Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: u3ht7NpuUhjnAuMF+4eu4JCeNOySFxAxLYz0UwF5i1M=
Subject key identifier: 23:F9:E7:66:A6:4B:42:40:2D:12:32:8B:A0:6F:AD:DB:B1:0F:8F:93
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019FA2CEAFBC2CC9F020C87CE22A91C190CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 18CF
Signing time: Mon 27 Jul 2026 09:01:22 +0000
Manifest this update: Mon 27 Jul 2026 09:01:22 +0000
Manifest next update: Tue 28 Jul 2026 09:01:22 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: VTOfg9fmvHKbDJD2ThH9tQVO5TDbd/zAWf7LTYEmu1E=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:af:bc:2c:c9:f0:20:c8:7c:e2:2a:91:c1:90:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Jul 27 09:01:22 2026 GMT
Not After : Jul 28 09:01:22 2026 GMT
Subject: CN=23f9e766a64b42402d12328ba06faddbb10f8f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:7d:a0:7e:0b:f2:bb:eb:e6:9b:af:f6:a5:
93:09:20:22:b7:4f:30:93:a9:6e:03:12:ba:c4:d9:
64:9b:3d:f7:19:83:67:64:4d:c0:95:32:31:12:32:
6d:ec:1b:53:6c:3a:9f:43:cf:2c:b0:d6:92:7b:93:
c9:72:0f:d5:84:2c:19:a9:5b:f9:b4:3c:1f:4b:23:
c1:b7:50:82:a9:82:1a:4d:37:e1:6f:d3:f5:e0:6f:
27:2e:cd:63:32:d2:6a:ea:2a:7a:da:6a:bf:13:c3:
95:d8:d2:86:1b:e5:bd:96:9c:03:ea:78:da:57:57:
e8:2e:88:75:bc:fe:57:7f:3d:c3:cf:78:43:e4:11:
82:89:ce:d6:92:9f:b3:84:7d:1a:e6:e8:14:34:6c:
e8:c7:eb:5d:2d:f2:68:8f:83:dc:02:8f:e4:e6:d7:
be:05:f9:cf:af:1c:75:7d:fa:2e:e9:e4:ba:67:4e:
3c:97:13:e6:46:f3:38:0f:a4:96:12:7d:09:91:2c:
b4:d5:43:90:c5:fa:be:cc:23:43:9a:70:17:b6:31:
5e:5a:ef:03:d8:16:e5:d7:ac:f7:80:31:bc:bb:5b:
aa:f3:71:e8:35:e7:da:a6:0c:44:21:3a:18:7b:a1:
45:21:af:00:70:95:f3:0b:d1:9f:30:2e:3e:d5:0a:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:E7:66:A6:4B:42:40:2D:12:32:8B:A0:6F:AD:DB:B1:0F:8F:93
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5e:17:8b:43:d4:5b:0d:1d:9c:06:63:f5:7a:42:0f:06:64:
43:c9:81:41:99:cc:1a:17:d9:96:24:80:05:f7:73:74:b2:80:
66:8d:c8:e1:af:ae:fa:2d:ad:e0:6f:93:be:46:f7:34:e7:a8:
b2:31:29:89:dd:51:63:91:1c:62:bc:1e:9d:40:a9:d1:b8:b1:
91:1b:e0:48:1e:5f:d8:61:82:2f:2b:c3:81:c4:be:eb:5d:e4:
4a:a8:5c:ea:39:5a:c9:7a:d0:4f:d3:82:1e:b8:c8:c2:bd:1e:
f6:be:75:03:6d:b6:6d:8d:ac:ef:a1:10:3b:12:84:b7:b5:67:
ec:0e:04:b4:61:d1:c5:0f:f8:fd:48:e5:e9:d3:d9:fe:09:67:
40:16:4a:ab:10:ec:bc:ef:4d:30:5e:d6:26:b3:2c:6b:a7:78:
31:6b:0b:70:e7:85:b4:41:e1:22:01:cb:ac:cd:a5:68:d7:ac:
df:03:0a:56:72:e3:11:6e:52:e9:52:d7:59:53:45:41:e9:ea:
75:d7:c6:97:a7:6b:1d:f7:0b:01:a6:8e:fd:53:55:7c:cd:70:
48:15:44:5a:59:e5:f4:90:82:7d:8c:16:95:af:ca:5d:b9:3d:
e7:01:6c:a8:ce:56:70:4d:73:3d:13:5c:da:bc:62:e1:8a:ed:
59:73:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:43 2026 by rpki-client