Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: v4l2aZNrI7AmtnEVPixW27tpKW/qVVZsaVqQvLq2x6A=
Subject key identifier: D5:F1:70:E0:D3:E3:37:11:37:A8:4A:C9:A0:BE:93:21:FF:3F:06:68
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 01A1570AA9E45525D216DA25A509D3C7D089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 02C9
Signing time: Tue 20 Oct 2026 02:01:19 +0000
Manifest this update: Tue 20 Oct 2026 02:01:19 +0000
Manifest next update: Wed 21 Oct 2026 02:01:19 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: fROmuLmHbsI4VRKnipbqKvvS3HBnpKxTqEblOd7IDXk=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:0a:a9:e4:55:25:d2:16:da:25:a5:09:d3:c7:d0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Oct 20 02:01:19 2026 GMT
Not After : Oct 21 02:01:19 2026 GMT
Subject: CN=d5f170e0d3e3371137a84ac9a0be9321ff3f0668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:da:ee:e6:64:53:21:ca:5a:88:d4:62:f3:
77:54:14:d5:4a:01:a0:69:ed:56:67:85:00:3d:c6:
44:a4:cb:c8:d7:51:e0:4c:3d:58:8d:3c:a4:41:e0:
67:e4:5e:01:fa:5e:31:3f:3a:12:91:28:ed:da:3e:
54:b4:20:48:24:35:6d:eb:76:c9:6f:b1:e2:67:37:
85:1f:3f:f2:61:62:81:74:da:35:6c:c8:8e:7b:e9:
45:d3:3c:50:ac:81:9a:4b:ba:61:95:17:03:4e:5b:
90:60:88:7a:cc:18:42:7b:33:e9:8a:2e:68:86:a9:
2c:f3:88:c9:3f:b3:71:d5:eb:50:6e:00:14:be:98:
7b:85:ab:1a:af:d6:37:ce:fb:17:8b:78:12:f6:24:
ad:08:be:30:1d:0f:1a:06:fc:39:58:11:26:d8:31:
ab:ed:54:fc:cc:da:55:3c:b1:b3:98:21:42:3f:80:
ef:0d:f5:4a:ba:d0:03:48:9f:c8:b4:9d:73:1e:52:
97:c9:2c:fe:97:b3:df:9a:ed:a9:58:c2:8a:ed:91:
63:17:e2:08:d9:df:e8:ca:38:02:d1:70:64:57:77:
6b:d4:84:df:b2:a5:4e:78:c1:57:b7:02:cb:25:4f:
5b:b2:e7:21:ad:ed:3d:b2:21:0c:06:d5:55:f9:83:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:70:E0:D3:E3:37:11:37:A8:4A:C9:A0:BE:93:21:FF:3F:06:68
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:94:b2:62:c8:0f:fc:cc:80:de:b0:d7:a5:32:b5:33:9d:0a:
f6:38:8d:ab:bd:03:a4:ad:94:03:4b:42:4b:c3:59:c4:84:26:
02:53:8a:96:59:20:39:c1:2f:25:39:b1:e0:cc:9a:be:72:28:
94:1d:69:ff:c1:97:63:99:a1:b9:90:55:72:be:d5:63:7c:1b:
94:a4:50:d3:44:63:89:88:fa:d9:53:5e:0b:42:24:2d:93:67:
42:1b:27:0e:06:57:bf:d6:22:d9:da:c8:57:2f:ea:b7:08:91:
c9:77:36:0b:1f:8f:70:01:82:2c:7c:93:23:b8:29:f0:33:c5:
36:d8:c0:56:c3:68:a9:42:8f:7c:6d:19:eb:e9:b7:ee:1b:23:
34:da:cb:24:67:89:93:40:14:4a:7b:20:eb:64:6e:af:2c:1c:
d3:2d:e5:7f:ff:cd:40:a3:20:a8:f2:3f:96:97:3e:31:27:37:
b1:08:8b:83:4e:f9:eb:c6:d3:54:5a:94:7f:e6:46:94:f2:5e:
2f:8b:2c:d8:6d:20:10:44:63:7d:5d:41:35:3b:62:0a:5f:5c:
de:c8:1a:83:b5:58:79:9e:e3:b2:06:b6:78:2c:48:71:6a:12:
00:e4:18:0d:ed:46:8d:d3:72:94:62:2f:68:1b:c7:ca:61:68:
49:e6:43:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXCqnkVSXSFtolpQnTx9CJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWJiZDRjNDdkYmY1ZmNkYWZlNzkwMzFmNjkwMjVhMDIz
ZTViYmIwHhcNMjYxMDIwMDIwMTE5WhcNMjYxMDIxMDIwMTE5WjAzMTEwLwYDVQQD
EyhkNWYxNzBlMGQzZTMzNzExMzdhODRhYzlhMGJlOTMyMWZmM2YwNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo/a7uZkUyHKWojUYvN3VBTVSgGg
ae1WZ4UAPcZEpMvI11HgTD1YjTykQeBn5F4B+l4xPzoSkSjt2j5UtCBIJDVt63bJ
b7HiZzeFHz/yYWKBdNo1bMiOe+lF0zxQrIGaS7phlRcDTluQYIh6zBhCezPpii5o
hqks84jJP7Nx1etQbgAUvph7hasar9Y3zvsXi3gS9iStCL4wHQ8aBvw5WBEm2DGr
7VT8zNpVPLGzmCFCP4DvDfVKutADSJ/ItJ1zHlKXySz+l7Pfmu2pWMKK7ZFjF+II
2d/oyjgC0XBkV3dr1ITfsqVOeMFXtwLLJU9bsuchre09siEMBtVV+YO+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXxcODT4zcRN6hKyaC+kyH/PwZoMB8GA1UdIwQY
MBaAFPebvUxH2/X82v55Ax9pAloCPlu7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83MjUzNmYtNzQzYS00MjZlLWIwZWIt
Y2ZlNGNiMzQ2MTExLzEvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83MjUzNmYtNzQzYS00MjZlLWIwZWItY2ZlNGNiMzQ2MTEx
LzEvOTV1OVRFZmI5ZnphX25rREgya0NXZ0ktVzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJSyYsgP
/MyA3rDXpTK1M50K9jiNq70DpK2UA0tCS8NZxIQmAlOKllkgOcEvJTmx4MyavnIo
lB1p/8GXY5mhuZBVcr7VY3wblKRQ00RjiYj62VNeC0IkLZNnQhsnDgZXv9Yi2drI
Vy/qtwiRyXc2Cx+PcAGCLHyTI7gp8DPFNtjAVsNoqUKPfG0Z6+m37hsjNNrLJGeJ
k0AUSnsg62Rurywc0y3lf//NQKMgqPI/lpc+MSc3sQiLg07568bTVFqUf+ZGlPJe
L4ss2G0gEERjfV1BNTtiCl9c3sgag7VYeZ7jsga2eCxIcWoSAOQYDe1GjdNylGIv
aBvHymFoSeZDAw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:29:59 2026 by rpki-client