Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: lJ59V++ViHZ+t9/PBeJKwIV1nqHEM2MCl4zDovw0PGI=
Subject key identifier: 03:20:5C:48:FA:EE:89:1D:DB:3B:BD:96:C3:32:B6:71:5B:10:46:2B
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019D9A74E7DCE9029C127BE0ABEE267067C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0CD0
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: V8n8ydghZMpsaWS-dFmHBwi4qdE.roa (hash: wby6j6Fvc4buadteItu1tm7omgxplHfuuMsm39nmHJc=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: STsMLy3xAjSdG8im/ByVFTj7FJYJ2NIkAhYX1Mv7JYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e7:dc:e9:02:9c:12:7b:e0:ab:ee:26:70:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=03205c48faee891ddb3bbd96c332b6715b10462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:29:e8:bd:b1:0e:d0:9e:45:5f:39:03:62:
84:4c:88:39:1b:f3:bb:df:9f:60:7b:b4:a5:21:a4:
82:c7:20:e2:e7:2f:29:21:c7:fd:4b:22:ba:73:cd:
11:00:d2:3a:be:66:91:83:36:6a:8b:c1:d5:03:0a:
e2:30:aa:8b:17:35:0f:79:ff:6b:2c:82:19:98:f6:
9e:34:24:39:45:1c:d5:56:4e:a9:72:36:28:9d:13:
10:91:ea:c3:61:95:5c:e9:ae:92:a6:fc:5b:43:79:
25:d0:ec:df:8c:bb:94:e4:85:c4:1c:2b:93:2d:43:
ab:8a:af:f8:b6:c1:59:73:ea:c9:6f:c6:d8:78:61:
1b:a1:e1:4b:e6:b6:cd:ac:20:47:e6:e4:8a:2e:15:
d0:b6:2b:3c:41:35:41:e2:93:99:8c:2c:57:89:27:
6d:a3:c8:9e:69:52:35:fc:f6:1a:32:d9:b1:7c:a3:
9a:5d:45:82:b8:de:10:bf:b4:85:47:b4:5e:10:a9:
18:b3:81:fb:c4:40:63:93:2b:c1:88:48:0e:59:92:
33:3a:ff:d1:00:ce:85:f9:19:f6:8e:c3:fa:74:13:
d5:d4:26:b8:61:f7:90:6e:30:7f:a8:b8:94:88:c3:
1c:33:25:39:ea:c0:5c:a4:ff:1e:19:79:ff:63:68:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:5C:48:FA:EE:89:1D:DB:3B:BD:96:C3:32:B6:71:5B:10:46:2B
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9e:59:97:73:a6:71:54:ec:1c:6a:42:e7:15:4d:77:75:a1:
e8:7c:4e:f6:2e:4e:1a:89:82:69:e7:78:dc:b4:71:ab:b9:f0:
d3:41:70:e9:12:e2:14:84:e5:b5:15:17:e3:29:ae:20:cc:27:
62:43:03:37:f1:aa:fd:10:d8:cf:ab:61:11:d5:c1:a3:92:c7:
cf:4d:3c:df:f4:01:7e:02:80:b9:25:fc:4d:87:82:90:b8:cd:
7c:4c:75:9a:36:d5:4a:b8:4d:66:8a:bf:1c:86:71:81:3c:fa:
a2:23:e3:4a:e5:50:8e:e1:f1:83:39:a8:6a:1f:0b:6d:a5:24:
6f:0e:50:f4:0d:50:9d:bb:b7:25:76:b4:31:f3:d4:54:a3:e8:
dd:93:35:e8:82:1a:9e:c0:4f:55:47:6a:6a:f8:f0:d0:5d:50:
e6:6b:0b:8b:a1:4d:8b:26:ce:a9:9f:5a:e3:02:fb:c0:d2:7e:
19:f0:ff:7e:0f:39:c1:9f:30:0f:65:6b:02:6c:76:29:c3:0a:
ed:52:3a:70:1e:b2:ce:5c:5d:51:b0:32:09:d8:2d:73:2a:3a:
f6:48:05:68:ae:f2:34:3f:59:b2:a3:cb:fc:d1:56:9e:1f:5c:
60:4a:e6:22:bd:bb:1c:d5:b4:a8:35:fb:5c:f1:9d:58:15:db:
60:90:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:08 2026 by rpki-client