Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: 0/IkLzA3PJTvo+CjUD+7eAoKZKUBTEQE72V1aHRk884=
Subject key identifier: 93:62:45:4E:F3:5E:48:31:D7:93:3D:FB:97:8C:F2:46:EB:17:B5:06
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01A0C70EDA3E71C4B7850E7A578BA2E3DCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 10EB
Signing time: Tue 22 Sep 2026 03:00:34 +0000
Manifest this update: Tue 22 Sep 2026 03:00:34 +0000
Manifest next update: Wed 23 Sep 2026 03:00:34 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: oouHR6BdY1t2fVeBLjskU9/8liLNzw4DAav2G11GV0M=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:da:3e:71:c4:b7:85:0e:7a:57:8b:a2:e3:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Sep 22 03:00:34 2026 GMT
Not After : Sep 23 03:00:34 2026 GMT
Subject: CN=9362454ef35e4831d7933dfb978cf246eb17b506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:0b:15:66:65:24:d4:7d:8b:96:05:2b:19:
e4:07:f4:6a:12:23:4b:ea:cb:7a:90:f4:1c:de:1f:
1b:38:cc:7d:3b:5f:3d:42:78:c2:24:6f:6c:27:d4:
b5:69:dc:08:71:19:32:99:bb:e8:40:36:da:6e:a0:
4c:4a:7a:3c:3c:b1:63:f0:4e:eb:97:d0:3a:61:de:
03:a9:09:0b:b8:a9:b3:98:6e:16:a2:6c:24:e9:e9:
2b:3f:2f:fb:e8:d6:86:7e:ee:02:b3:fd:25:a0:ec:
86:c6:d8:93:65:ac:62:f0:7d:45:9d:c7:b6:f1:c1:
b1:88:08:8d:80:ac:36:2b:e3:a2:d4:9f:c8:cd:28:
05:98:df:28:50:f7:fe:21:db:47:ca:fb:a5:7d:63:
45:e9:ca:5f:e1:10:5a:62:56:db:0c:e2:f0:94:74:
64:87:31:77:99:95:24:4e:6e:0a:25:fc:67:b7:33:
0d:94:fa:67:3d:c2:b5:33:c9:fd:53:a3:c0:55:2e:
e8:4f:b0:97:c5:37:6e:3d:c4:27:e3:e6:8a:0f:fc:
bc:03:63:41:75:2b:75:18:16:c4:ea:ce:17:8f:15:
82:1d:86:1f:f8:34:54:40:6e:b4:91:c7:37:4f:07:
e4:d2:29:b5:d5:23:88:f8:ef:63:4a:11:29:fe:71:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:45:4E:F3:5E:48:31:D7:93:3D:FB:97:8C:F2:46:EB:17:B5:06
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:e8:25:67:27:c1:9f:24:27:6a:36:53:ea:9b:aa:ce:30:
2c:4c:7a:19:57:56:4d:f1:47:e8:b3:01:a1:1b:19:53:3b:b1:
b5:31:a8:54:34:e3:63:76:89:b6:ee:5b:1e:bb:ed:8f:ea:5e:
e2:2c:2d:c4:3b:ca:12:b9:5c:eb:02:dd:53:20:d0:5c:05:8d:
e4:a9:42:73:d1:73:f1:a9:18:2a:63:82:48:bb:1e:9a:76:29:
49:36:9e:71:49:e2:d8:db:f8:2c:1d:0b:b7:9f:d4:94:95:bb:
4e:2e:8c:46:4f:d7:bb:2d:8a:ca:7d:7f:88:a1:4d:15:d8:80:
1b:d7:10:66:32:3d:8b:a5:52:3d:17:b0:77:ce:04:01:a2:70:
38:1b:2c:6b:8e:dd:0e:dd:4d:6a:5d:05:97:6a:2b:37:d1:9b:
6c:34:5a:97:8c:50:e5:bb:5a:2a:44:7c:1b:b1:41:7a:7c:64:
de:c5:03:75:7c:f0:35:bc:ec:3f:96:3d:27:c3:e3:b1:ae:8d:
fd:7a:23:3b:a3:4f:03:22:dd:1c:2f:1d:57:ca:c9:60:d7:ad:
28:18:ee:7e:e2:26:d8:aa:17:99:25:52:92:eb:e6:08:80:b7:
83:7a:24:0f:96:e4:a3:84:0e:62:d7:1d:5e:4f:23:89:bf:81:
e2:cb:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:28:32 2026 by rpki-client