Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: GlGxqzIz9k5PVo0xWZOKeX3Y3b6ZpOvbuu2oB/z8jXw=
Subject key identifier: B6:EB:78:28:AC:13:49:D7:BD:A2:68:4E:84:F3:2A:D1:94:6D:B0:9D
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019D9BF5866BA3FBEAC7AC74C46D27D4FFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 89
Signing time: Fri 17 Apr 2026 15:00:52 +0000
Manifest this update: Fri 17 Apr 2026 15:00:52 +0000
Manifest next update: Sat 18 Apr 2026 15:00:52 +0000
Files and hashes: 1: 44muUChp5JRRZ63agxqoMHmu2uk.roa (hash: BUqt5hQEDJqjTZAY38OPC7Xm/4ladOgcW1BaLTx7yWI=)
2: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: MqYbO3zanr//XVWpKlbY3Xm/fMnDumvlLlnACb2Fijo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:86:6b:a3:fb:ea:c7:ac:74:c4:6d:27:d4:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Apr 17 15:00:52 2026 GMT
Not After : Apr 18 15:00:52 2026 GMT
Subject: CN=b6eb7828ac1349d7bda2684e84f32ad1946db09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:de:ff:51:e6:c4:48:f8:2a:bc:7b:6f:42:
48:39:7c:42:59:d9:f7:4a:a5:e5:02:fd:06:37:ff:
22:00:22:49:3f:4e:d9:d4:71:2a:86:48:8a:3d:a2:
1d:08:93:76:a2:ce:c6:03:99:1f:68:c4:6d:db:d4:
db:65:f5:41:75:40:7b:62:6d:38:70:9c:e9:80:34:
f5:af:7d:cb:3c:b0:ee:b2:89:2c:fd:3c:1f:f3:80:
3f:a4:21:98:0a:dc:39:3f:6b:ed:92:9a:b4:2e:53:
14:b1:e1:33:54:2b:2c:e0:75:97:73:81:b6:57:42:
85:2f:97:52:90:db:ff:75:58:34:f3:44:18:12:36:
c1:c2:f5:f2:52:7f:ef:8e:0f:1a:87:43:86:29:be:
54:25:6b:9f:d7:fe:93:5c:3d:9a:c9:b4:71:1a:d8:
77:eb:66:12:0f:f4:3f:6f:e9:06:1e:9e:44:e6:9f:
44:f4:0b:c4:68:5a:cd:79:9a:18:d1:a7:80:1b:94:
69:e9:1d:ae:23:a6:26:a7:a5:92:72:32:85:74:65:
70:93:e6:dc:ab:af:ab:7f:b4:04:0e:30:bb:00:23:
34:a2:5a:39:27:80:b1:c7:0c:69:1a:5f:a4:84:32:
a6:5f:d4:0d:41:30:14:e1:05:ba:dd:ff:98:b9:a5:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:78:28:AC:13:49:D7:BD:A2:68:4E:84:F3:2A:D1:94:6D:B0:9D
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:2d:8d:f3:88:0c:b9:f0:ce:f2:0c:81:77:db:22:f2:43:
70:be:24:94:27:ca:14:46:e0:f6:f7:36:51:70:61:99:c7:c7:
d4:ee:d9:68:a8:b0:69:7e:fd:d1:44:9e:5c:a6:d4:74:c7:ac:
10:ad:94:47:bd:d2:c4:65:db:6e:98:a1:89:4c:7b:67:07:fa:
29:b4:8b:a7:3b:1c:18:d7:21:2f:19:c3:e9:bc:21:38:64:ea:
23:4d:e2:ff:22:53:86:76:3d:20:f4:98:8b:36:42:f5:64:7c:
ee:de:98:86:a9:08:b7:a5:ec:cd:9f:d3:f0:ca:5b:7d:b8:c3:
1a:21:5e:da:66:b9:34:c8:0a:66:e7:47:9a:fa:14:9c:74:ac:
bb:e9:fe:43:c1:03:d6:cc:d1:aa:d4:e7:5f:b6:7b:39:f4:0b:
2c:fb:37:71:39:7e:9a:60:d3:f6:0d:57:17:b1:78:00:0f:8e:
62:ca:87:04:dd:65:7c:8f:a0:a7:94:ec:eb:ee:9d:6a:6b:b9:
f6:fc:87:6d:a2:82:51:58:f0:3a:93:c7:b6:f4:f5:78:5b:08:
0b:04:0f:32:58:c5:2f:0d:97:23:a8:a4:02:5e:d6:94:24:d6:
7d:d4:80:86:72:74:1e:a5:41:db:12:5d:64:a8:7a:42:a6:82:
99:55:d4:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9YZro/vqx6x0xG0n1P/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTY0N2NhY2QyMGY5NDQ3ZDA1MDUzODMzMWIxZmU3ZTA0
YzFhMjYwHhcNMjYwNDE3MTUwMDUyWhcNMjYwNDE4MTUwMDUyWjAzMTEwLwYDVQQD
EyhiNmViNzgyOGFjMTM0OWQ3YmRhMjY4NGU4NGYzMmFkMTk0NmRiMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pre/1HmxEj4Krx7b0JIOXxCWdn3
SqXlAv0GN/8iACJJP07Z1HEqhkiKPaIdCJN2os7GA5kfaMRt29TbZfVBdUB7Ym04
cJzpgDT1r33LPLDusoks/Twf84A/pCGYCtw5P2vtkpq0LlMUseEzVCss4HWXc4G2
V0KFL5dSkNv/dVg080QYEjbBwvXyUn/vjg8ah0OGKb5UJWuf1/6TXD2aybRxGth3
62YSD/Q/b+kGHp5E5p9E9AvEaFrNeZoY0aeAG5Rp6R2uI6Ymp6WScjKFdGVwk+bc
q6+rf7QEDjC7ACM0olo5J4CxxwxpGl+khDKmX9QNQTAU4QW63f+YuaWC4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbreCisE0nXvaJoToTzKtGUbbCdMB8GA1UdIwQY
MBaAFPeWR8rNIPlEfQUFODMbH+fgTBomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMzQ3NDctNjU5Yi00NjcwLTg3NmMt
MjJjODg2MmJlYzFkLzEvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iMzQ3NDctNjU5Yi00NjcwLTg3NmMtMjJjODg2MmJlYzFk
LzEvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL0tjfOI
DLnwzvIMgXfbIvJDcL4klCfKFEbg9vc2UXBhmcfH1O7ZaKiwaX790USeXKbUdMes
EK2UR73SxGXbbpihiUx7Zwf6KbSLpzscGNchLxnD6bwhOGTqI03i/yJThnY9IPSY
izZC9WR87t6YhqkIt6XszZ/T8MpbfbjDGiFe2ma5NMgKZudHmvoUnHSsu+n+Q8ED
1szRqtTnX7Z7OfQLLPs3cTl+mmDT9g1XF7F4AA+OYsqHBN1lfI+gp5Ts6+6damu5
9vyHbaKCUVjwOpPHtvT1eFsICwQPMljFLw2XI6ikAl7WlCTWfdSAhnJ0HqVB2xJd
ZKh6QqaCmVXU6Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:15 2026 by rpki-client