Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: DDp+9b1vQU+s9XO76Wr+698rzP8+l3B6d1VFoRKMr/M=
Subject key identifier: 3B:B1:9D:5E:BD:84:F1:EA:90:06:6F:1B:90:97:1B:50:86:4E:26:43
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 01A0C25696AE68D7B5C430BDFC4ED6CCE517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 027C
Signing time: Mon 21 Sep 2026 05:00:49 +0000
Manifest this update: Mon 21 Sep 2026 05:00:49 +0000
Manifest next update: Tue 22 Sep 2026 05:00:49 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: /aicJmiYJpwYcx43Y42nl5KkfOxZD5CDUDMOUnwVfmU=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:96:ae:68:d7:b5:c4:30:bd:fc:4e:d6:cc:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Sep 21 05:00:49 2026 GMT
Not After : Sep 22 05:00:49 2026 GMT
Subject: CN=3bb19d5ebd84f1ea90066f1b90971b50864e2643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:cf:48:13:01:b7:e7:7c:bf:e7:5f:66:a6:
ea:e7:17:f1:54:23:03:b1:76:fd:cf:24:f7:06:81:
10:4a:5c:51:60:72:fc:36:bc:d5:bf:fa:1b:26:9b:
2e:7a:f8:b0:00:1e:b1:f9:eb:0d:86:4a:06:e2:b7:
72:cd:6e:57:7d:e5:4a:47:4d:9c:1b:e3:ca:43:12:
a5:05:16:88:f8:75:81:4e:3f:29:8b:6a:da:49:0b:
e8:4b:1a:04:53:7e:d0:b4:23:df:4b:92:68:34:e5:
d9:b6:ef:d1:85:db:76:62:69:bb:ca:bf:8c:9f:85:
67:1a:bc:1c:d9:b4:16:7c:c7:bb:2e:f5:1e:eb:42:
48:0d:09:8f:b8:d4:4d:ac:40:d7:2e:4d:07:db:5b:
f6:19:96:d0:5e:df:79:3f:81:59:fe:05:f7:62:93:
51:ba:da:0d:b6:aa:39:14:1e:ab:fb:ae:fb:0b:54:
46:3f:27:2f:11:50:33:f5:96:6d:e3:9a:2a:3d:41:
64:ee:7a:ee:53:f5:ee:e2:e7:ee:99:14:92:41:94:
a1:99:eb:69:cb:f1:90:b0:29:14:58:fc:aa:7d:6b:
10:f1:c0:49:4f:96:a0:d5:52:eb:6f:7c:6c:75:20:
6f:58:03:39:ea:98:ef:70:2c:9c:70:4b:25:8e:15:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:9D:5E:BD:84:F1:EA:90:06:6F:1B:90:97:1B:50:86:4E:26:43
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:67:05:ef:b5:e2:9a:0c:b8:0b:30:36:b7:9c:26:93:57:3e:
f9:de:ea:f4:e0:af:13:a8:bf:0c:ee:cf:cc:8d:93:85:e1:42:
1c:a9:bc:ea:16:56:21:74:42:96:d1:ba:a1:f8:cc:75:fe:46:
b8:1f:7d:31:40:e0:87:be:8a:a4:66:05:9e:88:52:4a:a8:84:
2b:cf:50:3b:5d:89:5f:19:b2:17:8b:73:79:0f:8f:3a:47:41:
60:fe:5d:32:b6:e5:1c:61:97:26:d1:01:08:ce:9b:61:84:d6:
1f:5f:27:7d:0f:8e:13:8d:e7:7f:c1:8c:7b:0e:a6:b1:b3:34:
66:e4:93:77:a6:fe:50:22:80:5c:40:22:37:fc:11:54:5e:4e:
e8:6a:b5:68:c6:90:05:0e:7f:d5:27:db:11:a4:07:4a:ea:21:
a7:c2:d0:b5:ad:90:00:72:22:c6:55:8e:1a:0f:c8:3c:ba:9e:
7b:6d:b3:cf:1f:7a:27:e2:c9:46:52:6e:1f:96:87:db:d6:03:
e1:78:67:51:e2:f2:f9:a5:b7:12:53:cf:91:5a:28:ff:fb:48:
5c:c1:54:9c:1a:81:57:e2:01:83:4d:3a:06:8c:16:32:d4:c0:
55:bf:4e:c0:cd:d0:8c:70:cb:d1:cd:cb:1c:1c:93:17:28:14:
55:bb:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:34:39 2026 by rpki-client