Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: FCnIdxaAXU3kmoLCFnhOVEIRJY9OhJwMltR0V8c7QOE=
Subject key identifier: B2:CC:C3:E8:FF:D9:62:0B:FB:2C:2E:74:AA:26:47:E0:06:6B:A5:C0
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019D3940E96628AC218394F31C66B98FCB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 13A7
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: 9PmCAKMM7Gx59ZxoYK2IciFfbIk.roa (hash: 3XM8c/6mZWGuvlojek43syl+Uho1Ahf7pi/fCF9cLlI=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: Ao4mvaG5Aw2nUJQFt9AIJTe0PrFCWwQjCV6qX45rm8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e9:66:28:ac:21:83:94:f3:1c:66:b9:8f:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=b2ccc3e8ffd9620bfb2c2e74aa2647e0066ba5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:88:e8:fb:6c:32:dd:55:f1:eb:47:1a:e5:
05:d5:6b:44:4b:ac:43:03:a0:23:db:fd:43:7d:00:
93:71:51:46:f6:9d:c3:82:89:3c:8a:a3:5b:b8:24:
17:ad:83:ac:2f:5d:67:1b:66:5b:56:9c:19:11:ec:
e3:5c:b1:80:75:8a:99:0f:ab:a7:69:3a:30:c2:41:
6f:bc:66:29:8a:bd:a8:ca:e2:13:65:e3:29:4d:19:
2d:e6:25:97:d3:4d:c9:3d:be:bf:b7:05:a9:37:51:
bd:eb:5f:a1:7d:a4:25:de:6d:93:bb:1e:13:d2:dc:
37:f9:24:24:bf:8f:fc:00:58:54:95:14:b7:b2:45:
29:28:74:55:5a:d6:3f:45:e3:b8:08:7a:43:24:c3:
6e:56:9f:96:c5:0d:9d:0e:d3:73:8e:eb:fd:e1:e6:
63:37:2f:27:4a:49:ab:5a:74:a5:2e:67:14:b3:83:
7d:47:66:09:c8:91:bb:b0:84:6c:30:6f:9c:ea:9e:
0b:37:e7:54:cb:b6:aa:55:f9:e6:5f:23:a5:bb:d6:
8a:60:14:f1:fb:4e:6a:0f:1a:ad:4b:66:62:7f:ea:
94:b6:98:b1:e8:45:50:77:31:d0:f2:9a:65:52:f3:
f6:f1:ed:03:c3:6a:a1:be:fa:1e:44:69:73:cb:51:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:C3:E8:FF:D9:62:0B:FB:2C:2E:74:AA:26:47:E0:06:6B:A5:C0
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bc:46:50:09:65:f1:c0:f7:f8:b5:36:37:a7:02:9c:aa:63:
34:40:20:e6:e1:52:95:90:f2:84:ef:9b:a9:ea:b4:18:c2:7b:
47:e6:6c:3c:9a:8b:a4:ae:0f:32:85:e9:ba:e1:36:d2:7c:76:
0d:26:25:bc:be:a3:51:ad:2b:b0:34:89:a5:41:36:78:d9:a1:
b2:3a:d5:0f:38:51:a5:8e:07:72:15:2b:28:89:50:60:80:e7:
09:ca:8f:42:a5:32:5b:1d:b7:2d:37:27:85:78:ad:b6:65:54:
8e:f8:ff:09:25:6d:de:a0:87:d4:ba:09:3a:a5:15:8a:15:6c:
c2:7e:76:f1:1f:5d:39:63:db:06:24:8b:de:c9:c9:47:ce:e8:
81:ed:c3:28:b1:c7:93:b9:69:6e:3a:6f:b3:76:de:74:a7:44:
f2:a2:bb:15:7a:78:3c:72:46:1a:ed:b6:0a:16:f1:14:30:38:
86:5f:63:1a:12:29:83:2d:a0:e6:82:a8:32:08:22:1a:66:a3:
06:42:a3:7d:40:bf:4d:6b:ad:b4:23:f9:39:4d:b8:aa:9d:67:
5e:1c:11:4a:aa:a7:e6:b3:88:06:15:b5:4f:52:61:dc:27:2a:
6e:a1:fe:89:fa:5c:c4:7a:a1:9d:12:c5:85:c1:3e:00:ce:7a:
5d:f9:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:01 2026 by rpki-client