Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: 03zZGy73znZStgnfeBApha4nLxQF4E3QeFLCfOGY1dg=
Subject key identifier: 33:E4:64:0C:5E:A7:D0:E8:A9:F7:31:2B:91:80:2C:84:70:B1:3A:F8
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019EB68E17B08A418E06DE10439DB1109C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 011C
Signing time: Thu 11 Jun 2026 12:00:25 +0000
Manifest this update: Thu 11 Jun 2026 12:00:25 +0000
Manifest next update: Fri 12 Jun 2026 12:00:25 +0000
Files and hashes: 1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: d4q/0RIvdcF1F0EiLfH5yEo/G3zGRz/J1FOtzB1IC6U=)
2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:17:b0:8a:41:8e:06:de:10:43:9d:b1:10:9c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Jun 11 12:00:25 2026 GMT
Not After : Jun 12 12:00:25 2026 GMT
Subject: CN=33e4640c5ea7d0e8a9f7312b91802c8470b13af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:d3:54:d7:79:46:62:e3:30:24:51:4c:a0:
8d:dd:67:dc:b7:3b:e0:0a:40:89:d1:58:6d:60:d6:
4d:d9:c8:e0:e7:a6:db:41:8c:c2:84:23:86:73:04:
48:9c:4d:bc:85:c0:8d:0c:aa:af:50:21:a9:f0:32:
a8:7b:0b:71:0a:ba:c5:af:57:db:08:14:ef:04:de:
5f:42:a8:1e:50:d3:30:7f:db:ce:21:fa:99:8c:70:
91:b5:ba:bf:05:ff:ce:2c:c3:cf:0b:78:b9:af:40:
3c:af:9a:dc:03:d5:e1:b5:9f:de:74:d2:1e:ab:29:
fc:8a:29:a7:50:3c:42:00:d5:77:24:e0:63:8d:58:
6f:d5:36:e9:c7:07:89:74:b9:7b:1f:99:6c:3b:6d:
c6:48:f3:e4:1c:97:b9:e2:9d:06:8d:6b:55:be:a8:
9f:7a:7e:12:6c:0c:69:96:57:be:3a:97:9d:66:a2:
0a:28:5e:8d:bd:ee:04:1a:b6:ab:ec:e4:fa:13:e3:
a4:c6:9f:98:e6:03:d6:b5:af:91:8f:1e:b4:da:d3:
82:52:df:d0:9e:d2:ac:78:72:d1:5c:33:5a:30:19:
f6:2e:55:39:4a:1f:10:54:f1:24:7d:b1:7c:53:84:
75:ed:5f:45:19:34:25:ea:ce:d8:30:6c:d6:ed:c1:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:64:0C:5E:A7:D0:E8:A9:F7:31:2B:91:80:2C:84:70:B1:3A:F8
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4b:11:e8:12:90:ab:0b:70:7b:71:eb:8a:5c:ca:fd:ab:f1:
97:a8:5c:52:cf:48:d4:64:7b:e8:6b:ff:62:56:62:ae:bd:ea:
c2:44:8b:31:03:69:eb:a9:81:16:0a:58:51:ff:22:17:6d:99:
94:9f:90:b3:58:21:6d:fc:c7:b8:a2:6d:50:c9:33:59:08:a4:
fd:62:4c:fa:be:80:7d:7a:64:d1:82:96:f6:a5:40:f1:e8:52:
70:6e:76:aa:46:1f:a5:16:23:1f:f7:36:ee:78:b2:bc:05:20:
5b:14:6e:bd:aa:1b:c8:1a:81:ad:2b:56:24:14:11:ed:73:fc:
1f:b2:2e:f9:5e:fa:79:7a:6a:0f:55:cb:85:2e:3c:31:1b:e4:
09:86:fd:d7:fd:5d:6a:12:fd:14:96:cc:1e:3c:3a:f6:b8:44:
ea:f3:b1:fb:b9:0f:67:6c:57:f2:b2:da:57:4b:dc:51:29:ff:
24:53:cd:e0:77:8b:51:68:70:8e:89:37:f7:09:08:ff:ee:61:
7d:0f:b0:cd:65:73:7d:1c:01:cf:52:f7:a0:ed:2b:05:b5:bf:
bb:de:09:62:49:92:ea:ec:b8:99:db:67:87:14:96:ba:ff:c7:
cc:7c:49:f1:d0:f1:7a:11:4b:86:e2:48:0e:b3:3d:55:13:1b:
90:a5:a6:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62jhewikGOBt4QQ52xEJwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTY0N2NhY2QyMGY5NDQ3ZDA1MDUzODMzMWIxZmU3ZTA0
YzFhMjYwHhcNMjYwNjExMTIwMDI1WhcNMjYwNjEyMTIwMDI1WjAzMTEwLwYDVQQD
EygzM2U0NjQwYzVlYTdkMGU4YTlmNzMxMmI5MTgwMmM4NDcwYjEzYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTDTVNd5RmLjMCRRTKCN3Wfctzvg
CkCJ0VhtYNZN2cjg56bbQYzChCOGcwRInE28hcCNDKqvUCGp8DKoewtxCrrFr1fb
CBTvBN5fQqgeUNMwf9vOIfqZjHCRtbq/Bf/OLMPPC3i5r0A8r5rcA9XhtZ/edNIe
qyn8iimnUDxCANV3JOBjjVhv1TbpxweJdLl7H5lsO23GSPPkHJe54p0GjWtVvqif
en4SbAxplle+OpedZqIKKF6Nve4EGrar7OT6E+Okxp+Y5gPWta+Rjx602tOCUt/Q
ntKseHLRXDNaMBn2LlU5Sh8QVPEkfbF8U4R17V9FGTQl6s7YMGzW7cHZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPkZAxep9DoqfcxK5GALIRwsTr4MB8GA1UdIwQY
MBaAFPeWR8rNIPlEfQUFODMbH+fgTBomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMzQ3NDctNjU5Yi00NjcwLTg3NmMt
MjJjODg2MmJlYzFkLzEvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iMzQ3NDctNjU5Yi00NjcwLTg3NmMtMjJjODg2MmJlYzFk
LzEvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUsR6BKQ
qwtwe3HrilzK/avxl6hcUs9I1GR76Gv/YlZirr3qwkSLMQNp66mBFgpYUf8iF22Z
lJ+Qs1ghbfzHuKJtUMkzWQik/WJM+r6AfXpk0YKW9qVA8ehScG52qkYfpRYjH/c2
7niyvAUgWxRuvaobyBqBrStWJBQR7XP8H7Iu+V76eXpqD1XLhS48MRvkCYb91/1d
ahL9FJbMHjw69rhE6vOx+7kPZ2xX8rLaV0vcUSn/JFPN4HeLUWhwjok39wkI/+5h
fQ+wzWVzfRwBz1L3oO0rBbW/u94JYkmS6uy4mdtnhxSWuv/HzHxJ8dDxehFLhuJI
DrM9VRMbkKWmWg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:18 2026 by rpki-client