Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: 6VRH089EFSJS72Z47TxDVpAbmdfn2wYk+CS7MTiqH80=
Subject key identifier: FC:98:DB:B8:D0:BD:AC:C8:1F:89:FA:53:53:08:C5:37:FD:88:8E:57
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019DA4C16A0C96B5646688816AB004B731AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:00:32 +0000
Manifest this update: Sun 19 Apr 2026 08:00:32 +0000
Manifest next update: Mon 20 Apr 2026 08:00:32 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: tabnvnn5+S1b7+oeWJ33oLeWYag09gUQIFBR1d0OXdg=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:6a:0c:96:b5:64:66:88:81:6a:b0:04:b7:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Apr 19 08:00:32 2026 GMT
Not After : Apr 20 08:00:32 2026 GMT
Subject: CN=fc98dbb8d0bdacc81f89fa535308c537fd888e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:53:94:63:3f:ee:46:bf:28:d3:c4:53:04:
7d:09:cb:72:26:66:94:48:de:26:97:a2:84:33:13:
84:f0:1c:67:f7:4b:ea:8a:bc:95:4e:a5:30:b8:aa:
44:2a:79:12:5e:0a:c7:b0:d6:ce:85:fe:e6:3d:28:
7f:1e:e2:26:68:84:3a:b4:29:5c:88:a9:ae:e7:4e:
57:c1:e7:45:52:af:f6:b2:97:ea:1e:02:c3:e7:4e:
a3:c9:ab:c6:0f:89:d6:f2:07:6b:68:f2:07:74:1b:
ec:18:29:b3:d3:b5:c5:f5:10:fe:24:6d:fe:f1:d8:
40:a3:85:ff:e1:2f:04:43:1c:be:10:3b:0c:97:54:
a9:71:94:2e:42:10:c1:e3:5e:02:0b:a1:5d:7e:64:
23:92:d2:e8:af:9e:ad:b3:c1:a1:f5:d4:5d:46:bb:
db:dd:16:93:3e:3a:76:bb:23:4b:a4:25:f6:b0:d4:
26:3c:b2:2d:ab:dd:b0:56:00:23:5f:37:1e:9a:39:
1a:47:9b:fb:81:c6:f2:85:58:33:fd:d0:9b:ec:bf:
50:d4:2b:92:40:8d:b3:7f:7e:6d:dc:13:88:dd:4f:
c5:31:98:38:fa:e7:c5:ca:31:e9:fc:94:52:f1:4f:
d2:21:3a:86:ba:cf:5c:61:c3:8a:de:99:47:a1:6f:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:DB:B8:D0:BD:AC:C8:1F:89:FA:53:53:08:C5:37:FD:88:8E:57
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d2:b6:ee:19:7a:88:ca:2e:87:26:6e:92:e9:f5:09:96:db:
ef:87:23:3f:fd:dd:d0:7f:b7:cc:78:f2:f0:9e:0b:a7:71:3f:
79:3a:f4:74:49:70:24:9c:5e:20:55:70:1f:f3:8a:1c:1a:aa:
6e:79:df:4f:d1:61:8f:cd:40:84:9b:19:f5:d0:2a:1b:ac:bb:
db:37:78:89:b8:cb:8a:7a:91:25:6e:ae:45:9f:02:ce:73:0d:
d8:22:6d:1f:fc:5a:7b:e4:0b:97:da:96:e9:a0:f3:70:71:23:
f6:ad:ad:df:1a:61:3e:f2:2c:00:14:39:4f:16:2e:7b:21:f0:
0e:06:13:6f:26:54:fc:be:33:57:78:ab:cb:49:7f:ba:21:69:
ff:80:a2:b0:9c:0d:4a:23:4f:23:70:b9:18:df:17:95:79:97:
34:0e:f9:4c:4e:36:32:37:7e:c9:0d:30:60:14:d9:a2:2a:43:
65:66:3a:92:c3:7c:e2:8e:25:c4:b0:03:80:40:37:98:3a:14:
ca:f9:58:5b:09:c7:60:95:30:36:15:03:57:46:d2:5f:68:a0:
37:df:b5:1a:6a:d6:9c:0c:a0:4f:8b:2c:e3:2a:ee:31:d0:5b:
e1:9a:93:ec:a8:bb:ba:38:71:4b:25:14:b3:81:9d:1d:bf:f2:
43:9a:07:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwWoMlrVkZoiBarAEtzGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWJiZDRjNDdkYmY1ZmNkYWZlNzkwMzFmNjkwMjVhMDIz
ZTViYmIwHhcNMjYwNDE5MDgwMDMyWhcNMjYwNDIwMDgwMDMyWjAzMTEwLwYDVQQD
EyhmYzk4ZGJiOGQwYmRhY2M4MWY4OWZhNTM1MzA4YzUzN2ZkODg4ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KVTlGM/7ka/KNPEUwR9CctyJmaU
SN4ml6KEMxOE8Bxn90vqiryVTqUwuKpEKnkSXgrHsNbOhf7mPSh/HuImaIQ6tClc
iKmu505XwedFUq/2spfqHgLD506jyavGD4nW8gdraPIHdBvsGCmz07XF9RD+JG3+
8dhAo4X/4S8EQxy+EDsMl1SpcZQuQhDB414CC6FdfmQjktLor56ts8Gh9dRdRrvb
3RaTPjp2uyNLpCX2sNQmPLItq92wVgAjXzcemjkaR5v7gcbyhVgz/dCb7L9Q1CuS
QI2zf35t3BOI3U/FMZg4+ufFyjHp/JRS8U/SITqGus9cYcOK3plHoW8oUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyY27jQvazIH4n6U1MIxTf9iI5XMB8GA1UdIwQY
MBaAFPebvUxH2/X82v55Ax9pAloCPlu7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83MjUzNmYtNzQzYS00MjZlLWIwZWIt
Y2ZlNGNiMzQ2MTExLzEvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83MjUzNmYtNzQzYS00MjZlLWIwZWItY2ZlNGNiMzQ2MTEx
LzEvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodK27hl6
iMouhyZukun1CZbb74cjP/3d0H+3zHjy8J4Lp3E/eTr0dElwJJxeIFVwH/OKHBqq
bnnfT9Fhj81AhJsZ9dAqG6y72zd4ibjLinqRJW6uRZ8CznMN2CJtH/xae+QLl9qW
6aDzcHEj9q2t3xphPvIsABQ5TxYueyHwDgYTbyZU/L4zV3iry0l/uiFp/4CisJwN
SiNPI3C5GN8XlXmXNA75TE42Mjd+yQ0wYBTZoipDZWY6ksN84o4lxLADgEA3mDoU
yvlYWwnHYJUwNhUDV0bSX2igN9+1GmrWnAygT4ss4yruMdBb4ZqT7Ki7ujhxSyUU
s4GdHb/yQ5oH1g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:49 2026 by rpki-client