Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: XKJ+XzFCwKQbs3biY6A96xHO1YCWgtEdITnCHDqqdSA=
Subject key identifier: 3D:4F:8A:B1:53:AE:32:48:0B:14:97:4B:2B:4F:69:AB:41:2D:99:E1
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019D38663B1D9E12950304279948FC067890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 148F
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: MSkxnw4eyLXwVHQr0eYlBK7aTFxkc+961nJnMgepyZc=)
2: g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa (hash: ENAgFJa6dqHP3ZHjhcKA/BIcppzlZ/9wq2mVnrsfeV8=)
3: lJb5lAFohzfMydj804z3JPUVnyc.roa (hash: PyjYKIx7mQvs4uA+2fO0dKGHiZ5xO9frfNP8obB2rXI=)
4: s280gYIfz7LLg7UI8DnH_9zZ-nc.roa (hash: 0XvpQfwjTnUeeYMt2sG5z+LAZnoLxsExJ4JPz1TlC3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3b:1d:9e:12:95:03:04:27:99:48:fc:06:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=3d4f8ab153ae32480b14974b2b4f69ab412d99e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:a6:93:68:c0:68:ef:bb:b9:93:72:d3:ab:
52:51:00:5b:2c:4a:b8:ad:d5:ff:23:db:1c:9c:5f:
bf:71:e5:e5:f9:ff:82:67:4b:87:8d:90:63:c9:c2:
7a:20:fe:b9:bd:4c:b1:7b:29:bc:6f:8a:ec:ee:ca:
d8:5a:f7:75:23:b2:67:5f:af:58:f8:e5:7f:dd:72:
76:df:4c:08:86:7b:19:fd:ea:6f:a8:f8:74:f8:14:
3d:c6:e9:7f:cd:e8:c8:fd:2e:18:ff:0b:dd:15:ba:
86:58:ca:22:5d:e9:6b:6d:13:6e:69:59:1c:37:26:
4d:2f:bb:bf:b5:69:b6:2f:5b:70:c1:b2:18:1d:fc:
37:30:86:bc:a0:de:13:4e:25:61:5a:29:94:d5:30:
84:b6:93:e3:8a:9e:f7:e7:73:15:34:c2:a1:8a:5c:
5b:9d:be:52:de:1c:78:bd:e7:6b:d9:47:cb:94:7d:
f5:80:44:94:b6:39:ba:29:b4:93:1e:68:49:30:5b:
d4:a1:d1:b1:ce:a2:43:68:2a:60:f1:6e:9f:d2:e8:
37:cf:75:b5:e3:b4:7d:89:1a:a5:6b:90:47:fc:7c:
89:0b:ef:3e:3c:05:08:15:79:20:60:a2:61:74:06:
3c:c8:d8:bf:95:8a:57:ce:bf:8c:6f:0e:eb:c4:8e:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4F:8A:B1:53:AE:32:48:0B:14:97:4B:2B:4F:69:AB:41:2D:99:E1
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:76:ce:fd:94:30:c3:12:51:48:c2:43:04:24:f5:d6:41:
2c:b1:27:51:73:6d:48:63:b0:47:6b:32:90:34:7b:26:e1:91:
66:c5:70:fc:a9:38:3c:6e:15:ac:c4:ac:2b:6d:1e:95:00:17:
9f:92:bd:db:74:51:52:49:9c:c7:23:0e:51:54:48:8e:7c:6d:
ea:50:0e:48:b2:46:1d:a2:b5:ed:e6:30:4b:4a:19:0e:49:ca:
90:b6:d9:8d:1c:22:20:9d:19:2f:9e:b5:29:d9:25:1d:0f:3d:
f8:c9:ec:08:0d:32:aa:a3:59:87:f9:6b:e9:21:b3:dc:68:54:
70:a7:e6:10:f6:26:f8:26:7e:21:f5:91:49:0b:50:9c:8e:bc:
05:cc:f6:70:ee:00:31:36:80:e9:99:95:5a:cc:34:87:50:1c:
96:8d:61:62:45:d6:61:65:e3:88:ab:24:72:0e:f4:94:bb:1d:
52:77:62:1c:08:0e:29:cf:a0:4c:3a:f1:e9:aa:00:90:11:af:
e6:40:1f:88:d2:23:0b:ed:2a:e5:04:56:08:15:b2:38:8e:cc:
77:95:e8:ae:8d:38:49:49:e4:9f:64:2b:d1:b6:d3:01:d5:b0:
af:b9:5b:f7:06:e5:dc:2f:9f:89:5d:77:a9:13:19:af:d3:63:
27:88:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:31 2026 by rpki-client