Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: JK3RJp7V/rm3l0/7Jozf7zbgtiHyhJRPIUttA7yJZoA=
Subject key identifier: E6:18:05:1B:D9:AF:46:72:E1:B1:0E:6D:4E:B5:3E:1E:2C:BA:F0:97
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 019D378966CC1F20596E812520F95011AB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0F13
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: 0G6e+T1IoXVptw9mL8ohAyqJxPN1Ys0uwQ/Ko4biYvw=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:66:cc:1f:20:59:6e:81:25:20:f9:50:11:ab:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=e618051bd9af4672e1b10e6d4eb53e1e2cbaf097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:81:e6:f2:52:48:06:df:5c:79:d1:89:69:
c1:92:e8:f3:1f:d2:82:1e:aa:11:6b:66:f3:e7:45:
4b:13:a1:c9:9a:33:e5:cb:4a:b7:05:9e:47:c0:b2:
fd:a0:f9:36:a8:e3:ea:fb:dc:ea:0a:3b:2a:a6:9e:
93:b8:44:36:85:e7:84:c3:4e:55:35:62:b8:7a:8e:
eb:34:98:9d:f7:0d:5e:3e:16:36:df:8a:27:56:f2:
35:e6:a8:fa:5f:ec:2a:d6:ad:cb:48:cf:2c:88:bb:
55:8e:0a:bf:4b:cb:1d:8a:fd:e3:ff:93:54:65:60:
46:a9:08:ce:30:e2:4f:aa:17:2f:a4:fd:3e:68:5d:
0d:5e:22:fa:c2:96:9e:20:0a:16:6b:71:a7:cf:3b:
56:1b:ec:e8:5b:51:96:ba:72:05:71:82:52:cc:b4:
be:46:a2:10:33:aa:76:6c:f6:5c:0a:cc:dc:1d:64:
dd:a5:c5:62:13:bb:99:df:c8:46:77:09:2c:65:11:
b3:5f:de:6f:1b:a4:4b:86:c2:24:a6:1a:db:9d:37:
16:b9:3d:c3:1f:11:24:ba:58:b5:09:55:ef:4d:83:
75:84:05:1b:03:1e:1d:4e:ae:1f:b9:c2:dc:36:20:
0b:83:63:8a:1b:e6:42:74:08:52:ce:74:67:8b:6b:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:05:1B:D9:AF:46:72:E1:B1:0E:6D:4E:B5:3E:1E:2C:BA:F0:97
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:20:a2:1f:65:26:51:91:fd:e6:96:c0:3d:7d:cc:6a:2c:a9:
4a:80:20:c4:ed:e2:52:f5:60:6f:06:e6:13:78:7f:d8:a6:c6:
91:fb:1e:7c:22:af:db:a7:62:fe:a5:6a:bb:24:27:cf:ff:05:
12:43:fd:c5:3b:9c:27:a3:55:88:76:7c:49:f2:84:68:81:aa:
1c:b7:03:a9:1a:94:06:1e:d8:05:74:93:35:d8:28:71:e9:7b:
03:61:db:b9:93:b2:f6:ad:d5:26:c7:32:73:0a:7a:ed:08:5a:
63:e4:8d:5f:8d:94:25:68:46:24:11:c9:95:1b:96:d4:87:d8:
d0:62:fc:72:82:59:a4:1e:cc:dd:51:97:1d:6f:93:3f:ef:56:
fc:75:e0:f3:d7:4f:58:0b:07:e0:08:37:dc:9c:c3:c4:b7:44:
aa:db:cd:cb:9b:dc:37:45:be:4b:dd:c1:e7:7b:2e:75:27:bd:
4c:e5:33:f5:8b:c8:40:98:84:8f:a6:22:d1:b0:74:c8:93:10:
55:ec:7f:2f:42:ce:21:54:b7:52:f7:e6:eb:55:8c:86:87:f0:
3e:c3:22:40:0a:5d:39:2f:c4:74:7b:a1:47:04:b7:84:16:50:
de:81:e3:e8:ab:92:ee:2b:33:87:9d:72:6a:61:5f:f9:4c:0c:
9a:06:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:57 2026 by rpki-client