Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: t5805SLc7TiSI5Zd07Co2RxA3CGG8q92k1/O43+yLbE=
Subject key identifier: 70:23:41:60:2F:1F:B2:F5:E3:11:71:72:4C:FA:A3:0B:CB:9D:C9:9E
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019EC1EDCD97CD6EB553E21C5D999F33F2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 012F
Signing time: Sat 13 Jun 2026 17:00:47 +0000
Manifest this update: Sat 13 Jun 2026 17:00:47 +0000
Manifest next update: Sun 14 Jun 2026 17:00:47 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: x/8nAmF3plMbE5SvyDbCk4csvlaUtcTN+CXFEQrJAfE=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:cd:97:cd:6e:b5:53:e2:1c:5d:99:9f:33:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Jun 13 17:00:47 2026 GMT
Not After : Jun 14 17:00:47 2026 GMT
Subject: CN=702341602f1fb2f5e31171724cfaa30bcb9dc99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:a4:b3:dd:4b:0e:ed:03:40:a5:9f:fb:de:
9f:98:05:e7:1e:3a:6f:9e:c1:50:d0:53:b8:76:88:
be:f8:85:66:f9:f9:de:b8:9e:6e:58:44:ee:10:62:
89:89:58:b8:a9:87:97:c6:74:1d:a0:9c:34:90:22:
0e:ca:a9:d0:02:25:29:0d:82:6a:a5:cc:1e:5e:6a:
dc:17:79:ba:8a:07:ca:73:de:4f:9a:a8:ca:53:87:
2f:2d:a3:44:4d:96:af:0c:8b:08:ec:39:fe:90:63:
46:84:29:84:37:77:45:ec:3f:ed:dc:e1:a9:8e:9e:
83:52:19:f0:b7:86:85:19:00:31:bf:9f:5c:35:e3:
01:7a:11:61:89:f6:5d:6b:1f:e8:f7:bf:26:5f:f4:
e9:17:66:1f:9f:e6:4a:0d:59:78:a3:7e:74:06:69:
9b:43:ea:30:b4:93:1d:28:40:73:8f:3f:7b:14:f6:
f8:61:fb:87:e4:59:ea:41:65:4f:0c:01:35:b7:c8:
6e:f2:c2:3b:a4:3c:7c:a9:d4:18:37:84:f9:31:dd:
4d:d0:0b:15:38:0f:b1:39:c3:72:40:fe:fe:b6:bd:
70:58:5c:41:6f:a3:ff:48:94:5b:f2:4c:d3:cc:ba:
fc:b6:1d:0a:12:ef:08:47:5a:fd:fe:d2:03:79:f2:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:41:60:2F:1F:B2:F5:E3:11:71:72:4C:FA:A3:0B:CB:9D:C9:9E
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c9:64:b6:e0:d7:1f:fe:0f:74:7a:33:4b:a6:fc:a4:58:49:
90:1b:8c:93:ae:20:20:f4:b0:b0:b6:e7:ea:aa:ba:23:16:57:
40:9c:0d:d7:93:f7:e7:2a:ba:61:f7:c8:5e:fa:18:a3:f0:b1:
cc:f6:22:fa:b4:aa:f7:c9:5c:59:8b:7e:ab:9c:e3:a4:6e:68:
9b:20:96:7d:09:6b:25:59:91:75:64:6f:da:78:c5:e3:e6:7c:
6c:70:14:a6:e9:8c:ca:da:71:9d:58:62:ae:08:3c:ca:35:e4:
57:8b:6b:7d:60:08:ef:33:e4:cf:d9:3c:9a:9d:a2:e1:04:1d:
94:4b:89:7b:d5:d2:26:41:ac:06:7c:6b:14:93:0b:80:8a:81:
7e:00:31:7c:be:7c:e6:3c:f7:93:6b:b9:04:cb:2a:d2:42:40:
af:c0:71:2d:a6:07:2a:76:9a:cd:1b:67:69:94:7b:1b:28:95:
a0:de:ee:92:af:46:8c:4a:b6:75:66:e1:26:81:75:82:20:d5:
ef:c7:78:fc:50:04:96:dd:72:42:cd:3c:4d:60:a3:d4:7b:2d:
d0:24:07:c8:10:72:68:3f:31:57:cd:df:94:41:40:85:e8:26:
d0:ac:86:fa:69:24:c5:d2:d1:85:3f:95:0f:0d:28:5d:4f:d0:
e5:5a:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:08 2026 by rpki-client