Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: kdPIKKVOSPaZd1suTcT7wDTuHfTn71UNRn0Ey8kX/V4=
Subject key identifier: 46:7D:92:63:92:3A:BE:0A:F1:9D:A2:C3:4F:88:F7:A3:25:A0:63:26
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019DCF75E52B62000E3EB45B6C55972A22D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 17DD
Signing time: Mon 27 Apr 2026 15:01:43 +0000
Manifest this update: Mon 27 Apr 2026 15:01:43 +0000
Manifest next update: Tue 28 Apr 2026 15:01:43 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: UA56sSa6LjrBsJhs5N9QZbmObnoycP6FGkNWCYkWhB4=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:e5:2b:62:00:0e:3e:b4:5b:6c:55:97:2a:22:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Apr 27 15:01:43 2026 GMT
Not After : Apr 28 15:01:43 2026 GMT
Subject: CN=467d9263923abe0af19da2c34f88f7a325a06326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:4b:aa:0c:82:0d:79:60:ad:9c:f0:02:2b:
b2:45:ff:f5:f9:f9:cf:8c:80:f1:31:95:50:a7:8d:
dc:94:ce:c4:26:30:66:20:dd:26:06:fa:ef:08:90:
55:89:69:ee:bf:8c:42:4e:8f:e0:26:8d:77:5d:d2:
2a:11:65:7c:dc:35:a4:be:a9:c2:23:00:3f:e9:85:
27:ba:c7:97:c8:f1:cf:85:07:fc:7c:60:12:5c:ea:
3b:1e:60:1d:7c:45:12:a9:de:e6:4c:8c:fc:87:a9:
a5:00:0e:5d:ac:d5:17:7d:34:a3:14:a3:9e:24:e6:
d1:76:3c:e7:bb:5e:fd:34:e4:46:49:60:74:4c:06:
b3:f3:f6:78:0f:d2:04:30:8a:54:eb:b9:8f:15:35:
35:8b:7d:33:3c:a4:62:f7:43:34:ea:91:40:12:a7:
a0:64:e9:4b:10:2a:21:b4:01:47:c0:6d:9b:3e:fc:
c2:5b:17:5f:e2:d5:28:41:2d:07:0c:86:81:f5:5e:
8f:29:06:01:0b:d2:51:e8:e0:90:3c:21:2e:bc:47:
e9:e8:47:59:5d:cf:49:45:79:8b:c2:22:01:f1:ac:
50:8c:64:8e:54:ec:05:8f:1e:12:8f:30:50:25:30:
c3:f2:3d:b0:c9:09:e4:01:31:a5:d3:b4:18:7e:f8:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7D:92:63:92:3A:BE:0A:F1:9D:A2:C3:4F:88:F7:A3:25:A0:63:26
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:36:8f:c6:0d:87:57:50:96:ee:1e:57:f2:3e:fc:02:cc:
74:3d:90:60:8f:a1:64:00:83:6f:48:11:3f:e3:d1:9e:a5:76:
c4:ed:05:dd:fc:5d:c5:19:00:8f:d7:8d:eb:60:c9:8c:6c:f1:
c8:ec:09:3e:b8:59:39:aa:cc:82:b5:45:22:f5:16:3b:c3:22:
7d:8f:90:bf:af:59:c6:65:7e:39:15:9d:63:ad:01:39:a9:36:
d6:6c:16:8f:cc:c9:75:ed:97:ef:60:c6:6f:8a:76:57:ed:0c:
fe:db:49:a1:ec:dd:13:09:ef:79:61:5b:28:49:f4:21:ff:32:
1f:17:d8:60:7a:21:79:0c:96:3c:fb:c0:86:ca:6f:b4:07:fe:
32:e3:ba:30:ad:94:c0:7e:7c:be:10:97:c3:72:c0:52:e6:6c:
75:d5:63:92:e5:d2:63:9e:73:05:49:e7:6e:62:e3:83:84:80:
a3:fe:ce:3c:4c:35:f7:e3:7c:92:d5:83:84:6a:98:93:cd:39:
ce:35:26:6c:ec:d7:59:cc:a0:01:6b:2e:8f:43:ef:93:e9:dd:
c8:d5:1e:00:6b:5f:d9:b7:d8:f8:67:e4:8d:e2:1d:a6:7f:e8:
5a:a5:22:0c:85:7f:67:f8:1c:39:1f:8c:23:78:82:2c:8e:f9:
d3:19:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:11 2026 by rpki-client