
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: hNf0uKUhAYDxzInptA4axtYYhXiNKzu83v18J1sNZ/w=
Subject key identifier: 23:61:27:E8:B7:0E:8F:23:24:17:34:24:62:3B:C8:24:EF:C5:EB:0A
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019CE5C854D50B0F9F47152BF75287868000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1764
Signing time: Fri 13 Mar 2026 06:00:37 +0000
Manifest this update: Fri 13 Mar 2026 06:00:37 +0000
Manifest next update: Sat 14 Mar 2026 06:00:37 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: y2ezUVl+PUSqaCkDdkSn2q8LBfc1lA/pqoS2L6OKtYE=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:54:d5:0b:0f:9f:47:15:2b:f7:52:87:86:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Mar 13 06:00:37 2026 GMT
Not After : Mar 14 06:00:37 2026 GMT
Subject: CN=236127e8b70e8f2324173424623bc824efc5eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:a7:59:04:1f:e4:ee:31:33:09:f7:8a:7b:
2a:d7:f9:fe:2d:14:77:5d:27:a8:b5:34:88:87:a7:
27:96:81:02:d5:5d:c3:32:67:8e:3c:e0:c6:d9:c2:
57:1b:42:b1:18:28:c3:4c:60:79:ef:d3:46:a6:0b:
9d:1b:a9:d4:09:de:57:ed:c1:8b:4c:d9:0d:70:08:
b3:47:b4:05:a9:3a:92:18:5f:82:f4:a7:f4:9e:32:
25:04:6d:e1:38:12:5d:5d:47:a9:f1:6f:a4:c4:ec:
c0:41:c2:06:84:75:cd:fc:07:5d:05:29:26:39:1f:
f2:75:3b:1d:ac:ed:f8:59:06:6c:58:87:79:ec:4f:
54:ca:dd:c1:c9:75:f0:18:25:eb:6a:1f:67:0a:35:
36:61:cb:96:cc:b5:05:30:8a:9d:6a:3b:a8:50:8f:
37:f7:c9:09:96:41:bd:93:b8:2c:34:21:48:1f:e2:
76:05:26:04:05:e7:38:38:32:c8:6d:b4:e8:63:f2:
91:6d:ec:92:96:b8:96:63:28:e0:48:22:1c:ce:0f:
bd:ef:02:01:81:3e:03:cc:1c:59:4d:1b:8e:a4:2e:
f8:f8:eb:7d:31:c7:91:83:d2:c6:37:36:2c:bb:55:
d3:cc:e4:9d:42:ef:8f:ec:06:c9:ba:25:05:ef:f1:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:61:27:E8:B7:0E:8F:23:24:17:34:24:62:3B:C8:24:EF:C5:EB:0A
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:b3:36:41:62:ad:e8:16:ad:94:d4:11:97:d9:74:72:4d:
a8:65:61:22:b8:76:3d:fe:f5:38:9d:d5:5d:f3:99:f6:82:4c:
b9:b5:83:c2:ea:97:03:43:96:4d:b1:43:37:4b:75:4a:22:54:
3c:21:99:9a:30:03:c0:a1:68:68:32:c7:bd:87:9e:bd:45:ea:
b2:a1:fa:b0:96:11:0e:3a:08:9b:35:92:dc:2c:15:44:65:7e:
08:12:27:ca:68:cc:62:13:3a:7b:44:ba:7d:41:b3:e3:eb:bf:
55:8d:91:08:39:70:f7:00:cc:35:7d:0a:47:f3:0b:2c:f0:80:
79:d7:8c:8c:84:39:ef:a4:36:50:89:e0:c0:51:ba:a8:08:df:
d0:ee:e6:b8:31:bf:94:f1:10:05:03:c5:93:a0:b1:46:f5:ec:
64:ab:3d:90:54:c0:b2:c2:31:df:25:05:2a:70:61:af:18:52:
cf:5a:02:42:a5:0b:8c:b8:9f:93:24:55:45:5b:df:a0:8e:dc:
7c:0d:a9:26:b8:5e:9f:6f:3e:f5:dc:61:df:b6:34:50:d2:85:
37:21:af:ab:6e:27:7e:ac:ec:bc:b8:13:b0:b9:4e:e4:45:7b:
e9:bb:1a:12:b7:d3:cc:08:f9:3f:ea:1f:90:54:e7:7d:1c:55:
d9:60:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:23 2026 by rpki-client