Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: J9HE8amUoFHXoL96M4SIPRr4ns0PInFkFhPVI7eGyQg=
Subject key identifier: DA:E2:E7:22:BC:B7:A1:44:D7:C6:44:CA:69:65:1E:11:F9:8B:D5:85
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019FA004237343066450F5EDCADCE2C50631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 01A2
Signing time: Sun 26 Jul 2026 20:00:53 +0000
Manifest this update: Sun 26 Jul 2026 20:00:53 +0000
Manifest next update: Mon 27 Jul 2026 20:00:53 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: t+ljUt4uuZNmdaxHVipWbUtrVm0J8cMwnlzA0v/YBTs=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:23:73:43:06:64:50:f5:ed:ca:dc:e2:c5:06:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Jul 26 20:00:53 2026 GMT
Not After : Jul 27 20:00:53 2026 GMT
Subject: CN=dae2e722bcb7a144d7c644ca69651e11f98bd585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:ed:99:a8:ef:41:fc:a0:b2:09:5e:fe:ef:
6b:50:46:c8:f1:a5:fd:9d:99:4b:ba:c7:57:48:84:
37:7d:02:eb:b8:ae:08:f6:44:bf:6d:47:e3:d1:92:
34:a3:eb:42:96:f2:7e:36:19:e0:45:03:b9:20:2b:
8d:66:89:03:f2:1d:25:35:bf:9d:c2:68:06:70:f0:
f4:ee:b2:68:34:78:36:eb:b1:d4:99:bc:42:41:39:
e1:e8:6c:af:f6:c8:2d:36:cd:83:32:88:5d:d4:65:
13:f2:50:0a:e6:d6:11:7f:a7:f3:46:9d:8b:cb:5f:
4b:af:b7:60:74:78:c2:ea:aa:99:3c:cc:2d:cd:d2:
fa:b3:62:25:0e:4a:b3:b3:69:eb:e1:ea:a4:2f:1f:
ed:3b:7f:ce:13:14:85:9b:67:27:2e:b9:c0:ce:c0:
11:23:ac:de:4b:b8:b1:69:cd:e2:c4:fa:a7:85:23:
fd:59:58:eb:d3:07:cb:31:b1:3c:4e:a2:34:05:42:
c2:4d:e3:8b:7c:6f:5c:c9:45:c1:df:13:5c:30:82:
83:9a:01:2c:78:24:cf:cc:cb:d6:9c:83:3d:33:8c:
86:ac:b3:2c:84:ef:4d:03:e0:97:87:d2:e3:b0:d5:
43:70:0b:4a:c9:7f:a8:2e:82:92:fb:d9:25:73:91:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:E7:22:BC:B7:A1:44:D7:C6:44:CA:69:65:1E:11:F9:8B:D5:85
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:36:06:e9:bd:d7:76:36:f6:82:ce:c3:77:50:ec:d2:1c:38:
a9:57:b0:94:13:ac:73:89:85:52:ca:dc:4a:b5:70:93:e9:d4:
45:ef:59:a2:8b:cc:3b:26:24:4d:c9:4f:ef:ff:46:9b:06:f8:
56:83:62:b2:f6:e6:da:03:32:a6:de:9e:6c:c3:e2:15:47:e1:
67:d6:f8:49:dd:ba:65:69:d4:5c:85:58:bd:68:9d:69:04:26:
c8:38:5e:65:b2:de:a0:db:23:26:20:bc:f7:45:12:2e:fd:c5:
80:09:bb:23:a7:7f:ba:a3:09:23:8f:4c:28:fa:a7:5e:32:c6:
c1:19:b9:8d:74:1e:66:29:e5:27:ff:48:e9:ea:7c:c4:35:d7:
16:8c:50:f6:77:ef:30:53:60:cf:ab:dd:bc:22:91:30:05:d6:
4a:57:4b:51:e1:0b:6f:c3:95:19:6b:d0:2a:91:a4:44:71:5c:
05:35:41:c0:af:33:9f:25:ae:ce:58:95:ee:f4:92:e6:50:9d:
a4:d9:3b:5c:7a:ed:9a:c7:f0:81:85:98:13:47:18:30:06:bc:
24:f5:57:6b:02:b1:d5:21:9d:fd:24:19:ec:1d:19:0c:04:eb:
54:82:a2:e4:2d:7d:9e:4f:e2:7b:9f:36:7f:b6:a2:ee:e3:2a:
ab:05:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:52:37 2026 by rpki-client