Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: 94UXFFkRPkCTnoj8IgI/HYZ85FNrPw9g3/zIARYkWnQ=
Subject key identifier: 91:63:44:E8:FC:96:57:DD:4A:2D:66:56:7E:64:E2:C7:4B:D1:0E:5E
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019CAE75E2444A9BFF5DCE0C4E391F2B6CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 0E
Signing time: Mon 02 Mar 2026 12:11:26 +0000
Manifest this update: Mon 02 Mar 2026 12:11:26 +0000
Manifest next update: Tue 03 Mar 2026 12:11:26 +0000
Files and hashes: 1: 44muUChp5JRRZ63agxqoMHmu2uk.roa (hash: BUqt5hQEDJqjTZAY38OPC7Xm/4ladOgcW1BaLTx7yWI=)
2: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: BBF6dj1jUKrXWfbEcmwK8k66j2DR+D1xoYpEJTWEmCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:75:e2:44:4a:9b:ff:5d:ce:0c:4e:39:1f:2b:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Mar 2 12:11:26 2026 GMT
Not After : Mar 3 12:11:26 2026 GMT
Subject: CN=916344e8fc9657dd4a2d66567e64e2c74bd10e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:f4:e6:af:9b:c9:ff:2d:4a:d8:92:85:9f:
56:ad:58:11:64:3b:91:68:6d:a6:a7:c6:41:ff:0e:
cc:d9:29:bf:56:39:e7:82:e8:e3:7a:ae:90:29:e2:
ee:81:b7:52:30:f6:b8:6d:1a:8f:d0:77:67:14:28:
47:8e:fa:9b:38:8b:e8:e4:c7:c1:29:f6:31:67:41:
c3:27:96:ac:7a:30:fe:9a:43:52:03:29:dd:07:2c:
a2:7b:bd:bd:53:2c:65:f1:8b:bf:f3:ac:6a:f1:06:
12:7d:a8:83:b9:ac:61:8f:03:74:7a:69:cd:fd:a2:
f0:d7:96:ff:92:af:7b:05:04:bb:8c:ab:1c:51:e8:
93:77:91:0c:14:00:a3:e8:97:5f:e2:7a:6e:d2:37:
7e:75:95:ee:50:e1:0f:b4:10:99:81:76:de:6e:24:
3c:03:94:f5:d1:9f:5c:90:9f:87:69:92:51:41:48:
5b:a3:8a:6a:f6:99:b5:fc:a0:c8:98:c4:67:58:ba:
36:94:00:6f:0b:11:72:77:27:24:3e:b3:f5:59:c4:
32:db:68:04:66:0d:fd:34:ff:6e:a7:fc:39:04:c7:
e9:70:a6:7a:00:85:dc:b4:34:5d:1c:39:4b:ca:ff:
50:0a:50:70:52:fd:6c:33:a2:92:d0:7f:3c:63:01:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:44:E8:FC:96:57:DD:4A:2D:66:56:7E:64:E2:C7:4B:D1:0E:5E
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5a:33:59:42:68:e6:68:72:48:94:4f:23:13:e7:cb:04:76:
6f:69:68:4b:0b:8a:de:60:1d:5e:23:cd:74:87:4f:78:05:3b:
8a:2c:34:54:2c:a2:e1:01:56:8f:b3:a2:12:09:2b:e8:4c:95:
cd:52:cc:9a:00:d0:49:76:bf:23:8f:6c:63:e2:95:85:1b:ba:
cf:40:11:6d:67:4c:54:ec:13:02:00:c3:5f:34:0e:2e:1d:d5:
36:f0:5d:f2:06:48:8d:a2:44:d2:22:6b:34:d2:f5:14:41:36:
36:65:e7:36:3b:c0:fb:97:65:d2:6b:b1:d4:54:75:a2:18:f0:
45:ae:b2:5b:9c:12:cc:1d:e3:4b:06:5d:fd:86:21:c5:d8:84:
a6:bb:d3:83:c7:e6:b6:38:bf:3d:25:43:fa:1e:62:44:ba:44:
f3:48:37:d0:6c:67:44:f8:19:08:e0:04:59:2b:50:fe:ba:21:
5d:6a:0f:0b:2e:00:00:7b:0d:3b:91:da:0a:c1:94:4f:f2:9e:
2e:37:2c:78:52:31:29:a5:6c:1f:9c:4b:47:43:c5:5f:54:75:
a6:3b:5e:7a:23:d2:4c:6f:17:4a:67:2f:0a:74:74:55:83:fc:
b0:02:a5:e5:8d:e7:fe:c0:86:12:5d:b5:de:41:85:61:ca:13:
b3:db:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:03:15 2026 by rpki-client