
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: VQ8BfmHgnI7/Tlt9DFgu2AWIikcQnJ6dxnZTcP79pOg=
Subject key identifier: 94:EF:BF:4E:43:AE:19:09:7F:C1:8A:31:01:C9:CA:2C:D7:5D:46:FD
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 019D38D32018B57D2976A45F9DA03EE37E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: U3uCvUPXtkhVuIU8o5tU1D2/qpsgMaJwP6bJle1dWFA=)
2: LC5XnkZsOfNCOpPZpJMTg-YoH1M.roa (hash: 9dyJy9KVa6+GZ+Ne1KA1oy9opcxU4ZQ1lYWYUM4EkwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:20:18:b5:7d:29:76:a4:5f:9d:a0:3e:e3:7e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=94efbf4e43ae19097fc18a3101c9ca2cd75d46fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:e0:84:3c:44:53:08:7f:1f:8a:3f:ef:e6:
01:3f:6f:da:71:ed:3a:27:24:25:55:8c:73:87:0b:
e8:42:47:e3:e0:f4:e7:5d:09:55:cb:64:fc:63:06:
f0:61:60:22:d2:ac:aa:1d:e0:a4:bc:51:91:fd:90:
62:9d:d3:aa:59:fb:71:be:71:28:0b:9e:02:12:04:
01:20:ce:88:5d:22:1d:15:f7:f2:36:a2:d4:88:63:
ec:6d:8f:6b:7b:b4:e5:b6:ef:03:a2:00:2e:2e:cb:
b1:05:00:25:b4:fb:78:51:84:b9:9d:b2:b2:0b:ce:
39:43:b2:df:8e:ec:56:92:37:84:87:86:aa:9b:d3:
1b:61:92:f3:6c:ee:45:f7:80:7a:1d:21:b5:7d:7c:
64:15:ed:99:9c:14:72:94:0c:bb:ee:2f:b4:f7:94:
91:4a:e9:85:65:53:37:f2:31:8d:09:3e:65:f5:af:
61:90:a6:b2:81:dd:ef:72:59:be:43:03:67:b8:c6:
13:ad:6f:a2:f8:ec:8a:1b:49:d5:4e:ab:fa:bc:2e:
69:99:c6:ad:0f:78:08:42:ff:08:7d:12:c3:2e:7b:
1c:2c:dd:0b:15:99:12:28:0f:48:49:c1:d7:8f:a3:
32:c9:3c:df:80:43:d6:6f:7b:85:57:55:69:c0:27:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:BF:4E:43:AE:19:09:7F:C1:8A:31:01:C9:CA:2C:D7:5D:46:FD
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:54:cb:8d:19:5d:46:4e:27:2d:90:99:88:2e:6e:e8:89:
d0:81:f4:03:60:76:77:2e:4f:90:a9:96:66:56:e2:2a:25:a1:
fe:0d:82:9b:73:4a:98:c2:56:29:17:51:ad:03:bd:43:30:14:
96:b2:26:4b:03:7a:d0:e5:08:2e:b0:aa:b4:46:6f:6a:6d:7e:
27:2f:bc:90:be:57:71:5a:68:b0:f8:18:2d:57:a8:98:1c:fa:
4d:71:59:60:69:40:1c:ab:fd:31:e5:0e:a6:f6:53:45:3f:75:
54:ae:51:57:48:9b:38:4c:61:97:5f:81:8e:89:11:64:62:20:
f6:cb:bd:79:0d:30:9e:54:25:60:b4:98:80:99:45:aa:5b:0e:
b1:53:9f:04:9c:10:7a:98:75:1a:ff:2b:7f:79:4e:61:f3:f6:
4f:28:b4:fc:02:6d:86:6b:81:cf:d7:73:70:b9:65:91:10:e7:
4d:74:5d:58:4b:40:18:b0:27:af:42:36:d1:2a:d3:56:10:5f:
27:c5:ed:45:0f:7d:4a:b5:0a:25:2c:56:68:35:cc:94:d9:4e:
1b:5a:52:b2:a1:86:71:04:e1:be:64:a1:86:99:da:4e:42:f6:
b5:8f:b7:6c:66:27:51:6d:52:c8:4e:75:4f:58:f1:22:fa:39:
f0:41:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:18 2026 by rpki-client