Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: heKE7y+cq4blEzrMRldnVNDv/Zor+nxWf5WMvdT0FhE=
Subject key identifier: 86:70:57:3D:93:C7:1A:4B:CC:05:8A:75:B7:67:D8:28:DC:95:6C:2B
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01A00025277EB1F9BE9E7B8BC5687A40E691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 1084
Signing time: Fri 14 Aug 2026 12:00:29 +0000
Manifest this update: Fri 14 Aug 2026 12:00:29 +0000
Manifest next update: Sat 15 Aug 2026 12:00:29 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: /aFUhYAyYDgT71PYm53CLP106LQEyfgbeKirhiC+y4g=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:27:7e:b1:f9:be:9e:7b:8b:c5:68:7a:40:e6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Aug 14 12:00:29 2026 GMT
Not After : Aug 15 12:00:29 2026 GMT
Subject: CN=8670573d93c71a4bcc058a75b767d828dc956c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:a1:8c:42:f5:a3:a9:04:8d:a5:52:f3:0d:
76:13:07:4c:21:52:1a:d3:01:1f:07:4f:4a:2b:2c:
4e:96:a7:e2:c3:f0:18:97:53:b2:8b:ca:17:44:a7:
03:ae:a1:88:6d:0d:97:cc:29:65:c2:0e:38:df:ac:
01:e4:5f:12:c6:07:9b:8a:0a:8e:31:1d:6c:28:6d:
89:bd:1d:5b:0f:f2:59:d4:10:d8:2c:c7:31:fa:87:
6a:4f:dd:2d:d8:97:09:95:e1:de:db:3d:61:6d:0a:
86:81:ff:f2:c7:d5:83:07:14:ab:ad:62:3a:32:6f:
b2:bc:43:29:ed:12:8c:8b:72:1e:f3:bf:3d:fa:75:
d7:fc:2c:df:51:e3:7b:94:e1:23:e7:ed:24:78:1b:
54:60:a6:35:91:2d:c6:ac:9f:b4:2e:7b:b8:55:72:
e7:4a:3d:63:65:9b:ec:66:2d:ca:58:5c:1b:cc:3e:
a2:23:f3:f0:23:5f:79:6d:f8:b2:d2:3d:9b:38:97:
f9:e7:4b:78:37:c3:ae:c7:69:74:56:60:68:e3:f3:
13:6f:e4:16:6d:45:9f:48:a5:52:74:3a:ec:47:62:
e4:f5:b5:ff:0d:e8:26:fa:de:78:71:fc:a8:3a:cd:
2a:a8:ae:01:59:38:88:de:3a:71:ec:e7:0f:eb:1d:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:70:57:3D:93:C7:1A:4B:CC:05:8A:75:B7:67:D8:28:DC:95:6C:2B
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4d:e1:4f:92:74:59:17:45:f4:c5:21:af:e5:fc:fb:f1:5c:
54:17:db:97:0d:c6:15:29:bd:dd:9c:ee:02:b7:86:69:d2:22:
4f:4c:63:74:38:aa:05:db:e0:4b:ab:d9:76:60:38:22:7a:a2:
41:ce:f0:bd:80:c6:ee:73:9a:44:21:11:73:c7:a3:6a:03:30:
60:f6:9b:8c:3d:3f:c6:5e:b3:37:15:c0:c2:57:84:10:95:3e:
bd:22:39:11:7b:23:81:c7:b7:60:5f:cc:c9:29:bc:a8:6a:b1:
1f:13:28:e8:10:10:8e:03:e5:8c:95:07:95:49:e0:85:44:6d:
9a:0c:37:1a:ee:22:a7:2d:e2:1d:ba:90:9f:e9:16:54:99:03:
77:f8:f3:bd:1f:bb:e8:e7:36:3d:2f:90:85:90:3d:ac:6a:a5:
39:fa:bc:8f:85:d9:88:82:fb:3e:86:48:b3:9f:43:8f:2c:4e:
bc:9b:81:d4:b1:e9:00:09:8d:23:7f:dc:59:e7:f7:48:24:0f:
f6:1e:97:25:90:2a:2b:84:62:53:18:04:12:57:5e:cf:c3:3a:
b9:fa:ae:bf:f1:11:a2:5f:0a:e4:e2:12:37:2f:36:55:57:bd:
ad:cf:d9:21:43:92:f9:88:7f:e1:3e:7b:12:26:68:7f:89:96:
bd:ad:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:27 2026 by rpki-client