Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: QDQyiSVwG7fOayKaU+312XpBWk1QnycdmmHtYmA5W7Y=
Subject key identifier: 72:47:EF:0C:46:A7:0D:9C:3E:E0:21:8F:E9:98:86:6F:5D:53:AA:23
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019CAAFD2A486C6B1E324B3D5B12CB3BE250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 1A
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: x8yAqkn6Kqw6nBNNLM77G9Ncv+DEPWOvl5v1PINcsko=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2a:48:6c:6b:1e:32:4b:3d:5b:12:cb:3b:e2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=7247ef0c46a70d9c3ee0218fe998866f5d53aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:cf:d7:e7:ab:2c:3c:0c:dc:64:71:bb:0e:
24:f4:35:c3:5c:cb:92:e7:1b:3f:df:4e:bc:05:86:
0b:5e:7c:1f:53:af:69:81:f1:18:e9:d9:f1:4b:00:
21:35:e7:b1:0f:33:da:ec:97:5e:a3:82:bd:17:4b:
8c:a9:2c:61:91:9c:db:0f:02:e4:20:a8:8f:40:8f:
df:aa:22:10:17:7b:5a:86:dc:b8:95:22:84:17:02:
27:74:0f:ec:2d:01:fb:f9:dc:52:73:78:d1:f8:ef:
f4:05:ba:d8:72:8c:40:36:7e:b3:17:a0:7f:2c:05:
db:de:9c:62:b4:03:ef:19:ad:84:91:9a:b5:68:f1:
f3:9b:8f:ab:f9:e3:9d:7f:d6:7a:d6:2f:c8:14:31:
12:52:6c:8e:d9:0c:84:d5:a6:63:9e:22:b6:ef:a5:
48:2e:94:ff:ce:b4:35:3b:5f:03:95:f1:b8:62:df:
d5:72:a5:2f:d2:3e:ba:54:3b:a9:4c:97:f8:ef:f3:
4d:36:a3:ee:86:bf:a4:af:b1:ce:18:cb:a4:e2:9b:
fc:b2:e4:75:d2:47:87:a2:84:9f:c0:73:48:20:9a:
43:0f:70:24:30:84:52:8d:ab:62:d3:ed:ba:14:24:
84:fc:df:08:fe:0d:b0:c7:c3:c8:bc:fb:b4:ba:7f:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:EF:0C:46:A7:0D:9C:3E:E0:21:8F:E9:98:86:6F:5D:53:AA:23
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f2:2a:33:d1:9c:e6:70:a5:21:80:ef:c1:c8:b0:f6:cd:eb:
51:05:8c:44:e2:3d:7b:35:b7:56:10:9f:a7:9d:b3:9b:5d:7f:
eb:08:1c:f0:2e:8d:a3:6b:bf:65:f3:e7:d7:99:2f:c3:ba:22:
15:d3:86:37:f7:da:1b:1c:8d:04:1f:35:bc:4e:7a:c9:71:6e:
e2:73:77:a3:e9:30:95:68:db:07:79:df:9f:fd:02:a5:c7:1d:
5c:12:da:0c:df:8e:79:51:c9:c0:be:d0:e7:46:e0:ae:3c:f2:
85:1e:6a:3d:bd:40:86:64:bb:21:f7:e8:f4:39:c9:1e:f5:68:
26:95:ce:08:4a:6d:b0:a3:ff:b9:9c:64:72:2b:a7:c3:13:d4:
c6:3f:0b:e0:2e:5e:40:a3:03:9a:56:5f:84:52:b7:aa:a7:dc:
18:9c:9a:bb:37:4c:28:2e:a0:a4:db:09:ac:f0:d8:c2:ac:43:
53:50:79:19:aa:ee:08:70:3e:12:63:5f:b8:a3:21:1e:ce:01:
c1:32:55:0d:d9:0d:55:19:9b:ef:06:7d:90:0c:68:fd:69:36:
1c:33:6b:e2:6e:9e:63:fe:d8:a1:de:30:bc:83:91:47:6e:e8:
77:07:48:60:36:fb:40:d7:f2:4e:89:87:4f:74:f8:ec:2a:d5:
3c:fd:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:06 2026 by rpki-client