Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: nPm6UHGtTjc0Sjt19PrVhxCZ6JQPR73ueH3srRtlErg=
Subject key identifier: 74:79:0C:15:0E:E1:6A:21:74:BB:3C:EC:D1:D0:ED:41:6E:27:12:42
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019D39E57E4CF6E6D9EAFC6181D7C5E3532C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0C9E
Signing time: Sun 29 Mar 2026 14:00:34 +0000
Manifest this update: Sun 29 Mar 2026 14:00:34 +0000
Manifest next update: Mon 30 Mar 2026 14:00:34 +0000
Files and hashes: 1: V8n8ydghZMpsaWS-dFmHBwi4qdE.roa (hash: wby6j6Fvc4buadteItu1tm7omgxplHfuuMsm39nmHJc=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: SFd0BYpNIkHKfKsfgTW95/PNQsDTHc1UPczCTbDZTsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7e:4c:f6:e6:d9:ea:fc:61:81:d7:c5:e3:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Mar 29 14:00:34 2026 GMT
Not After : Mar 30 14:00:34 2026 GMT
Subject: CN=74790c150ee16a2174bb3cecd1d0ed416e271242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:7e:3a:cb:13:39:44:74:43:85:2b:68:25:
54:b6:a8:bd:8d:25:16:81:60:27:8b:10:86:c3:75:
1a:7e:e3:85:61:9a:00:5e:be:f6:51:66:0e:09:a9:
21:60:3f:08:32:d2:11:f0:4a:15:c5:c7:ae:da:ec:
71:bb:33:02:cf:0c:45:59:01:c4:0c:b6:ad:1a:42:
70:ba:8a:76:dc:ad:3a:b4:80:74:9a:22:c3:4d:33:
49:bc:eb:5b:a2:1f:26:62:3e:a7:56:88:0d:83:95:
ef:96:c7:bf:e8:fa:38:21:34:1b:36:1a:3c:c6:43:
29:ff:07:5d:32:c6:02:ce:34:95:2b:f1:34:bd:95:
c3:77:50:f9:4b:b1:95:55:bd:c5:09:37:06:01:be:
4d:cb:21:e3:bf:86:99:5c:32:8e:ee:6e:24:ac:8d:
27:10:b8:c2:cf:ea:63:2c:c4:0d:fb:67:cc:89:33:
6e:6d:20:ac:9b:5c:c0:21:5b:21:cc:4a:f6:c8:eb:
1e:dd:d2:06:a8:40:7d:dd:64:91:ce:c0:bc:94:de:
b7:43:3c:b9:26:fa:17:78:63:54:e6:e8:2d:a7:a8:
0f:a5:c1:7f:e2:d6:5f:2d:19:67:59:49:4f:5c:28:
0e:b9:c9:46:8e:06:18:58:03:20:df:34:b0:b8:e6:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:0C:15:0E:E1:6A:21:74:BB:3C:EC:D1:D0:ED:41:6E:27:12:42
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:96:4e:72:8e:a5:b0:60:0a:12:91:3f:ba:dd:b9:75:a7:e4:
d1:9e:0e:6a:3f:a1:36:2a:f6:eb:68:52:9a:91:bc:63:24:1d:
da:04:b9:28:03:1c:d5:cd:2d:81:56:6d:4b:14:a5:29:c1:1f:
02:2f:1c:77:9d:db:5d:40:de:6e:97:13:13:81:66:fa:13:18:
58:2f:53:c5:5e:a5:bb:4c:2b:8f:9f:2e:d8:05:1d:d0:51:df:
65:25:64:75:4c:7a:f0:fc:9c:4c:41:d7:6b:3d:46:b9:d5:bd:
ac:63:5a:93:2e:d2:9b:1a:e8:fc:44:43:26:f4:34:57:38:80:
36:82:27:c9:00:f2:7b:2a:95:97:15:71:67:e9:ad:31:ab:57:
94:b6:31:85:7c:63:f2:a4:0d:50:fb:f8:99:f8:d5:28:0b:d8:
4f:be:82:4f:4f:91:db:29:59:90:69:98:32:bb:bb:a3:95:2e:
56:be:6f:12:57:1b:50:58:21:67:cd:39:a8:6b:b4:64:bd:cb:
c5:51:00:3e:3e:8e:8f:f2:6c:af:b7:a6:6d:a9:d3:d6:cc:7c:
4a:91:c5:02:7a:8c:01:fb:b4:0c:6b:28:ff:e2:ff:0f:88:54:
6a:84:dd:69:0a:1e:b0:b9:0d:de:5c:93:e2:01:1a:85:41:ee:
db:07:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:51 2026 by rpki-client