95:ae:81:8b:4a:d4:b3:b7:df:5f:
cc:42:a6:ae:58:79:37:9b:f9:2e:eb:7b:d4:ee:11:
95:eb:3d:f5:fd:a1:1b:04:9c:58:a3:41:7e:08:bd:
ac:08:c7:39:53:0c:66:37:8e:18:af:73:37:6f:6e:
c6:70:0b:44:0d:40:67:cd:19:e9:13:44:c0:88:76:
1a:44:b9:b1:bb:61:6e:23:9b:f9:06:4b:2f:23:51:
a9:8c:b1:ce:b0:cc:3a:c9:b0:15:c5:49:b6:24:18:
d2:10:09:4f:4f:85:36:83:e2:13:89:cc:f0:e0:70:
3f:2c:f9:d6:84:00:9d:39:04:a9:64:c8:63:be:6d:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:B9:77:88:80:38:99:BD:B3:CC:66:87:ED:DE:5B:6D:C9:A8:1E
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:29:41:d9:11:0d:98:b8:48:6f:fd:d2:37:11:fb:4b:19:
5a:4c:cb:da:24:d3:2d:98:28:6d:8e:07:cf:5a:b7:e8:94:9e:
2e:6f:dc:8f:75:b3:2d:41:7b:09:7f:f7:ce:a0:a9:32:2e:54:
f6:04:85:53:0d:f2:51:19:15:f7:2d:6f:03:e4:3e:a2:dd:98:
c0:95:76:28:4d:17:07:a1:ee:96:4b:41:49:6a:6e:7d:37:f2:
38:3c:d1:77:95:cd:f5:a0:8d:de:cd:1e:a4:06:84:ea:cf:9e:
d4:3c:66:b3:07:4e:40:ca:74:f1:d2:3e:5f:57:62:62:b0:a6:
fe:db:99:82:14:04:bc:74:a8:93:ae:83:af:75:aa:25:3e:94:
8b:08:c0:94:88:07:6f:a8:a4:80:49:51:c0:53:5b:18:be:b7:
4b:06:4f:db:87:5c:10:28:c3:9a:8c:65:eb:98:29:50:8a:48:
c7:49:5e:1f:3a:53:12:05:11:d5:f0:fa:c7:79:57:fa:b1:6b:
be:a1:8c:3e:3f:15:12:4f:1f:72:9a:c9:55:5f:c6:d0:96:79:
26:94:1f:b2:79:6f:b9:27:20:d7:e0:3f:dd:3a:f5:f0:f9:9f:
c0:89:80:12:9e:d0:47:f9:0b:91:f0:79:6c:05:27:83:2c:73:
0d:4c:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:58 2026 by rpki-client