Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: K+OOgo97YdAQFs/DsGzFmLanZpW9V8v21ynYKNkBz7o=
Subject key identifier: 1D:FB:99:A3:E1:E7:B5:2D:67:16:B9:21:11:83:81:B2:C6:83:60:14
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01A13ECB57A7537D634FA8CD2153B89715E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 1129
Signing time: Thu 15 Oct 2026 09:01:15 +0000
Manifest this update: Thu 15 Oct 2026 09:01:15 +0000
Manifest next update: Fri 16 Oct 2026 09:01:15 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: JfJQjQVcK8NhEoXR2X215s94KlBVhFPeHCiKI9+GebQ=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:57:a7:53:7d:63:4f:a8:cd:21:53:b8:97:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Oct 15 09:01:15 2026 GMT
Not After : Oct 16 09:01:15 2026 GMT
Subject: CN=1dfb99a3e1e7b52d6716b921118381b2c6836014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:a0:46:14:b3:28:fa:b1:b8:0a:94:63:97:
b6:f5:0b:87:56:9c:21:fa:c8:d7:70:e7:f1:39:da:
8d:75:25:de:06:d2:c0:78:83:dd:f5:d7:9b:af:52:
94:bb:d8:fe:e9:34:fc:79:42:35:64:af:f8:a3:20:
5a:c3:c8:d9:2f:fc:6e:7b:84:7a:e1:ae:7b:3b:7f:
00:a8:ca:14:68:91:47:2e:be:a0:9d:03:61:28:5f:
1b:3f:a3:76:94:fe:e4:d6:d9:68:99:d8:58:a1:d9:
4c:d9:38:9c:81:1e:bc:f3:a7:52:8a:1f:c5:57:5f:
9c:e9:83:1f:32:fd:de:b8:2e:6f:da:d3:ff:82:49:
db:2a:3d:92:11:ed:02:8b:85:b7:92:02:91:b5:7c:
dc:f5:38:94:00:f3:14:91:ba:b9:96:da:59:10:e6:
14:84:66:37:23:be:07:fb:54:0e:d0:73:bf:4f:2e:
07:c0:7e:17:27:09:df:fd:d0:91:53:89:e2:df:9a:
a4:ab:d4:7a:5b:14:18:21:1a:d8:2d:4f:f0:e0:a9:
3c:9d:c1:59:e3:90:31:22:54:47:7c:2f:ba:4e:15:
a7:6e:9f:90:48:86:ae:b1:03:2b:46:8d:2a:37:2b:
c9:0e:1c:d3:86:92:53:e4:9a:01:39:86:08:1e:b5:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FB:99:A3:E1:E7:B5:2D:67:16:B9:21:11:83:81:B2:C6:83:60:14
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5f:72:60:c6:ad:dc:81:a5:a4:ab:e4:6b:cd:00:7e:69:a9:
7b:d5:ad:5a:61:68:0c:43:ec:6d:d5:72:07:17:04:67:6a:f8:
d5:ff:f1:a3:89:08:04:60:dd:58:78:62:38:24:30:f4:eb:ce:
1e:0c:0d:b3:98:a1:2b:87:3b:7c:00:9b:5e:56:e7:e3:90:46:
73:f8:f7:c9:55:d7:83:31:c6:33:97:44:fb:95:f6:cb:e0:56:
72:38:45:ae:97:8e:aa:54:7d:c2:0e:78:64:6c:da:4d:72:e9:
39:03:97:35:39:36:b9:18:1d:21:8a:84:83:59:77:7d:c7:b5:
7a:22:c9:70:f5:40:05:93:b9:96:76:81:f1:ef:17:ab:b6:41:
e2:e3:2a:2c:63:dd:72:a8:5f:e7:71:fb:f2:bc:25:7e:0e:7f:
24:18:d2:d4:07:41:69:f0:99:17:f1:e4:82:c4:51:35:fc:12:
1c:da:b6:83:27:89:51:09:36:e0:cc:61:64:2d:2e:6d:97:39:
9d:36:fc:5e:aa:29:db:1c:dc:13:84:77:c1:bd:f5:07:33:27:
bf:dc:79:62:8c:d4:2f:97:b5:0e:59:1a:d3:53:5d:a8:8e:2f:
46:d6:10:1d:d5:d6:40:ae:17:67:44:fe:dd:85:fb:fe:41:73:
ae:e2:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:46:46 2026 by rpki-client