Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: cVXIt93XIYYusc2W/44X1iDxaSMjTLH3kZmkASqPZl4=
Subject key identifier: 31:15:CC:E4:48:9D:4B:05:DB:AE:71:C9:27:92:52:FD:35:1B:AC:21
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 01A0C77CBE2B1F08D3AECE53CB62B4826350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 023B
Signing time: Tue 22 Sep 2026 05:00:36 +0000
Manifest this update: Tue 22 Sep 2026 05:00:36 +0000
Manifest next update: Wed 23 Sep 2026 05:00:36 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: bC/xECBrZgribkIrZxI0vhGKWvokdfVCZ0bJgRcPYtg=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:be:2b:1f:08:d3:ae:ce:53:cb:62:b4:82:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Sep 22 05:00:36 2026 GMT
Not After : Sep 23 05:00:36 2026 GMT
Subject: CN=3115cce4489d4b05dbae71c9279252fd351bac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:50:a9:d8:31:85:13:76:26:4b:99:28:84:
23:1c:bd:4e:b8:db:b2:80:48:dd:32:4b:43:f9:ee:
45:21:ac:3e:df:1f:7d:1d:a3:c5:17:20:c1:7f:6a:
69:c3:e4:4b:e7:26:c2:38:80:0d:b3:51:05:76:6c:
d3:7b:46:74:99:d4:56:86:4a:a8:0c:b0:64:c7:a5:
6e:61:b9:95:5a:b5:b1:c1:21:82:88:5c:ba:d2:d1:
83:b9:9f:c2:87:e4:b0:6a:77:dd:9d:68:b3:a6:a7:
d3:f8:0a:f3:db:4c:d0:60:ab:54:40:b2:f4:79:cb:
ff:29:09:a6:07:25:1d:f0:e6:e9:06:00:f0:e5:5c:
a5:2d:c2:0d:fd:e9:fe:b8:54:58:f6:75:53:6a:58:
68:6d:3f:39:18:ed:05:82:23:33:ac:6a:64:2e:42:
ce:b5:0b:cc:c6:6a:53:b9:11:7d:53:c7:5e:4a:7c:
b4:92:e2:d6:32:76:a7:d8:ae:28:f1:af:0b:bd:10:
3a:54:39:66:63:8a:e0:cb:65:53:ea:d5:ce:6a:1e:
88:8d:b0:50:82:e4:e3:f3:58:b9:23:b7:c2:63:59:
99:14:05:6b:7e:8f:0e:e8:e2:64:ed:1f:e0:07:a4:
dc:97:a2:de:79:91:eb:c3:bf:a8:cb:cd:1e:30:94:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:15:CC:E4:48:9D:4B:05:DB:AE:71:C9:27:92:52:FD:35:1B:AC:21
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:17:5f:8a:74:e4:02:3b:7e:f8:e5:1c:9f:8f:8b:af:29:6e:
ad:1f:a4:5a:4a:0d:ae:33:95:cd:ab:c6:62:d5:b6:bf:d1:4a:
17:b4:1a:92:8b:e8:20:9a:af:dc:dc:d1:f7:bc:51:59:10:da:
6c:1e:1a:66:bf:a5:e4:56:33:18:db:8e:ce:d0:09:c4:c5:b2:
0a:74:24:11:79:d4:4c:69:b7:ae:c0:9e:21:75:ef:6c:a7:a8:
74:a4:8b:06:d0:7d:11:1f:27:db:e3:02:92:b6:e3:d0:46:20:
70:10:96:e7:5b:ad:1a:93:b5:2c:37:1f:28:44:03:98:0d:25:
ee:dd:1c:c2:ae:8e:03:48:4f:f3:65:f0:71:e3:0b:99:ae:19:
5a:0e:a2:3c:1a:bd:12:2c:bc:81:c0:bb:77:f5:2c:13:9d:7f:
ed:09:01:d7:2e:9e:65:83:8c:b8:0b:9a:7c:71:6d:68:4b:10:
cc:ee:5b:b1:b2:c0:dd:be:0e:cd:c3:01:fc:a4:db:db:b6:d4:
af:8f:ff:c2:fd:8b:52:44:c9:9e:9b:fc:7d:32:d7:61:02:b6:
3e:7c:16:83:ef:40:2c:41:86:b8:dc:eb:40:28:91:6a:9e:09:
39:14:57:39:8c:23:f3:0e:94:fd:b8:e3:3f:c1:32:3d:ba:1f:
62:8e:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:37:19 2026 by rpki-client