Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: jaqh2lMfizHNh088kYyeoos0gPSWobIm397jZo5NBoA=
Subject key identifier: 52:A8:EB:BE:33:50:7A:4B:73:3D:37:6D:F1:A7:AB:35:7D:97:E8:5D
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 01A1551C0CED19FC4C27FD2E04231611F41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 02C8
Signing time: Mon 19 Oct 2026 17:01:03 +0000
Manifest this update: Mon 19 Oct 2026 17:01:03 +0000
Manifest next update: Tue 20 Oct 2026 17:01:03 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: 17YBzIPKiwX200+VpyQBjKAo0WnOOInvfqyyQ+HRZS8=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:0c:ed:19:fc:4c:27:fd:2e:04:23:16:11:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Oct 19 17:01:03 2026 GMT
Not After : Oct 20 17:01:03 2026 GMT
Subject: CN=52a8ebbe33507a4b733d376df1a7ab357d97e85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:50:d3:46:d0:c2:36:1d:0a:e4:fc:36:b9:
92:b6:dc:13:f0:6c:a9:c0:af:ec:45:5a:e4:43:24:
4c:b0:2d:cc:db:5a:79:2f:f8:b9:9e:aa:d2:7e:ae:
55:30:b1:47:a4:1b:f8:c9:d0:3b:4a:d3:b5:b2:01:
16:b1:34:33:9b:28:be:ec:28:a7:5f:67:a0:ec:6d:
c4:52:d6:d0:a5:fb:9d:62:d7:51:2f:86:95:09:df:
10:59:a4:d2:b0:40:f9:60:36:63:2c:59:aa:ba:2e:
66:b3:b5:d6:07:7b:56:de:70:d9:e6:68:9b:86:f9:
7f:ed:23:41:85:38:80:83:e2:72:66:59:50:44:7c:
12:9b:4b:00:8f:20:06:d1:42:11:e3:13:d2:c1:0f:
a7:32:a9:0c:59:a8:b6:9c:4c:52:86:43:ad:21:ae:
d7:2f:25:d9:5d:79:45:51:3e:d0:7b:83:43:a2:b5:
3c:ce:df:86:15:7d:f1:46:4d:32:b2:33:eb:eb:30:
54:dc:9e:5b:7f:3a:0f:fb:39:2e:4e:61:3d:d9:20:
f0:15:37:ed:f0:95:ea:8b:f5:53:7c:01:97:68:01:
ce:27:43:2a:d3:da:b6:d1:53:4b:0d:9b:72:3e:10:
87:7e:94:b9:08:46:3c:d3:d8:62:e6:25:8d:21:71:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:EB:BE:33:50:7A:4B:73:3D:37:6D:F1:A7:AB:35:7D:97:E8:5D
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:84:d4:b2:25:4c:ee:00:aa:f6:2a:2a:42:31:62:4c:0c:e3:
42:18:65:77:24:c1:56:4c:2c:d7:f8:b3:dd:c8:b6:8a:8d:4a:
32:f4:48:fc:c5:fb:a7:98:e5:e3:db:1f:22:50:9a:0b:77:9d:
0d:36:d7:1f:63:e4:0f:34:02:1c:09:98:72:62:cb:a4:d9:03:
a4:7a:84:bd:43:29:28:0c:c8:fd:bc:7f:aa:aa:c5:e3:3e:07:
94:d7:6e:4c:bc:2d:27:5d:31:91:7b:f1:95:2f:b4:0a:c6:6c:
0d:ef:8b:7f:84:c7:0d:db:f5:7e:c4:ec:02:5b:c2:ab:1b:20:
0c:45:ca:62:c7:e3:c0:c1:b6:fa:19:e7:3a:6c:08:2d:93:c0:
51:4d:c7:4b:cf:fb:f6:d4:8a:fc:0a:93:12:a6:f7:0f:87:b5:
8f:0e:b0:90:32:74:84:42:13:0a:ec:73:b8:81:2a:de:dc:15:
5c:5a:c7:e2:f4:c1:a5:1c:eb:42:30:7d:b2:c4:14:7f:9d:54:
a6:a4:dd:30:0a:ee:9a:31:3b:f5:09:96:bd:98:01:d8:e6:1a:
1b:ac:ef:3c:d5:d4:19:3d:da:57:de:38:31:82:22:3a:08:a9:
77:b5:98:f8:da:63:12:1f:7b:c1:21:3d:9e:bc:67:f0:97:9d:
d9:b9:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:47:20 2026 by rpki-client