Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: ZOI8rvQWjV49+INK7JXvspCoo8LfQQpd5qakXeQ8Giw=
Subject key identifier: F8:9E:D8:B9:63:C6:96:EF:FA:67:FB:98:AA:86:C8:55:1C:EB:23:53
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019CABA221EFCAA0291D9DBEB72B61D523A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 23:00:55 +0000
Manifest next update: Mon 02 Mar 2026 23:00:55 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: x3L95lPQ/MdwQZQGr95MpqEKl1d49Lex/mfEFrAOE40=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:21:ef:ca:a0:29:1d:9d:be:b7:2b:61:d5:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Mar 1 23:00:55 2026 GMT
Not After : Mar 2 23:00:55 2026 GMT
Subject: CN=f89ed8b963c696effa67fb98aa86c8551ceb2353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:e7:8f:57:72:c7:cd:a7:24:e3:6e:0a:1c:
cf:9b:11:35:68:e0:72:7c:32:31:c1:e3:93:aa:77:
37:f6:4a:9d:6a:50:d1:47:da:b5:18:cf:32:5e:7e:
ef:c6:f7:11:95:88:25:c9:49:ac:c0:05:99:18:9a:
19:ea:41:77:b7:b6:84:3c:62:5c:2c:8c:ac:f1:34:
fd:f8:53:66:c5:1e:f3:76:94:7c:7e:13:0a:15:2c:
89:93:1d:a4:f0:4d:2e:d2:d2:3d:f0:24:ad:d4:16:
ad:1f:86:dc:eb:72:57:be:f7:cd:44:c2:bb:93:9a:
b9:96:24:a0:23:bd:f0:36:3c:2d:86:56:4e:9d:95:
05:7d:e0:c4:da:e8:2a:04:df:3a:19:13:d8:17:cf:
1b:d8:4d:44:4d:f1:cf:e4:03:09:d2:7f:32:1f:0b:
57:45:4e:14:82:43:2e:48:d2:20:e7:68:be:31:ec:
bb:34:67:af:f5:c1:90:6b:ef:bf:bd:89:e3:af:d2:
00:d4:bf:ff:54:dd:8f:b6:ae:ff:94:3d:e6:6d:e6:
a0:8f:2f:48:49:27:b5:05:2b:04:80:a1:f9:6c:00:
64:fb:7e:ae:79:ea:ee:bd:69:eb:66:fe:ae:61:0f:
77:35:fe:5c:7f:83:94:44:fc:73:41:d6:58:4f:32:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:D8:B9:63:C6:96:EF:FA:67:FB:98:AA:86:C8:55:1C:EB:23:53
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:cc:26:82:47:2e:e0:31:36:69:f8:7a:b9:34:32:d4:d2:
7d:23:43:8d:28:b6:19:3f:eb:7e:c7:b0:c1:56:21:07:da:17:
11:3c:98:32:83:69:b3:84:0a:45:d7:ae:71:fe:2b:20:3f:d0:
22:66:06:31:3d:b4:2c:03:39:1a:40:4d:e1:f9:af:b8:6d:e7:
51:50:9c:3a:2a:86:c4:74:15:92:bc:a7:98:27:3f:dc:4e:23:
7b:2a:76:bb:bf:bd:d0:86:f1:38:7e:77:0d:24:26:9d:1f:52:
4c:46:9f:1d:82:03:69:74:e2:17:d3:c7:04:14:3c:8b:ee:fb:
b0:f6:03:3d:68:19:49:a5:bf:c0:47:0a:c8:ae:bb:54:d5:f7:
db:ca:9a:fc:21:ee:85:c2:0d:e1:a4:5e:df:17:f6:35:be:43:
c2:da:29:84:f3:8b:03:6c:df:06:55:cc:8b:22:87:39:fe:1d:
a9:1c:0a:fd:96:3d:99:20:94:46:e0:4f:51:ab:20:fb:69:c8:
eb:16:8d:85:c2:64:28:ea:d2:00:c1:8c:36:55:9d:23:64:e8:
3c:7d:50:37:eb:73:f3:62:51:3f:a4:05:4a:55:c9:a7:4b:14:
cd:a8:09:9d:b0:02:45:5a:a2:0f:a7:ce:7e:08:95:c9:b7:a6:
93:69:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:37 2026 by rpki-client