Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: ccGBH5B4O6taMyca1GDkpNhe0MZcCNXooejAJTma6vs=
Subject key identifier: 03:A2:BF:E4:F6:A3:CA:5C:E5:87:1D:E6:F6:D7:53:BB:41:01:20:3C
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 01A00025809C497AFB448DF87B688BB8B3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 15A3
Signing time: Fri 14 Aug 2026 12:00:52 +0000
Manifest this update: Fri 14 Aug 2026 12:00:52 +0000
Manifest next update: Sat 15 Aug 2026 12:00:52 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: 87f/GfEbMlHLt/dCpI2OXJPNA3I8rMfM/VtYSoiHY7Y=)
2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:80:9c:49:7a:fb:44:8d:f8:7b:68:8b:b8:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Aug 14 12:00:52 2026 GMT
Not After : Aug 15 12:00:52 2026 GMT
Subject: CN=03a2bfe4f6a3ca5ce5871de6f6d753bb4101203c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:27:6d:04:7b:07:fd:ff:3b:c0:4f:45:af:
49:96:dc:46:f1:44:2e:f8:6a:e4:fb:fc:d9:17:90:
a0:c6:7a:b6:4a:64:30:4f:b0:28:b7:e2:53:4c:58:
6d:2b:ba:52:b6:41:00:30:70:8d:9b:32:ac:e4:0e:
ed:6b:a7:8e:a7:c5:2b:90:97:d1:8e:47:3e:69:c9:
8b:99:5a:97:d9:66:ce:d0:21:eb:61:e3:61:e4:6b:
1f:4f:11:e5:89:d0:1e:dd:1f:32:c4:be:54:9d:28:
54:f8:aa:6d:ca:9d:32:bb:9b:e0:ea:be:d5:b8:72:
7e:0c:8d:c7:2a:26:0c:d2:40:7d:32:67:7b:eb:6d:
1d:5f:49:0c:b6:ff:a7:e8:5e:14:9a:e7:9a:c0:e7:
85:c4:2a:21:54:99:a0:ad:1f:f7:89:b6:ac:3e:0f:
24:67:b3:2d:5b:78:ea:0d:85:17:a0:c9:63:29:d9:
51:93:1a:07:cb:c1:22:b4:d7:2b:4c:50:b2:ed:0a:
98:2b:3d:23:51:5e:22:74:4d:11:0b:51:00:62:c1:
64:79:ff:f6:1f:41:fc:bc:ec:85:5a:7c:9e:19:02:
19:75:e0:49:a4:be:92:00:ec:39:72:c4:56:45:cc:
76:cc:e6:a7:0f:46:89:05:80:1c:39:64:f5:17:dc:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:BF:E4:F6:A3:CA:5C:E5:87:1D:E6:F6:D7:53:BB:41:01:20:3C
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:a8:54:7d:f5:ba:3a:41:d3:7b:90:4f:c1:00:70:33:23:
e6:55:8e:cf:f4:29:6e:7b:77:26:4e:8a:20:d4:f4:4a:f9:c9:
59:be:98:0e:64:9a:fd:e2:86:a2:c3:28:52:29:5a:8f:a1:0e:
9b:3e:b9:87:f5:81:ac:0b:49:4c:f1:03:0e:37:21:f7:aa:d3:
41:3d:f9:4b:b4:39:cc:bb:d1:4a:9b:a0:00:19:50:5d:a5:57:
cf:31:d2:b3:b9:b3:fc:19:bb:fb:a9:4d:06:41:ca:6f:3d:22:
a3:bf:ae:6b:08:0e:4f:02:b5:20:c7:20:c0:de:d1:a0:9a:33:
01:95:70:a9:c9:33:0d:fc:17:ab:94:87:9f:d2:46:67:c5:9b:
1c:0b:2b:0b:05:51:71:31:15:30:ed:d4:c4:70:53:c1:f1:dd:
92:70:a5:2e:9b:08:53:8d:d0:b6:32:3b:f0:68:60:96:d1:96:
bc:52:15:a9:e1:a5:17:96:74:2b:7f:46:cc:36:17:22:3e:9e:
c4:f6:1b:a0:91:23:29:9f:b7:02:02:c5:9c:54:ff:ac:98:86:
74:ea:17:50:a4:68:68:70:db:38:47:22:d9:62:68:5a:1d:b0:
20:42:02:78:75:9d:4c:00:94:82:a0:10:9d:8d:36:ed:cc:45:
90:dd:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:57 2026 by rpki-client