Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: y1BKx7cEAmNhmVNYGzmg83ti97MlCQR8ed/A+LB75E8=
Subject key identifier: 05:3F:D1:D1:D2:79:22:B6:38:B4:31:51:C0:6D:38:E0:63:05:63:D0
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019CACEBB6FFB2668D6CF6EEFA7FBCF4EA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0C55
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: V8n8ydghZMpsaWS-dFmHBwi4qdE.roa (hash: wby6j6Fvc4buadteItu1tm7omgxplHfuuMsm39nmHJc=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: avjmCm0QewcSEs8mrjk40WsSCm2N9D6U+sZnEeIfQok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b6:ff:b2:66:8d:6c:f6:ee:fa:7f:bc:f4:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=053fd1d1d27922b638b43151c06d38e0630563d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:71:aa:52:74:c7:97:ac:01:5c:9d:1b:2b:
62:3c:b6:68:91:af:fd:69:96:c3:84:10:14:db:49:
4e:ee:99:f5:7b:e6:51:c6:78:cf:2b:57:bf:80:98:
36:13:0c:e0:1e:1b:76:9d:bc:1d:a9:9d:9e:28:4c:
8c:b1:80:76:04:3e:46:db:20:31:66:59:36:d0:3f:
05:58:36:dd:46:48:3a:3e:9b:c2:8c:37:f2:e4:75:
04:3c:3c:83:f4:81:ef:d5:01:d2:83:d3:31:83:b4:
de:fc:25:00:7c:c2:9f:da:92:4c:47:b4:3d:14:ef:
af:59:9e:e9:c3:33:2c:22:50:b5:c8:96:b4:34:08:
5f:f7:b9:45:fe:3b:d2:5a:2f:3d:df:69:ef:7f:25:
30:a2:03:43:05:d4:06:2a:f0:89:76:27:2d:e3:41:
87:0e:fd:02:50:9a:54:c2:d2:b7:19:07:25:07:0e:
51:cc:fd:8b:af:a0:46:11:da:4d:f5:fe:7b:38:3c:
61:53:c2:b5:2e:8f:bc:72:c7:41:4c:b6:61:4d:2c:
ec:99:86:2b:85:60:a4:4a:71:7f:17:b4:ca:e3:48:
58:f2:cf:0e:c1:0f:14:52:3b:25:87:41:ff:c0:24:
a1:93:78:ae:6c:34:78:d5:20:b2:81:c2:b1:b6:cb:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:D1:D1:D2:79:22:B6:38:B4:31:51:C0:6D:38:E0:63:05:63:D0
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:27:80:8e:76:19:42:22:cc:78:99:86:93:bc:35:37:2b:9d:
77:de:91:43:ef:23:9d:e6:85:e0:90:7c:0a:50:70:64:29:d1:
d0:46:44:0a:68:8e:6b:26:16:b4:9c:64:00:aa:2c:df:a0:47:
ba:84:50:8e:25:d4:57:aa:3b:c4:b1:8d:b5:e4:d2:1d:4a:f1:
09:65:f5:29:2d:dc:61:2e:31:35:c4:75:8c:76:98:66:79:7c:
65:ae:6d:08:ff:e5:0c:83:fe:b4:ba:2c:68:56:6c:26:32:24:
12:92:b4:30:2e:20:4b:3b:58:35:21:cf:4b:15:c2:b4:b8:36:
55:69:3a:2b:e3:61:f4:22:c7:98:fe:d5:e8:e3:9e:f3:87:a5:
a9:16:d7:c5:24:7a:6d:4c:09:06:11:67:04:c9:99:d9:f4:bd:
eb:91:f5:b1:3f:f8:68:44:63:65:74:be:4f:e9:62:62:cd:1f:
c5:e8:b6:31:fe:d0:16:69:bf:b0:83:ed:6c:48:45:ea:fe:18:
8e:4e:65:ea:c7:04:2c:8c:d9:74:a7:3c:88:6d:4b:18:17:73:
80:f9:27:a1:14:4a:86:95:2c:01:af:79:88:58:63:1c:92:e1:
5b:41:31:2a:02:ba:b2:36:8a:39:97:30:b9:2c:7b:19:22:e2:
9c:bb:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:40 2026 by rpki-client