Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: FqbLski/BvzNFGO70l3fussylac0Hhe71HPIYRu1uPc=
Subject key identifier: C6:CD:53:63:6A:18:7C:67:47:6A:EF:60:5F:D3:24:92:F5:86:18:AD
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 019FA93E451DE4C251757E952E132EFD6ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 1057
Signing time: Tue 28 Jul 2026 15:00:58 +0000
Manifest this update: Tue 28 Jul 2026 15:00:58 +0000
Manifest next update: Wed 29 Jul 2026 15:00:58 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: 3955Qh6jH4sMWPGDzsfxR9pZG4MGR6yFoyqTBnk/Bso=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:45:1d:e4:c2:51:75:7e:95:2e:13:2e:fd:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jul 28 15:00:58 2026 GMT
Not After : Jul 29 15:00:58 2026 GMT
Subject: CN=c6cd53636a187c67476aef605fd32492f58618ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:3e:17:26:4c:fa:91:31:20:38:a7:33:ec:
69:c4:3c:99:4a:47:62:e1:52:c1:a5:20:b5:57:56:
d6:c3:0b:f0:b7:01:dd:49:2d:74:c0:3e:e1:24:5f:
46:56:ed:76:9d:1d:16:92:d7:86:5c:75:36:07:ea:
11:d2:76:b1:09:90:7c:c0:24:89:76:db:07:3e:cb:
79:7a:af:a7:7c:f4:c1:d6:af:17:a0:48:bc:fb:e3:
70:c0:56:0a:87:12:78:81:50:5c:05:d9:fb:52:fd:
70:3a:b3:89:0d:de:f3:37:0d:10:69:1f:4d:f7:19:
39:41:f3:ae:ac:da:ac:a3:74:8c:7d:e0:4f:5b:e6:
9a:8f:63:a8:7c:b1:90:3e:21:7f:f5:07:72:cd:8a:
7a:e5:7e:29:57:ca:8d:d5:92:52:3d:18:2e:b4:23:
c5:aa:a6:9a:53:12:74:d8:45:22:4b:87:02:63:a5:
1f:c0:de:5d:ff:06:1a:9b:e2:40:7d:93:f7:ef:9c:
bd:fa:16:22:de:3b:22:f8:18:03:3b:7f:c8:2e:40:
c6:ff:5f:15:c3:1a:84:d3:7b:b4:64:d9:da:31:70:
97:b6:80:33:68:00:35:c3:0a:f3:b9:35:9f:cf:44:
0c:17:be:57:d7:fe:92:27:f7:fd:07:ae:2a:33:6d:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:53:63:6A:18:7C:67:47:6A:EF:60:5F:D3:24:92:F5:86:18:AD
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b3:df:4f:17:cf:d3:3d:77:c4:6e:ab:49:92:df:c6:a2:93:
25:fe:78:16:01:f2:88:8b:cc:b9:a5:ab:36:0f:38:07:4f:df:
b5:e4:d8:4d:c3:69:b7:f5:2a:0c:fe:e5:81:13:8f:6c:4f:2b:
cf:9c:37:55:8f:26:af:81:99:a1:a0:b0:23:48:3e:84:b6:a6:
f3:19:33:21:fe:9c:40:b7:f7:58:1d:e1:c2:a0:eb:a0:39:05:
61:50:d5:b8:11:4a:9a:7a:e1:54:46:fa:c7:e0:e8:5e:8f:c3:
82:61:a7:25:00:8a:7c:69:67:12:0b:7c:82:f4:bf:67:ca:03:
4d:68:10:13:7b:5e:cc:b6:aa:95:3a:3d:b3:c8:af:f5:6c:1f:
fe:be:73:0f:4e:c3:dd:71:48:6d:20:77:0e:d0:7e:a1:21:0e:
3b:1f:37:de:29:60:a1:29:b6:e6:bc:c7:8d:95:ed:e6:b0:28:
97:62:f8:87:f8:ba:7f:47:9e:9d:51:29:88:4f:29:78:35:5b:
9a:30:66:34:9b:80:43:f1:a2:22:57:f1:13:01:06:76:0a:61:
ec:41:33:ca:f1:48:6e:04:33:1a:f6:df:47:10:04:86:6b:fc:
54:1c:65:5b:40:83:27:da:4d:43:d1:e0:66:dc:dc:62:12:ee:
90:bd:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:00 2026 by rpki-client