Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: W2KIItvDGAolzj2k1Xbt78409jdkB02V7c3+Kjm4VJM=
Subject key identifier: 62:21:D1:43:B1:CE:CC:E4:A7:D2:2B:CC:49:5B:89:02:D0:12:20:7D
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019FAB9ADA881DEAE100555C83FFE06EB896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 01A8
Signing time: Wed 29 Jul 2026 02:01:20 +0000
Manifest this update: Wed 29 Jul 2026 02:01:20 +0000
Manifest next update: Thu 30 Jul 2026 02:01:20 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: B9NuOj9+OO8Zahzv5EAl69ckj/neMB5FwdeKUxaxnts=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:da:88:1d:ea:e1:00:55:5c:83:ff:e0:6e:b8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Jul 29 02:01:20 2026 GMT
Not After : Jul 30 02:01:20 2026 GMT
Subject: CN=6221d143b1cecce4a7d22bcc495b8902d012207d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:ea:e3:a4:81:43:b2:43:31:6f:a0:81:03:
ef:b8:5d:07:61:d6:4e:d7:92:6b:69:e5:ef:8d:ed:
bc:0c:2e:9b:5a:e3:bb:8b:14:5e:f1:ef:71:e6:fc:
1d:e8:ae:a9:f4:1d:ed:d2:4d:07:da:58:a3:97:f4:
df:1f:a6:7e:cf:3d:cd:72:9f:72:27:f0:56:34:df:
66:fb:61:72:e7:27:6c:92:93:51:82:0f:f9:c1:3a:
20:4f:c2:10:e4:93:ad:a1:c1:1f:31:07:6e:2a:00:
2d:be:f6:5b:c9:eb:92:26:b2:f5:f9:e2:cc:80:2f:
dc:f8:a0:47:06:73:2e:94:ba:93:8f:8f:c1:7b:e1:
5e:36:6a:48:2d:f1:8d:94:cd:61:84:0a:dc:7d:0a:
8a:6c:5e:71:ea:ef:ed:85:ff:a2:6f:bd:8d:ec:1d:
e7:33:02:46:76:6b:5f:5f:8b:1d:9f:02:d0:cb:07:
92:52:56:1a:92:e4:59:fe:39:95:9f:0e:f8:0f:85:
a6:4b:1a:b9:5f:6c:a4:02:40:73:66:c7:1c:20:0d:
05:17:ed:09:65:f5:ae:4a:4a:f4:62:cd:6b:75:69:
11:d0:20:12:09:85:da:de:57:15:02:16:d1:9a:ff:
0e:ca:50:ca:10:83:1d:e7:7c:38:cf:85:ca:29:21:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:D1:43:B1:CE:CC:E4:A7:D2:2B:CC:49:5B:89:02:D0:12:20:7D
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b0:6b:e7:53:12:1f:d6:05:72:5e:c8:e4:5b:d7:a1:ae:e5:
9c:98:4e:6a:d7:e3:2b:c2:5f:9c:3d:08:0c:cb:ff:cb:13:02:
27:2b:74:73:00:7b:3c:62:7e:a1:cf:ea:95:fd:01:7f:e5:6a:
2d:88:57:45:c9:fb:9f:23:69:4a:45:e0:23:6c:28:c9:fc:b3:
00:93:76:7e:f5:b1:d8:a6:40:39:e9:0f:08:d4:fe:bd:a2:ae:
13:a1:61:ef:b4:9f:7c:5f:59:3f:af:c4:5d:dd:8b:0b:1d:f2:
4e:30:f8:31:dd:9a:98:7e:a4:4a:12:20:5a:60:58:ea:db:df:
14:e2:f0:95:cb:dd:09:ea:d6:72:88:e4:69:3c:bf:a8:9d:18:
8b:97:ab:b0:c3:55:86:b2:07:19:ba:85:09:fb:e9:de:f0:5b:
79:9c:cc:ee:32:fd:e2:38:9f:d0:5c:0d:f6:79:7f:99:e2:0b:
2e:c9:5a:23:e7:17:46:3a:75:85:0e:57:d6:17:ab:10:6f:90:
c3:14:6f:7e:79:be:37:f3:e3:a2:69:f6:76:15:1d:2d:b0:6a:
8a:9c:47:81:93:43:9c:c6:48:20:58:e5:13:2f:94:41:6c:54:
c3:26:27:29:3e:84:27:6a:e6:37:6a:04:cf:22:3a:24:9f:02:
d0:aa:e8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmtqIHerhAFVcg//gbriWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWExOWY0YWVmNzFhNDY2MDAxZmQ3ODU5MTQyYThlMjZm
M2VlZmYwHhcNMjYwNzI5MDIwMTIwWhcNMjYwNzMwMDIwMTIwWjAzMTEwLwYDVQQD
Eyg2MjIxZDE0M2IxY2VjY2U0YTdkMjJiY2M0OTViODkwMmQwMTIyMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvETq46SBQ7JDMW+ggQPvuF0HYdZO
15JraeXvje28DC6bWuO7ixRe8e9x5vwd6K6p9B3t0k0H2lijl/TfH6Z+zz3Ncp9y
J/BWNN9m+2Fy5ydskpNRgg/5wTogT8IQ5JOtocEfMQduKgAtvvZbyeuSJrL1+eLM
gC/c+KBHBnMulLqTj4/Be+FeNmpILfGNlM1hhArcfQqKbF5x6u/thf+ib72N7B3n
MwJGdmtfX4sdnwLQyweSUlYakuRZ/jmVnw74D4WmSxq5X2ykAkBzZsccIA0FF+0J
ZfWuSkr0Ys1rdWkR0CASCYXa3lcVAhbRmv8OylDKEIMd53w4z4XKKSEezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIh0UOxzszkp9IrzElbiQLQEiB9MB8GA1UdIwQY
MBaAFPeaGfSu9xpGYAH9eFkUKo4m8+7/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZmQ1NDMtZTQxMy00ODg1LThkNTkt
YzBjYjgyN2ZkN2YzLzEvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zZmQ1NDMtZTQxMy00ODg1LThkNTktYzBjYjgyN2ZkN2Yz
LzEvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7Br51MS
H9YFcl7I5FvXoa7lnJhOatfjK8JfnD0IDMv/yxMCJyt0cwB7PGJ+oc/qlf0Bf+Vq
LYhXRcn7nyNpSkXgI2woyfyzAJN2fvWx2KZAOekPCNT+vaKuE6Fh77SffF9ZP6/E
Xd2LCx3yTjD4Md2amH6kShIgWmBY6tvfFOLwlcvdCerWcojkaTy/qJ0Yi5ersMNV
hrIHGbqFCfvp3vBbeZzM7jL94jif0FwN9nl/meILLslaI+cXRjp1hQ5X1herEG+Q
wxRvfnm+N/Pjomn2dhUdLbBqipxHgZNDnMZIIFjlEy+UQWxUwyYnKT6EJ2rmN2oE
zyI6JJ8C0KroHg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:22 2026 by rpki-client