Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: Q/cdKb+UJGzVgpiaLO33+GYJ77WLhO3UCFxWCvbsmFg=
Subject key identifier: 66:AA:ED:0C:87:55:01:31:8D:DD:F1:2C:3C:4F:2E:37:7F:ED:3A:88
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 019CAA8FC3E8AFCC236161572F253BC83FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 09F2
Signing time: Sun 01 Mar 2026 18:01:14 +0000
Manifest this update: Sun 01 Mar 2026 18:01:14 +0000
Manifest next update: Mon 02 Mar 2026 18:01:14 +0000
Files and hashes: 1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: 0r7C7fQFDDxXvuFYkNrlf/enme5aSiLEGylvuD/XpJY=)
3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c3:e8:af:cc:23:61:61:57:2f:25:3b:c8:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Mar 1 18:01:14 2026 GMT
Not After : Mar 2 18:01:14 2026 GMT
Subject: CN=66aaed0c875501318dddf12c3c4f2e377fed3a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:de:fc:b7:fc:eb:94:44:8a:8f:4b:53:1d:
b5:0f:e6:51:69:2d:da:bc:34:2e:c6:f2:28:2b:38:
47:f2:93:cf:d1:5c:d5:bc:02:51:f4:d2:61:27:70:
a7:02:f5:06:2f:51:e6:c2:a4:3b:1b:ed:bb:41:73:
d0:03:ed:3a:d1:0a:3b:e7:ab:cf:f6:38:ef:0e:d9:
51:5f:75:63:5e:6d:2a:4a:cd:24:26:1c:76:b1:da:
2c:fc:ac:1c:cd:62:7f:36:47:b9:9a:c8:36:c7:5e:
7e:30:f3:58:8f:33:da:47:66:03:e7:8a:59:13:20:
36:1f:b6:aa:b8:6b:a8:f5:f6:c2:87:87:e9:5e:09:
a6:7b:ba:ba:da:e1:1b:9b:42:bd:00:21:3d:3e:20:
32:ef:7a:34:eb:8b:9f:f9:c4:89:de:ed:16:12:e0:
04:81:df:37:ca:99:82:d8:b3:82:05:9b:87:11:6e:
3e:fa:07:23:23:8e:65:f8:84:f4:1d:23:d1:9b:0e:
c7:2b:38:55:93:3c:4b:a4:6c:e7:49:cb:a7:c5:ef:
e1:43:9e:0a:18:4f:88:76:5c:90:c6:f9:02:4a:9a:
01:81:77:8e:8f:1f:19:8c:84:bc:40:04:67:c5:73:
34:91:2b:d0:fc:38:25:81:fb:b0:57:0f:ee:7f:e8:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:ED:0C:87:55:01:31:8D:DD:F1:2C:3C:4F:2E:37:7F:ED:3A:88
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:70:bb:80:c7:c0:db:5a:09:35:55:f6:b3:37:b9:f9:0d:6c:
a0:3a:0b:0f:c8:4a:e8:1c:04:bf:db:b8:72:a9:79:e2:e5:4a:
e4:dd:a4:db:1d:60:7b:29:41:99:43:bb:53:eb:68:fe:39:de:
58:53:43:a3:30:1a:1d:9f:9e:ba:80:c9:fe:b0:da:ae:21:ca:
7b:0d:d4:9f:8f:22:bb:e4:56:b0:5a:65:6b:27:ec:17:3a:57:
1f:ae:f3:05:fc:cc:26:0a:34:17:16:1b:f1:cf:97:1c:4b:7f:
46:22:7e:29:57:a3:77:c2:c2:25:8e:e0:83:ce:4f:30:a0:c3:
2c:a7:0f:ce:b9:88:cb:f8:1a:88:7e:67:c7:00:71:86:50:a6:
7f:77:13:e0:60:37:4c:4a:1d:89:9f:90:f4:5c:4c:e9:9c:22:
5b:d2:47:a9:f2:d9:d3:21:e3:45:e8:63:1e:32:1d:ef:bc:6d:
1c:6d:96:20:42:90:bc:2c:63:14:1e:59:38:ba:c7:19:8a:b6:
4b:f0:a3:80:7e:7b:35:c1:6a:36:19:a4:9d:62:a4:c4:b1:0d:
04:02:11:ca:39:a8:60:06:18:e0:e4:4f:0c:7a:2c:57:43:98:
b3:3e:30:a9:9d:fb:b7:06:14:30:c6:be:62:fa:cc:6a:dc:aa:
07:75:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:51 2026 by rpki-client