Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: dCWh4zUJlekQIQU8CFp62LjfCtXYnhBR6Pe9p+oEkMc=
Subject key identifier: E9:E2:F9:06:A7:75:5F:FC:48:BD:80:8D:62:58:22:99:17:0B:F0:61
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019D9C6313725E4CB9CA2D7016F84F1BE0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 97
Signing time: Fri 17 Apr 2026 17:00:31 +0000
Manifest this update: Fri 17 Apr 2026 17:00:31 +0000
Manifest next update: Sat 18 Apr 2026 17:00:31 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: AtN6WaBERc/CfsJjOXSSkp5rtBHUYZggXsM5pW65ND0=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:13:72:5e:4c:b9:ca:2d:70:16:f8:4f:1b:e0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Apr 17 17:00:31 2026 GMT
Not After : Apr 18 17:00:31 2026 GMT
Subject: CN=e9e2f906a7755ffc48bd808d62582299170bf061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:5c:e8:81:8d:0d:74:5b:e5:c3:7c:fa:f4:
0a:25:fd:3f:f7:8e:1e:dd:b0:98:0a:d3:ab:a1:83:
15:ff:ec:a2:03:94:36:9c:a4:4f:3c:b3:8d:fd:3b:
1a:e5:71:80:b1:d9:34:bd:fc:28:0b:72:d5:f9:d2:
1d:01:6a:68:2c:78:d2:18:fc:77:27:53:9d:3f:ea:
59:76:c1:bc:32:bf:ad:a9:63:9f:04:29:6b:51:f7:
50:fb:7f:b1:b7:68:9c:6c:0b:c0:c7:9f:91:fb:ef:
f6:0b:57:13:be:5b:99:cd:5c:ab:ce:cd:2e:b9:21:
ed:a4:48:b7:69:06:84:e4:1c:98:43:f6:16:58:4f:
a3:e9:d8:8d:22:bd:96:a2:e6:c5:fc:b3:d0:9c:24:
3c:f3:2a:35:4a:97:5d:2c:c6:12:49:8e:58:5a:c9:
cc:9d:32:1b:5e:a2:fb:ab:18:0f:98:a7:84:3c:80:
c6:d5:61:a9:16:e0:9f:fe:50:d0:de:0a:1f:db:f6:
50:ac:f6:a9:c8:25:13:34:70:cc:93:63:2f:a7:28:
a5:ee:f5:fd:b8:3e:f9:5f:fb:a7:22:f1:ad:f0:ad:
48:c4:5d:ec:3a:08:38:ef:33:cb:d1:e4:be:0e:1d:
bb:05:03:ff:f1:5f:59:ac:81:9a:de:97:0b:fc:45:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E2:F9:06:A7:75:5F:FC:48:BD:80:8D:62:58:22:99:17:0B:F0:61
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c7:c1:d3:47:96:b5:b3:9e:0d:41:a7:0f:72:97:45:bd:c1:
d9:83:c8:b1:13:0a:8b:b8:43:5d:38:97:2e:b6:bd:d0:cb:98:
c1:ed:0f:50:8a:01:ae:84:df:1d:ff:87:f3:32:c9:d5:71:7e:
d6:06:2d:98:9a:d3:35:01:72:99:76:a9:23:ab:51:7a:d0:77:
9b:21:58:7c:e8:92:be:cd:7a:bc:2c:15:0c:d7:ab:a1:f3:b3:
99:db:4b:f6:b3:f2:61:7d:76:7f:ea:81:e8:f2:7a:10:ed:b3:
44:f8:ac:24:a5:ca:2d:91:b0:b2:39:a1:96:9b:b5:de:ce:a7:
9f:6a:29:54:0f:a7:3d:4b:70:6b:be:32:34:53:6b:77:29:a1:
8c:9a:79:7d:1a:0b:a5:fb:30:85:d4:00:ff:7c:7a:28:90:ba:
fb:7e:a4:68:53:ab:c0:b4:07:51:bf:3f:f6:7d:04:7c:13:59:
bf:a2:bb:b5:70:59:2b:a2:b5:92:fd:0d:9b:ca:e3:dd:11:92:
dd:3e:73:13:00:32:5a:2e:52:dd:34:07:ce:8b:de:c8:51:ab:
83:f7:4c:da:55:12:74:d0:40:ee:c1:94:9d:ec:a5:0c:fc:f8:
92:d9:86:cb:10:0a:84:b9:12:65:c2:96:ee:c9:0a:30:4d:0e:
a3:fa:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:59 2026 by rpki-client