Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: 5Mrw3YanAT03/hXs6abWEPOPFBxZiyg28BNAg0HOJT8=
Subject key identifier: 96:53:FA:B7:82:6B:4F:D1:A2:E1:71:01:67:FB:86:82:50:4A:C1:13
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019DCE2BA318ADB363BAC824085C9A072C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: A3
Signing time: Mon 27 Apr 2026 09:00:59 +0000
Manifest this update: Mon 27 Apr 2026 09:00:59 +0000
Manifest next update: Tue 28 Apr 2026 09:00:59 +0000
Files and hashes: 1: 44muUChp5JRRZ63agxqoMHmu2uk.roa (hash: BUqt5hQEDJqjTZAY38OPC7Xm/4ladOgcW1BaLTx7yWI=)
2: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: sUH/SRKLurLUMr7XvlaM8q14rAPAXsjas6yTyJWwY5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:a3:18:ad:b3:63:ba:c8:24:08:5c:9a:07:2c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Apr 27 09:00:59 2026 GMT
Not After : Apr 28 09:00:59 2026 GMT
Subject: CN=9653fab7826b4fd1a2e1710167fb8682504ac113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:0a:dc:e3:ad:06:d4:03:b7:ef:6f:6d:99:
93:fa:00:85:47:4a:37:7a:a6:6d:df:88:d7:8f:74:
9c:6a:d0:9c:de:54:03:2c:f8:41:7d:bd:e9:d9:29:
6b:87:3e:1d:51:14:0a:94:bd:71:2b:3e:13:48:c1:
46:20:18:50:7f:2f:6e:46:24:51:5f:42:66:74:26:
7f:21:17:9b:4e:70:39:03:ec:a4:94:ab:06:b4:d5:
7d:b7:88:6e:93:49:e0:61:6d:c5:f0:3e:73:22:4a:
0e:2a:07:c6:21:0f:98:f5:66:36:01:54:95:cf:a3:
13:bd:02:3c:7b:4f:4f:7e:33:09:c8:78:aa:91:29:
7e:25:ce:fc:03:68:3c:28:8f:0c:1c:17:91:b4:8d:
8a:54:17:c1:3c:0e:d5:f5:5b:bd:5d:80:60:32:e7:
29:77:0a:1c:ad:04:3e:61:96:93:00:2a:f7:e0:4f:
ea:05:ea:5f:2b:0b:80:ef:8a:fa:ba:cd:0e:c2:2f:
aa:8a:0d:f3:d4:56:95:73:ca:0c:a0:5f:05:4a:cf:
fc:e9:ee:59:47:35:f4:cf:35:56:dc:4b:4b:a3:83:
c0:56:eb:67:a9:00:15:1c:b9:f2:ec:77:df:8f:93:
9f:2f:ce:95:97:54:41:71:00:ff:87:df:e1:c8:2f:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:FA:B7:82:6B:4F:D1:A2:E1:71:01:67:FB:86:82:50:4A:C1:13
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:ae:91:46:c3:ad:e2:49:ce:90:69:df:e9:ef:b8:64:43:
90:84:9d:7d:57:31:03:2d:9b:d8:56:be:7f:cc:51:9a:cb:20:
46:54:c9:5a:5f:c0:9c:56:50:cf:92:18:32:ef:42:6e:69:10:
ec:99:a5:55:16:19:a8:61:de:8a:13:d9:8d:57:dc:1d:86:1c:
8c:8e:06:80:9c:05:1b:8d:d5:d7:b0:71:cf:ab:72:7f:63:3d:
9c:04:f6:67:78:9f:63:6e:9b:18:6f:85:5c:84:0b:00:a8:6a:
58:64:3b:57:2c:3f:17:f6:8e:bb:ac:57:f5:4b:9c:97:47:8f:
34:e1:59:45:0a:92:f8:8c:d2:7c:21:56:de:fb:5f:e9:d6:f3:
89:06:e3:38:96:57:f9:3a:49:f6:8a:48:26:09:75:05:76:25:
a4:a0:ad:aa:a2:3f:d0:7c:78:8e:9b:6f:3b:0a:3f:a2:da:6b:
41:17:11:73:9e:80:f6:2b:fc:f9:0f:1c:db:84:ef:c9:c3:cc:
33:4f:a6:b9:58:1f:ba:5c:a1:e0:b3:3e:ac:e7:33:ad:4a:a2:
9e:45:e3:d4:25:06:60:69:a7:f3:27:a0:8d:2f:79:b1:43:6c:
1c:c2:e8:83:1a:e4:72:92:f2:be:e1:95:80:5c:94:56:e4:a6:
1b:39:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:13:15 2026 by rpki-client