Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: VlGJJyxgmQyQ1NkmGKC42bWhS30ufSBt1Vlc+QhxG9E=
Subject key identifier: 6D:0F:44:CB:F0:59:24:DB:C6:F5:63:BF:3E:CE:64:0E:B6:49:01:68
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019F81C2E39A9A423B1D82603F7475F48F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 01D6
Signing time: Mon 20 Jul 2026 23:01:00 +0000
Manifest this update: Mon 20 Jul 2026 23:01:00 +0000
Manifest next update: Tue 21 Jul 2026 23:01:00 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: 0gGWl04AdyMHn1I5snUVK0ECTUGMznd4m4hiFfnHnMo=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:c2:e3:9a:9a:42:3b:1d:82:60:3f:74:75:f4:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Jul 20 23:01:00 2026 GMT
Not After : Jul 21 23:01:00 2026 GMT
Subject: CN=6d0f44cbf05924dbc6f563bf3ece640eb6490168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:f4:0a:ec:b3:53:9e:8b:c6:c9:23:81:73:
ab:01:15:95:04:83:8c:c2:f8:30:1f:46:8a:d8:54:
f9:c4:b1:5f:61:8f:47:82:3b:5e:6e:35:81:5e:2f:
f3:59:56:17:b8:6b:f6:5a:ec:d5:b7:0b:bb:e6:b3:
b7:b7:1f:41:62:5f:64:9a:44:e3:d1:df:42:a7:0c:
39:b8:00:22:77:ed:4e:4b:a0:ff:9f:1a:37:8b:87:
54:19:76:5c:bf:a1:d6:ad:3e:68:24:f9:e7:14:26:
27:f7:0b:19:99:7e:d7:8a:ae:e0:e2:85:57:47:ae:
e4:6f:33:25:6a:fe:38:58:e9:bb:06:fd:b4:6e:69:
06:63:22:70:9d:a5:4e:88:5b:4b:3b:c1:08:e1:1b:
5c:ba:6c:96:66:11:43:11:59:4a:a5:6b:03:6a:6a:
7b:79:fb:43:ca:06:10:9b:37:10:21:4b:a9:4b:99:
fd:25:bf:aa:7f:31:0e:cf:2a:00:1e:9f:ff:69:6f:
e1:92:9c:6c:83:04:5f:ab:17:01:52:ea:94:bb:bc:
a3:c2:39:99:72:f4:32:0d:e9:4a:6b:d1:58:62:9f:
71:7b:b9:69:5c:c7:9d:c7:d2:9a:c2:8f:fd:c5:75:
f5:80:59:3e:82:0a:04:99:bb:60:f0:9c:ce:29:a9:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:44:CB:F0:59:24:DB:C6:F5:63:BF:3E:CE:64:0E:B6:49:01:68
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6d:0a:d9:d5:44:c9:03:44:4a:af:55:bf:26:26:e1:2a:20:
ce:1e:2c:9c:69:b0:bd:a2:40:a3:74:b6:9b:91:18:04:bb:c9:
75:70:91:07:58:2c:b0:99:40:6d:02:13:71:5d:ac:bb:db:a8:
eb:84:90:b3:48:38:18:4b:b7:92:ab:3f:bc:68:86:00:9a:6c:
5b:c2:82:d1:fc:8d:d8:98:e5:da:42:bd:fa:e9:c0:11:b9:a4:
68:8a:a1:50:b0:e8:2d:b3:8f:91:dd:dc:b0:5e:be:64:b0:6d:
1d:4f:64:ba:51:7e:7a:7d:dc:f4:0c:4a:5b:9c:1c:fd:4d:89:
9d:27:33:4a:4d:1f:87:6b:4d:06:3e:45:8a:96:17:62:25:ee:
61:fe:27:78:23:01:0b:f3:23:7e:27:38:cf:ca:af:0b:d4:c6:
d9:22:0f:4b:97:14:db:f1:0e:86:16:be:7f:d8:b4:be:75:c9:
39:26:e6:61:a1:f1:1f:c9:a1:63:c9:9c:a1:39:a5:44:00:25:
07:4b:70:2d:09:81:fc:7d:d8:f4:8c:de:62:dd:b8:fc:62:2e:
e7:8f:fe:80:5d:83:cf:e6:04:b5:0c:dc:ef:62:24:2d:7c:72:
f0:ed:be:87:29:37:9e:f7:52:c9:b5:ed:34:f4:cd:f8:63:ea:
36:c5:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:08:58 2026 by rpki-client