Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: lf/U9bRQUIepvnPow4//Yoa4lj8BbWVlL5d5QrSKLGk=
Subject key identifier: 7C:4B:CA:59:08:59:77:14:40:52:A3:E1:D2:71:C2:BE:E6:14:5A:F1
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019FAA50BE3086CF8E57AF1FCE6792C44CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: 8iiWwnyDbhDSRqfoTtj7CjtRiGVGWXsK+5fJPyGa+/U=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:be:30:86:cf:8e:57:af:1f:ce:67:92:c4:4c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=7c4bca59085977144052a3e1d271c2bee6145af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:3c:ef:cb:78:d6:16:af:c0:c7:70:47:80:
bc:f7:c4:40:dd:91:33:bf:2a:e7:8f:58:b6:1c:ae:
b9:3c:38:99:b0:ba:71:d8:ed:94:4b:1f:69:c7:ee:
f2:5f:c7:42:62:81:b6:14:11:57:b2:50:a7:70:0f:
e2:1e:63:26:5b:58:70:fd:d8:f2:1b:4b:39:ea:1a:
4c:c4:68:1a:45:06:07:38:2e:43:b9:95:32:ba:bd:
59:29:40:34:17:ac:3c:82:35:e8:68:a5:5b:21:65:
43:ab:2a:a8:7a:fe:90:fa:84:25:01:3d:14:43:63:
72:b1:0e:b8:a4:a0:a4:fe:48:98:74:12:12:2b:a2:
a1:82:85:c7:21:dd:4f:db:3d:39:ed:2c:15:e9:65:
9b:6f:a6:da:41:f0:77:92:aa:fd:e0:46:40:67:74:
a7:57:11:98:f1:a5:f5:0c:4e:e5:95:53:35:2b:2d:
fa:8d:61:1a:58:02:80:17:02:17:22:b1:92:b2:37:
d5:f4:e9:d6:a9:86:55:4b:9b:34:5c:58:6e:d6:68:
fb:49:f9:9b:32:03:ee:d2:cb:5f:9d:4c:0b:3e:86:
d1:ec:96:67:47:6e:96:94:48:91:75:9b:92:2b:6e:
4e:3d:a5:f6:75:64:7d:7f:d2:df:e5:74:c4:cc:e4:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:CA:59:08:59:77:14:40:52:A3:E1:D2:71:C2:BE:E6:14:5A:F1
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:0e:13:31:66:24:03:5c:7e:11:67:2a:e9:32:22:4e:35:
bb:2b:78:db:eb:e9:7a:9f:1c:6b:a9:eb:83:ed:42:69:8a:80:
11:d8:bd:6f:e7:1e:3b:dc:d8:56:f9:c4:4b:57:48:f0:b8:64:
62:39:c9:6e:0f:81:96:0b:62:e5:f0:47:91:d4:ee:e6:58:6b:
d4:13:86:45:fc:8d:38:2c:2e:93:93:42:70:ce:24:3d:65:25:
f9:cd:8b:21:72:18:ab:9a:31:b3:a3:31:79:38:44:10:b6:aa:
3b:64:a9:bc:f2:b4:a3:54:f7:b3:4a:bd:3e:c8:3b:1b:3c:de:
a7:20:6c:6b:8e:0a:ec:2b:bc:77:45:17:f2:d4:8a:3a:00:64:
4c:9c:6c:11:5d:20:aa:87:1b:12:75:fc:24:b8:46:20:af:c7:
3b:63:f1:9d:47:06:d1:04:ea:c0:03:03:3c:12:6b:df:9a:85:
f4:6f:e5:24:29:12:8a:1a:b8:51:0b:78:11:ea:6a:66:23:91:
d6:c5:24:48:ef:b9:4c:7f:dc:22:d6:92:73:a6:fd:bb:3d:84:
7c:6d:d0:7f:4f:93:7a:d7:68:7d:29:3e:c9:f0:98:0d:ae:40:
c5:1d:13:14:4b:c2:04:89:f2:18:53:d3:2e:fb:6d:be:01:50:
a9:dd:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:51 2026 by rpki-client