Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: W0jlM2W2pB6Kotu9VBtIpYBW1uNlNuEhVWj/5Saepuo=
Subject key identifier: D1:B5:AD:05:EC:54:4A:AE:53:05:6E:DD:96:B4:9D:40:CF:1D:EE:4C
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019ED38643A18137C5582930648E6F8E9590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 012B
Signing time: Wed 17 Jun 2026 03:00:52 +0000
Manifest this update: Wed 17 Jun 2026 03:00:52 +0000
Manifest next update: Thu 18 Jun 2026 03:00:52 +0000
Files and hashes: 1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: GY+4/k6DeY8hZyPQqHM+v28Gu3CPuEayhV+2gJH5ST0=)
2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:43:a1:81:37:c5:58:29:30:64:8e:6f:8e:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Jun 17 03:00:52 2026 GMT
Not After : Jun 18 03:00:52 2026 GMT
Subject: CN=d1b5ad05ec544aae53056edd96b49d40cf1dee4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:be:2f:c4:cc:c8:27:7c:49:f1:b3:aa:97:
77:7f:a6:54:36:a7:78:03:52:fe:a5:f2:6b:2e:9f:
ca:d5:dd:f4:6c:f5:93:5c:82:d5:50:55:f7:6d:6a:
82:90:d3:d1:ac:0e:ec:0f:e3:38:9c:fe:09:c2:7e:
75:93:31:cb:5b:5f:9f:ab:ae:1a:0b:bc:ed:ee:d0:
e3:53:00:41:aa:d7:6b:80:67:ca:0b:0a:c5:04:f8:
f8:2e:57:c8:82:12:6c:f5:98:b4:9d:c9:30:a1:02:
41:05:3c:b2:be:83:f2:db:68:d4:5c:b4:92:b2:a9:
3c:91:b2:61:a3:41:99:0b:db:d6:34:81:f7:90:58:
c6:22:5a:90:f7:97:a7:a1:56:03:bb:a1:30:11:73:
20:c8:d9:23:ae:1b:5b:7c:8b:fb:84:69:1f:1b:1f:
dc:dc:7f:a6:79:40:96:8b:29:dc:09:45:b2:28:e5:
e5:5e:67:5b:ff:b5:4f:34:b5:23:8f:21:36:aa:c8:
d9:ca:6f:37:59:06:42:f6:64:b2:0d:36:38:31:70:
a4:ea:4b:07:82:42:2a:51:e3:98:6b:0a:b7:61:8f:
33:eb:5c:ee:8e:f2:5b:86:30:2f:06:e2:a3:c5:01:
94:50:50:56:be:65:cf:59:b5:cb:f7:a1:fa:05:a8:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:AD:05:EC:54:4A:AE:53:05:6E:DD:96:B4:9D:40:CF:1D:EE:4C
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:aa:6e:b6:3e:e7:94:ab:e1:77:80:3a:ee:7c:a4:11:1e:
79:fc:db:7b:64:d2:ec:6a:8a:59:a7:33:94:7c:f7:14:b6:c1:
74:d6:4e:44:75:a8:37:13:2d:f8:88:fe:28:f9:f9:8e:67:53:
97:ae:e2:de:e4:61:4f:d7:c3:35:d9:8f:35:fe:07:03:b3:a2:
82:ed:22:e7:83:60:11:0d:fe:81:5f:09:cc:95:69:de:af:26:
c1:8a:1e:87:dc:72:03:37:d2:0f:aa:5a:a0:7a:87:21:9c:32:
29:e7:90:84:d4:6b:ae:da:14:e1:d4:3b:6c:a5:a9:e6:ee:61:
70:a1:67:88:ff:cc:b1:05:c4:20:af:ab:43:7c:de:eb:31:55:
96:38:eb:51:00:4f:61:ec:35:bc:18:82:9f:a7:63:36:d6:64:
24:f7:a2:15:3f:8d:65:fb:b0:e5:1e:62:95:b6:b5:f5:ad:3b:
26:fb:55:fc:5e:7b:58:85:db:e6:d3:d7:97:41:b2:55:89:f5:
68:a5:76:4a:01:c5:4f:b1:db:d2:82:03:38:01:0e:97:6f:16:
85:b8:55:1c:17:f8:00:b6:87:8d:75:0d:b8:c6:c4:2b:a0:ec:
00:3c:4f:3f:64:19:3f:7a:93:b7:80:23:2e:18:53:1d:cd:ae:
ee:4a:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:23:44 2026 by rpki-client