Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.mft
File: 96-02tuTVgEgyfxM-5EeBEqoJ0M.mft (raw, json)
Hash identifier: BEzr85LOBxzL77QwZcTUbNz1mmDjc7KsoQ0B+/z7wlM=
Subject key identifier: 96:99:5C:74:89:E4:02:62:6C:DC:16:F0:3E:B4:D9:47:47:0E:E9:A4
Authority key identifier: F7:AF:B4:DA:DB:93:56:01:20:C9:FC:4C:FB:91:1E:04:4A:A8:27:43
Certificate issuer: /CN=f7afb4dadb93560120c9fc4cfb911e044aa82743
Certificate serial: 01A151086CA2240CE90EB25DC6BDCA8F7DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96-02tuTVgEgyfxM-5EeBEqoJ0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.mft
Manifest number: 33
Signing time: Sun 18 Oct 2026 22:01:08 +0000
Manifest this update: Sun 18 Oct 2026 22:01:08 +0000
Manifest next update: Mon 19 Oct 2026 22:01:08 +0000
Files and hashes: 1: 96-02tuTVgEgyfxM-5EeBEqoJ0M.crl (hash: CTegcd1zpugahxG4slpzwbM7BXcalF9qAQJ7OsS/kgg=)
2: g4IN_o9b_i2TT8ouMUtFkvTWals.roa (hash: rf/XfEaRfGfq5oA0ri7mvzi2aJ4ReQHceRq0ZALCi6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/96-02tuTVgEgyfxM-5EeBEqoJ0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:6c:a2:24:0c:e9:0e:b2:5d:c6:bd:ca:8f:7d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7afb4dadb93560120c9fc4cfb911e044aa82743
Validity
Not Before: Oct 18 22:01:08 2026 GMT
Not After : Oct 19 22:01:08 2026 GMT
Subject: CN=96995c7489e402626cdc16f03eb4d947470ee9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:8c:df:1d:99:97:ca:6a:db:a2:12:43:1f:
42:91:31:70:04:c8:d4:b9:3b:8c:3a:ca:07:25:b7:
ad:8a:2a:e8:c8:81:08:2c:d8:56:63:e5:23:ad:a2:
79:0e:e4:9c:ed:f0:54:66:70:70:72:26:bb:d4:b4:
ae:1c:ce:b0:dc:23:86:ba:cd:13:01:99:5d:e4:de:
a4:d0:a5:99:fa:75:7a:40:7d:f6:ba:98:88:60:80:
59:7c:42:df:a5:f1:7c:ba:b1:61:03:96:6f:95:63:
1f:9d:c3:3b:76:f4:db:75:d2:76:53:fd:33:b8:53:
3d:a7:26:77:95:49:ad:10:dc:69:42:69:94:72:44:
a4:97:ef:f2:fe:65:ce:fd:d2:68:98:3d:00:50:d2:
9b:2d:f4:75:72:3f:f7:b5:8a:9e:2b:d3:54:1c:bd:
d8:5b:2f:03:7f:1f:81:e4:7d:90:02:04:b7:80:f9:
8c:d2:88:ff:3c:6a:28:6b:aa:b7:ea:4b:c8:5c:92:
4c:80:d6:35:f5:d5:7f:c3:bb:00:4f:52:f2:95:2e:
9e:73:eb:f2:cf:21:21:1b:6c:54:6a:e8:6e:a3:72:
5e:e6:98:80:c5:e2:91:06:ea:c8:95:5a:ac:59:ca:
46:9f:ad:e2:d9:b7:5d:9e:81:5f:a5:88:b3:17:fd:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:5C:74:89:E4:02:62:6C:DC:16:F0:3E:B4:D9:47:47:0E:E9:A4
X509v3 Authority Key Identifier:
keyid:F7:AF:B4:DA:DB:93:56:01:20:C9:FC:4C:FB:91:1E:04:4A:A8:27:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96-02tuTVgEgyfxM-5EeBEqoJ0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:ad:d2:e9:cc:0b:a4:47:4d:cb:ac:34:ac:99:a3:c6:16:
ac:e7:51:e6:43:15:40:91:e1:c0:65:bb:cb:78:70:eb:29:68:
82:f0:94:94:01:2d:53:fc:22:fe:33:59:d5:19:a5:b8:e3:ff:
06:f8:d7:a6:3d:17:4f:b8:42:36:14:ab:bc:fc:d5:82:c2:46:
4a:91:b0:b7:72:40:fc:34:ee:ab:6b:62:5e:85:59:4d:2e:89:
0c:4b:8a:a9:c9:e7:27:08:3f:0f:1b:07:6d:7c:a0:11:5f:2c:
46:49:e5:32:06:9b:0f:99:e0:a2:d3:c3:a5:93:3a:58:7d:f1:
64:6c:03:c6:73:59:9a:3e:b0:9d:a6:fe:cb:fc:a5:f2:85:45:
82:5b:21:df:cf:9d:02:8e:f0:3e:d8:f1:b3:47:ad:8e:90:cf:
bc:64:a5:79:8a:b0:32:f4:59:dc:ea:dc:24:01:dd:2c:39:22:
96:99:a6:30:bb:dc:fa:ed:cb:d3:a2:8d:8f:c7:6d:bb:6c:64:
fb:d8:9f:ba:e3:8f:04:c0:c9:1a:a9:95:84:5a:22:52:c6:c9:
43:62:b5:8d:2c:f5:e9:d0:80:16:24:3a:aa:40:f4:21:fe:8b:
9b:b7:7c:ec:e3:1d:5b:a0:9e:a7:9c:53:28:b9:61:2e:d3:dc:
44:93:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:13 2026 by rpki-client