Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: vEiRKN1fB8ZY8aKNqtI3jpNUZC2Qpasd3jdCKCn+3bo=
Subject key identifier: 08:40:1D:26:49:14:93:15:08:7D:9D:64:0D:96:1C:CC:F9:A8:FD:9A
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 01A08A8D653483102C4072B69F94ADB70280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1947
Signing time: Thu 10 Sep 2026 09:01:57 +0000
Manifest this update: Thu 10 Sep 2026 09:01:57 +0000
Manifest next update: Fri 11 Sep 2026 09:01:57 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: P6XYEbsnbGGHCc5vhGqap8KRfBSFWNgPXDDFGoGbots=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:65:34:83:10:2c:40:72:b6:9f:94:ad:b7:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Sep 10 09:01:57 2026 GMT
Not After : Sep 11 09:01:57 2026 GMT
Subject: CN=08401d2649149315087d9d640d961cccf9a8fd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:91:70:a1:88:e4:e3:e2:40:a6:99:9d:c7:
97:93:0e:fb:9b:59:58:6c:37:ec:56:73:cc:5b:2c:
ac:15:a4:32:c3:b3:86:e1:b2:21:54:0b:33:b7:ae:
0c:4c:48:c1:cd:a8:44:df:d6:1b:52:86:83:55:c2:
4a:f9:51:5f:95:a4:ce:c8:f3:4d:97:68:38:8d:c1:
31:0f:cb:78:99:70:46:96:7b:12:6c:48:42:bd:4a:
43:db:d6:d2:83:19:82:1b:13:81:2d:81:34:67:17:
8a:b0:3d:b5:9a:7a:8e:63:06:2f:9d:40:b6:44:99:
47:97:d0:97:3e:f1:c3:fb:81:4f:85:67:78:f2:b4:
8f:b8:c0:3a:21:1c:b6:6f:c6:24:76:42:4c:de:a6:
11:3e:cd:b2:55:00:ce:45:5f:51:ed:ad:82:27:0f:
39:4d:ad:fe:25:bc:6b:a3:ef:74:85:c0:6f:d4:3b:
8b:7b:51:3e:f5:ff:e1:dd:91:51:b3:e1:e7:a8:3a:
40:9f:0d:2b:dd:43:8c:f8:d9:85:ce:ac:ec:a3:c5:
a0:56:ec:8c:7b:6c:66:de:5b:fe:96:4a:4a:ac:5d:
00:25:dd:6c:13:6e:11:61:79:da:5c:0a:eb:ba:78:
80:a4:35:1c:3c:5a:29:51:d8:08:bb:de:f3:1f:89:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:40:1D:26:49:14:93:15:08:7D:9D:64:0D:96:1C:CC:F9:A8:FD:9A
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:d3:c0:4c:8f:23:eb:88:9c:76:32:7e:01:05:53:13:22:
5b:39:32:5d:9e:d6:99:a9:13:55:fb:89:b2:8f:fd:fe:78:67:
cb:ec:8b:7c:3b:67:e7:10:e6:1f:6b:17:fa:97:cd:a0:02:1d:
0d:8d:55:12:36:e6:e1:38:70:ad:17:ef:4c:84:07:36:a3:7d:
ff:eb:c1:12:ec:b6:bb:91:24:87:b8:08:d1:76:53:cf:14:6c:
f0:e8:c7:62:8b:a2:ba:f8:2b:ac:9d:b3:56:db:3f:b9:7c:64:
06:3d:05:d4:53:29:81:59:5c:96:43:eb:dd:5c:56:36:2f:24:
f6:1f:cf:03:97:83:9f:3b:e9:59:af:77:ac:11:0b:e7:ac:f3:
1d:da:27:04:e0:77:32:ad:41:6f:b6:b5:03:6f:3a:57:75:d2:
f9:1e:ef:1e:bd:b0:e2:cd:20:33:c3:63:a5:11:55:b9:e3:98:
71:b5:13:ec:f9:2c:f9:fc:b3:96:cc:4c:4d:43:88:96:50:f4:
d5:b5:79:35:e5:0b:20:6b:c6:ca:28:31:04:82:9e:4f:68:89:
43:41:99:e9:e5:80:39:00:3e:dd:53:42:d5:ca:75:91:ab:09:
5d:e8:46:aa:7f:9d:5b:64:6f:ac:5c:ef:26:1b:7d:96:1b:75:
f7:d3:f5:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjWU0gxAsQHK2n5SttwKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0
ODAwZmEwHhcNMjYwOTEwMDkwMTU3WhcNMjYwOTExMDkwMTU3WjAzMTEwLwYDVQQD
EygwODQwMWQyNjQ5MTQ5MzE1MDg3ZDlkNjQwZDk2MWNjY2Y5YThmZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QKRcKGI5OPiQKaZnceXkw77m1lY
bDfsVnPMWyysFaQyw7OG4bIhVAszt64MTEjBzahE39YbUoaDVcJK+VFflaTOyPNN
l2g4jcExD8t4mXBGlnsSbEhCvUpD29bSgxmCGxOBLYE0ZxeKsD21mnqOYwYvnUC2
RJlHl9CXPvHD+4FPhWd48rSPuMA6IRy2b8YkdkJM3qYRPs2yVQDORV9R7a2CJw85
Ta3+Jbxro+90hcBv1DuLe1E+9f/h3ZFRs+HnqDpAnw0r3UOM+NmFzqzso8WgVuyM
e2xm3lv+lkpKrF0AJd1sE24RYXnaXArruniApDUcPFopUdgIu97zH4nL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhAHSZJFJMVCH2dZA2WHMz5qP2aMB8GA1UdIwQY
MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt
ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy
LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlbTwEyP
I+uInHYyfgEFUxMiWzkyXZ7WmakTVfuJso/9/nhny+yLfDtn5xDmH2sX+pfNoAId
DY1VEjbm4ThwrRfvTIQHNqN9/+vBEuy2u5Ekh7gI0XZTzxRs8OjHYouiuvgrrJ2z
Vts/uXxkBj0F1FMpgVlclkPr3VxWNi8k9h/PA5eDnzvpWa93rBEL56zzHdonBOB3
Mq1Bb7a1A286V3XS+R7vHr2w4s0gM8NjpRFVueOYcbUT7Pks+fyzlsxMTUOIllD0
1bV5NeULIGvGyigxBIKeT2iJQ0GZ6eWAOQA+3VNC1cp1kasJXehGqn+dW2RvrFzv
Jht9lht199P1Zg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:44 2026 by rpki-client