Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: uJ3KIpwv1MpckeDsazN3QzsmCaf3dNT93K6+deQurwE=
Subject key identifier: 61:BD:49:11:F0:5A:DD:A6:C2:F1:44:A1:90:F4:3C:4E:31:2E:6A:D7
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 01A0C143F8ADDB0294C011CD4A64F43CE047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 0C10
Signing time: Mon 21 Sep 2026 00:00:52 +0000
Manifest this update: Mon 21 Sep 2026 00:00:52 +0000
Manifest next update: Tue 22 Sep 2026 00:00:52 +0000
Files and hashes: 1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: 504JHjUEG9OlJ0E9z+ytBezvkC9JYvVcLSK2roVNm5I=)
3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:f8:ad:db:02:94:c0:11:cd:4a:64:f4:3c:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Sep 21 00:00:52 2026 GMT
Not After : Sep 22 00:00:52 2026 GMT
Subject: CN=61bd4911f05adda6c2f144a190f43c4e312e6ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:19:db:88:34:f7:9a:4a:58:ae:32:df:b3:
3c:64:49:a7:8c:fd:25:49:3e:70:f6:c3:c0:b4:30:
55:98:99:b8:46:99:4e:90:4b:36:da:0d:69:23:4e:
d4:1c:62:f1:64:1e:b7:bc:55:da:68:ad:f3:73:7d:
67:f3:f9:7c:93:c9:b6:9b:b3:ec:ef:44:bf:e7:9c:
e5:cd:54:b5:df:46:58:16:a9:a4:df:74:25:cd:ae:
8f:a5:3e:bc:d6:83:74:a6:f7:c8:ab:49:45:b2:1c:
d1:39:a4:c4:c6:e0:18:d1:db:7d:c7:22:46:19:eb:
e2:ef:16:f9:25:39:63:55:34:00:07:d7:f7:8e:68:
0e:06:42:aa:c5:e7:38:7e:d7:d5:00:21:6a:06:dd:
e6:1c:15:c7:78:6a:2e:96:1e:11:30:1a:7b:ed:d6:
d2:28:d9:69:dc:95:2c:2c:8a:54:77:ef:07:1e:b0:
83:79:5f:a4:d5:91:51:e8:89:9e:d6:86:54:63:79:
5f:d8:d6:d8:f3:9c:4b:fa:70:b5:9d:3c:d6:ee:56:
df:62:8c:f0:37:65:51:11:21:ac:f7:3d:bd:51:dd:
6b:76:77:b1:cf:f7:0f:3c:e7:1b:77:01:ac:25:83:
e6:79:53:a4:cc:22:6a:62:66:55:9a:a5:2f:94:e8:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:49:11:F0:5A:DD:A6:C2:F1:44:A1:90:F4:3C:4E:31:2E:6A:D7
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b2:53:35:5d:66:8e:77:52:73:5f:61:c1:90:fa:9c:c7:6c:
8c:a8:f7:4f:83:55:a8:fc:b1:d1:20:99:0c:d8:a2:ee:0a:ba:
1a:4d:14:3d:f1:0a:c7:d0:7b:58:89:f7:d4:52:ff:67:e4:1c:
d9:9b:a5:8a:ea:3b:fb:2c:a4:08:2e:19:83:e8:c2:d3:10:bb:
37:74:43:fd:f7:73:10:5c:5d:88:44:a9:be:79:19:fb:e9:30:
ae:ee:64:43:97:31:ac:5c:40:f1:ae:39:9d:f6:a4:9e:79:e4:
9e:c6:84:d3:70:8c:c9:14:03:8b:81:5f:27:c5:b7:3f:e6:55:
9e:3f:01:14:52:6f:a6:09:45:b6:97:a4:01:d2:76:f0:5e:7b:
72:1d:27:bb:98:4f:97:20:96:17:bd:01:a4:2b:70:3f:3f:b7:
cd:2f:eb:76:7a:c4:06:da:15:4c:07:a8:78:4f:d4:8a:0b:76:
d6:9c:a2:ab:84:10:2c:b0:7d:71:36:53:31:4b:19:cf:73:d7:
0d:98:02:fa:4c:b9:88:fa:bf:35:30:b9:25:ca:7e:61:ab:44:
f7:de:8e:f4:65:9f:bc:de:03:97:cf:1e:20:57:b2:64:8e:1c:
dc:ff:ed:85:e5:53:95:cd:4d:ab:02:55:99:98:32:91:36:37:
5a:78:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:07:38 2026 by rpki-client