Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: F5cVXTXp38t4/4joINVVzEBHVhj1AyVZazOcyFOFur8=
Subject key identifier: 6D:08:6E:41:A6:6A:98:C1:38:4C:3C:F5:59:7F:18:25:14:4D:02:4E
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 01A089B04C620E27F7BAED421A2884412ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 021B
Signing time: Thu 10 Sep 2026 05:00:27 +0000
Manifest this update: Thu 10 Sep 2026 05:00:27 +0000
Manifest next update: Fri 11 Sep 2026 05:00:27 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: 95xGtZgNHJJUAY95vbROPRFXd8surwQWA6rJUvEEE+w=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:4c:62:0e:27:f7:ba:ed:42:1a:28:84:41:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Sep 10 05:00:27 2026 GMT
Not After : Sep 11 05:00:27 2026 GMT
Subject: CN=6d086e41a66a98c1384c3cf5597f1825144d024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:2b:bb:19:34:40:35:3f:92:65:90:60:08:
15:19:36:20:3e:cd:69:74:2e:ae:16:d2:b8:40:66:
6a:1e:ce:ac:b1:f0:f8:bc:79:6d:69:73:5f:3b:ce:
59:69:75:3a:69:f2:20:d7:3c:1e:a3:72:79:23:f5:
aa:c3:1d:ab:24:e2:8c:4b:9f:6c:1f:57:cb:4c:96:
e8:50:fb:53:e7:7f:53:19:27:db:2e:a9:7c:cf:b5:
c7:7a:de:15:3b:09:ae:75:aa:c8:43:ef:99:41:54:
65:71:20:3c:a7:8d:12:d6:91:75:86:52:d4:22:7c:
f8:16:f7:6f:e8:de:e3:6c:4b:9e:20:e1:c3:37:00:
c3:70:39:ca:a3:0f:e3:59:96:d7:07:59:78:70:60:
b8:e3:31:97:31:d9:a1:c6:58:68:cf:8c:8b:67:98:
04:fb:ca:57:63:be:95:9b:bb:b1:12:f7:80:2a:d0:
db:4e:28:6c:21:db:5f:14:6e:f0:72:b0:6e:8f:e6:
a6:2d:78:3d:ef:68:25:c7:fc:62:fc:0d:42:4b:63:
f9:0b:2d:5f:a9:ed:bd:8d:a8:1c:63:36:93:3d:c8:
e0:92:80:95:5f:25:d1:40:86:1e:0c:22:a5:94:03:
b7:09:9b:21:85:e6:0c:67:61:d2:d1:24:fb:d8:96:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:08:6E:41:A6:6A:98:C1:38:4C:3C:F5:59:7F:18:25:14:4D:02:4E
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e7:0d:ec:77:07:d6:ff:57:29:b6:f7:4c:a5:3b:be:4b:03:
6f:15:0b:d4:8f:2f:63:2d:bd:0b:11:9b:7e:4f:6c:89:9d:76:
28:d0:19:f1:8d:54:1b:a1:72:52:6c:df:3e:d1:3c:92:73:49:
d4:59:65:39:0f:38:a1:c7:5b:a6:f4:57:d7:a8:ee:16:5e:12:
46:74:43:fb:59:fc:86:11:ac:46:f1:05:3a:b9:24:47:d3:69:
de:cd:6e:e1:16:06:ce:fa:df:16:94:ba:e3:a6:7a:02:40:ef:
c6:88:5c:f2:06:bd:20:bf:d8:e0:24:29:35:a2:11:a3:b6:61:
96:94:d8:99:42:93:4b:e6:26:58:d3:a5:6a:5e:d1:62:b8:66:
57:fe:1b:f8:d8:9b:50:a7:81:1a:b8:1e:be:d2:96:e6:76:d5:
cf:7a:56:cf:ba:f2:96:af:82:8a:35:d2:48:51:0c:d4:51:8e:
06:b6:0c:6b:3f:c3:35:ff:cb:3f:33:7c:aa:5a:06:a0:29:5f:
e4:c8:8d:c7:b1:38:bd:64:2f:5a:85:5f:17:86:6b:80:91:b7:
64:af:bc:fb:00:8e:43:73:02:95:46:53:09:b1:5d:1b:d3:0e:
4b:e6:e8:73:0f:78:78:48:bc:0e:09:cd:e9:62:a9:9b:1d:79:
ed:23:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:50:30 2026 by rpki-client