Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: IX7aa94DakraXoqcQwhqdqPlZMbP1YRuE/9Unt5E15U=
Subject key identifier: 6A:69:1C:55:DE:2E:47:47:69:01:F7:EC:90:A3:39:83:59:3D:42:E2
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019E905CB791C32C68EF81B057DCB5FA1C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 0159
Signing time: Thu 04 Jun 2026 02:00:55 +0000
Manifest this update: Thu 04 Jun 2026 02:00:55 +0000
Manifest next update: Fri 05 Jun 2026 02:00:55 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: Fuqyh/ZTse8qInW5cBBkGRoCAA9h2dYtDRZ1mSgACcE=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:b7:91:c3:2c:68:ef:81:b0:57:dc:b5:fa:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Jun 4 02:00:55 2026 GMT
Not After : Jun 5 02:00:55 2026 GMT
Subject: CN=6a691c55de2e47476901f7ec90a33983593d42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:86:c9:a3:ff:b7:6f:d1:51:57:76:e9:5f:
a4:ed:bb:b9:02:4f:25:3f:f2:61:e3:04:b8:58:ec:
13:8d:d5:9d:10:7b:4f:78:df:24:88:1b:c3:8b:59:
f3:9d:80:fd:4d:fb:96:cf:44:5c:95:07:74:de:a1:
96:22:8d:96:9f:24:c5:93:75:65:0c:78:bb:8d:ed:
c3:ff:47:bc:6e:62:4b:76:b0:95:28:29:61:36:f1:
74:d7:a6:d8:cb:02:d4:7a:8d:a3:0f:25:30:c9:23:
02:01:75:ad:97:db:ea:cb:e1:d8:3f:20:0c:c0:9a:
7a:6b:9e:12:da:77:d5:c2:22:8a:8a:c8:68:01:72:
aa:a0:ca:96:77:51:99:a6:b0:e4:de:e7:89:ce:09:
fa:12:73:42:c9:30:ce:72:38:bb:f9:3b:9f:79:08:
43:86:5d:ac:bd:d6:da:8a:a5:bb:0e:97:a2:bd:d2:
68:20:d9:2f:dd:f8:30:0a:dd:5b:eb:71:a3:67:13:
f8:b7:0c:d4:2e:58:cf:d8:ec:ce:eb:9f:4b:0c:47:
a2:de:aa:4d:98:b5:37:e6:d2:e1:1c:33:6b:a8:0d:
87:a9:81:18:71:5c:5e:93:2a:a7:cf:c1:07:6d:6a:
27:e2:bc:73:d4:12:94:9f:28:05:05:0c:09:e4:7c:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:1C:55:DE:2E:47:47:69:01:F7:EC:90:A3:39:83:59:3D:42:E2
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:16:2b:7a:16:d5:a2:f3:9b:59:00:a3:74:8a:79:2e:78:
a2:db:06:8c:81:39:c6:ab:32:af:6c:24:7c:45:83:2f:5c:a3:
6d:ca:92:6f:fd:fe:67:71:95:0a:ab:a7:66:1a:f2:41:56:85:
93:65:99:d5:e3:89:5d:9c:f3:dd:72:b0:72:fa:c8:e5:5a:66:
76:e1:bc:0a:a9:73:97:b3:cb:4e:d2:52:83:67:d7:09:38:76:
9d:6e:5f:8d:23:84:5b:47:74:84:78:1a:38:84:37:06:61:83:
fc:cd:7c:8f:d1:8c:3d:1a:ee:06:3e:c8:25:b1:4d:62:d8:64:
ed:00:47:de:91:5b:45:ef:59:59:ad:16:f0:5d:bd:9a:06:43:
e0:8f:4e:0e:19:b6:67:39:b8:b3:de:32:23:b9:23:86:80:09:
9c:9e:2c:96:d6:ad:ec:53:b9:c4:17:7c:45:26:1b:23:2d:6f:
bc:44:be:e6:e1:d1:78:81:62:ec:a7:b8:c7:3a:c8:0f:af:62:
0a:a1:3d:e4:f0:0a:d2:14:68:e3:34:b1:c4:cc:1c:cd:82:c2:
0f:65:ce:c0:9d:93:ff:1c:ed:46:44:15:8b:16:32:0e:20:36:
7c:f2:5f:d4:e2:cf:fb:ee:4e:9f:3d:5f:e7:73:b1:4a:27:cb:
20:27:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:41 2026 by rpki-client