Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: gm0ENb4iauRD+vqopBHVFa9IV6agSrviezqQCIHMAdE=
Subject key identifier: BD:CD:9A:B8:6D:B8:75:26:0F:4B:F2:E7:7E:F9:2B:54:25:1A:FB:CE
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 01A03F3BA6E007AAC61B41B6EBE9BC2A6180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: 04D6
Signing time: Wed 26 Aug 2026 18:01:08 +0000
Manifest this update: Wed 26 Aug 2026 18:01:08 +0000
Manifest next update: Thu 27 Aug 2026 18:01:08 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: qZbuTQgxdmExYV5lzvNiF6xnS3DdCw2asboxzK9eX9Q=)
2: LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa (hash: 9dyJy9KVa6+GZ+Ne1KA1oy9opcxU4ZQ1lYWYUM4EkwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:a6:e0:07:aa:c6:1b:41:b6:eb:e9:bc:2a:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Aug 26 18:01:08 2026 GMT
Not After : Aug 27 18:01:08 2026 GMT
Subject: CN=bdcd9ab86db875260f4bf2e77ef92b54251afbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:35:3e:77:a9:4c:d3:af:af:09:fa:5d:3f:
58:00:50:28:39:d7:83:7f:0c:79:81:72:1e:78:0a:
cc:55:e6:5e:f3:ed:b6:e1:dd:51:dd:6c:50:79:94:
d4:ef:3b:0f:c3:ff:61:0a:17:7b:d7:8f:f9:fc:ea:
61:0b:a0:83:95:34:e6:89:20:83:d4:c1:18:70:3e:
94:b1:7c:5d:56:a9:95:49:ad:4f:24:13:1d:e8:07:
00:c1:36:f6:20:2e:c3:09:28:f7:75:c8:68:10:ed:
54:0e:5e:d8:84:b5:0f:83:00:9e:13:27:b3:23:1a:
d3:ee:09:1b:9a:bb:75:9c:4e:b0:42:2f:fe:8c:10:
79:61:00:ab:f6:4b:52:45:35:0e:ba:ef:f0:7b:e7:
f4:c9:28:c8:87:d5:0d:fc:11:80:db:c2:42:2d:58:
6d:89:0a:5c:a1:71:66:9f:11:6b:a1:e1:c4:5d:39:
f4:42:83:48:68:23:54:01:a1:f9:42:cb:fd:71:a7:
cd:35:7e:ed:24:bf:cd:5c:34:fa:76:86:b8:1b:8a:
0d:69:74:74:f0:5c:d3:b6:37:09:21:14:3a:41:c4:
02:cd:14:bc:e8:1c:c7:39:8e:e5:07:96:5c:bd:c2:
20:72:a6:0b:06:52:93:b6:ee:03:85:09:2d:37:a5:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:9A:B8:6D:B8:75:26:0F:4B:F2:E7:7E:F9:2B:54:25:1A:FB:CE
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ac:b5:a9:36:57:ad:eb:df:38:80:1a:95:06:c9:e7:12:8e:
64:56:d5:c5:65:a8:68:00:93:c7:22:e3:19:91:c8:14:02:b5:
41:18:77:df:a2:64:85:b6:7f:0f:9b:06:60:c7:a2:5c:8e:3b:
79:d0:c1:72:2f:a6:79:82:10:6e:da:ee:2a:f4:c5:ba:61:44:
27:91:9a:46:b2:6c:90:b5:80:ac:18:f0:c4:17:fc:29:25:9b:
35:83:da:da:6b:06:d3:7e:ff:14:4f:5f:a1:33:ae:15:8d:ef:
a7:61:bb:87:05:85:93:af:85:59:48:bf:d1:78:8c:7a:aa:c2:
53:d8:82:42:76:b8:aa:50:4a:70:cb:e6:82:5e:aa:ab:56:ce:
57:43:1a:b5:2d:8f:7a:57:18:09:e7:f6:b4:9e:da:6a:6e:b7:
b4:f6:33:05:f8:6c:05:d6:10:c9:5a:48:82:71:d9:cc:46:35:
f2:dc:59:e7:f8:bd:47:54:be:92:bb:54:e3:5e:f4:d4:85:f6:
78:4e:05:ed:dc:39:6a:cb:82:a4:eb:cb:5a:2d:e0:c7:87:5b:
75:0d:52:cb:37:af:4c:aa:45:26:13:9e:8f:16:f9:64:d1:7c:
c9:2c:cc:a5:9e:4c:28:0c:fb:e7:8f:2d:e5:ce:fc:cf:8f:24:
d6:0a:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:36 2026 by rpki-client