Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: ZIVJME85SLevedIfvcgBgO3IbJJ0Sv1Dl8ZBWcgija0=
Subject key identifier: 40:14:04:48:E6:50:3C:A4:F3:BF:E7:37:BA:5F:8A:7A:3F:7B:90:59
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 01A180E225A06B3EAE934ABD447FA99E86C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 029B
Signing time: Wed 28 Oct 2026 05:01:06 +0000
Manifest this update: Wed 28 Oct 2026 05:01:06 +0000
Manifest next update: Thu 29 Oct 2026 05:01:06 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: w/vJzVn5nt/ztkB3jdgtMpsIlrjm2ZcHmLUZ90gDNRY=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:25:a0:6b:3e:ae:93:4a:bd:44:7f:a9:9e:86:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Oct 28 05:01:06 2026 GMT
Not After : Oct 29 05:01:06 2026 GMT
Subject: CN=40140448e6503ca4f3bfe737ba5f8a7a3f7b9059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:69:91:77:1b:e1:38:1f:c5:5e:9c:df:05:
ea:c5:11:8b:f9:36:bc:35:b7:50:ba:8f:e4:2e:85:
9d:00:a5:9c:78:a9:41:0b:21:c4:30:fb:e3:91:a8:
9c:8b:46:ac:90:78:62:de:f0:a4:2d:1d:fc:7f:48:
f1:3b:07:8b:71:cb:62:a7:42:7f:5b:d5:b1:3c:17:
a9:6b:93:3f:9f:3a:7a:8a:21:cc:b3:17:53:43:da:
31:1e:68:7f:cb:1b:b1:21:35:7e:06:22:4d:08:14:
bd:cc:0f:fb:5e:90:25:fd:d1:69:dd:e0:e9:68:02:
32:76:3f:5d:c1:91:00:ba:fc:e3:c3:6e:ad:7e:4f:
c8:83:27:f3:51:1e:aa:b8:4c:fe:41:ca:13:8f:e4:
9a:c2:4a:f8:cc:14:23:27:6f:fd:42:ba:75:16:3c:
39:d0:d4:ad:27:1e:bd:01:03:46:00:52:5c:a7:ab:
1e:39:43:07:3e:bb:b2:49:51:72:5e:b7:12:fe:cd:
10:c1:c0:a6:06:07:ed:0d:03:6f:c8:4a:2a:f3:1c:
ad:20:52:5b:be:57:62:6c:4b:a9:20:61:9b:11:7e:
59:74:90:ac:a5:b3:cc:32:d9:08:9d:ab:2d:97:51:
3b:ca:96:1e:c9:2a:a7:ed:74:62:da:cc:35:61:c9:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:04:48:E6:50:3C:A4:F3:BF:E7:37:BA:5F:8A:7A:3F:7B:90:59
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:52:08:bd:7a:b2:c2:a8:58:65:70:f5:4d:0a:12:1d:46:
f6:a8:b9:99:9f:52:bc:11:01:0c:cb:c1:92:f8:42:54:0f:63:
29:00:6d:d8:73:e6:28:d0:f5:7d:f8:b7:33:ab:ca:3a:b8:04:
74:36:9f:03:2c:99:c3:b0:b7:c4:5a:99:64:d5:8c:e8:e6:67:
8c:ee:3c:99:c5:fb:93:a5:e5:ad:68:92:3a:05:e3:21:ec:ba:
3a:27:05:76:3d:1a:5b:41:de:0b:0a:f4:85:8a:dc:42:91:bd:
9b:df:60:dc:b1:1d:7b:16:1a:63:1e:d0:27:2f:2e:e6:69:7c:
6c:dd:1e:8a:5c:ed:94:0f:3d:81:3b:58:2b:34:72:12:76:f8:
7a:45:6f:63:e0:f1:98:0a:c2:30:a0:06:26:70:0a:39:b0:c7:
5a:4d:4b:b2:33:52:69:ab:ae:78:4b:29:58:98:14:32:90:04:
d2:f2:9e:18:16:3b:e6:f1:aa:03:fb:69:91:30:ef:30:4b:5f:
03:ed:39:ae:ab:91:b0:b9:d2:28:5d:55:93:85:d4:c6:46:6c:
73:3d:0a:4b:00:b6:17:f2:3b:ed:94:f0:e2:04:f1:ce:24:5f:
35:82:7b:0b:53:35:6d:b6:13:e9:a8:bd:c4:38:af:dc:e5:2f:
17:d2:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:10 2026 by rpki-client