Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: ozaB4LBVanRNsAQPJwapgDvZoZjII5JI8vtG538s1xg=
Subject key identifier: 0E:70:2E:26:E2:0D:B2:68:40:6E:F6:67:F1:AF:09:D2:C5:5C:F8:20
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 01A17D3C944589F7C38D4F1A740E2FF97D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 028C
Signing time: Tue 27 Oct 2026 12:01:24 +0000
Manifest this update: Tue 27 Oct 2026 12:01:24 +0000
Manifest next update: Wed 28 Oct 2026 12:01:24 +0000
Files and hashes: 1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: JuS1yY3FGZZlXvEGDPHXGx+8tOnWLtO/JOgEXlvH6nw=)
2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:94:45:89:f7:c3:8d:4f:1a:74:0e:2f:f9:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Oct 27 12:01:24 2026 GMT
Not After : Oct 28 12:01:24 2026 GMT
Subject: CN=0e702e26e20db268406ef667f1af09d2c55cf820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:3f:43:52:76:0d:2b:c6:b2:a7:d0:02:3d:
29:81:66:2d:b9:c8:0c:e9:d1:87:44:1a:34:18:33:
69:08:7f:01:00:04:68:d9:2f:1c:91:bb:a7:71:22:
e5:55:70:f5:9b:ed:16:b0:e5:6c:aa:d2:e1:79:fd:
df:ab:d8:e7:dc:10:56:a7:db:3b:5e:b5:49:0c:01:
a0:31:2b:6a:cd:3b:15:5b:57:bc:6b:b9:a1:03:99:
a5:ba:6e:92:1d:c4:bc:36:bc:91:a6:a6:15:22:2a:
06:5e:8b:23:3b:49:9f:9c:57:23:72:43:86:20:82:
b8:a5:90:19:9b:0e:c3:23:0b:08:40:ce:7a:85:c9:
3e:56:2e:fc:b9:57:96:1e:d9:12:f9:d8:b2:37:9b:
b7:bf:87:8e:a2:29:c1:1e:ae:24:91:4a:a4:b7:ac:
6c:70:06:17:6e:87:e3:aa:f3:0c:ec:df:86:ad:75:
7e:ac:c3:81:fe:5b:e9:a2:98:da:6a:30:09:2e:51:
1d:e9:b3:73:89:24:11:ce:97:3c:ee:7d:6e:44:57:
74:70:fe:c9:58:22:2f:06:32:b6:f7:3e:80:b8:e3:
0b:1e:fc:84:10:8f:3f:db:b6:29:47:ed:b9:8f:e0:
cc:e0:d5:5b:28:f8:6e:3d:29:ee:85:eb:00:ab:bc:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:2E:26:E2:0D:B2:68:40:6E:F6:67:F1:AF:09:D2:C5:5C:F8:20
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:a1:ef:cf:bf:68:8a:44:56:e0:81:e5:a6:61:54:1e:0f:
ec:e6:7a:56:34:92:41:09:03:36:2f:dd:11:cf:88:00:ae:13:
1b:86:ed:1c:a6:29:79:1e:8a:b5:e9:d1:fc:d8:34:e8:7d:10:
18:45:52:81:02:7d:24:ab:1c:77:a1:06:93:18:17:5f:bf:bb:
59:fd:f8:d4:33:a8:5d:ff:3e:d6:34:9a:f5:34:1a:bd:5f:06:
ff:95:30:8f:7b:f7:75:31:80:e0:60:6f:33:59:93:6e:74:91:
ea:79:aa:90:de:fe:89:f5:a1:2f:98:98:8e:d9:89:9e:e1:88:
9f:9f:67:d0:67:41:cd:24:d0:a7:c0:da:8c:1c:05:7d:86:33:
cb:fb:29:5e:1d:87:04:1d:15:ad:a5:e1:b7:75:45:68:1d:46:
d1:18:3b:d5:84:68:6b:06:4f:de:b7:10:4b:65:4d:0e:a2:58:
1c:1c:e4:47:e8:5f:8c:fb:f9:36:58:51:b5:b9:a8:0b:4a:fd:
f2:86:e2:51:a6:10:0d:5a:a8:20:d4:e7:c7:db:e6:2f:b8:b7:
c3:bd:db:ed:41:cc:9a:d8:05:a3:d0:3c:d2:f2:8f:85:0b:fc:
10:31:d1:c9:38:2c:72:1c:a8:3b:11:75:f1:d4:0a:2d:f8:e2:
60:b0:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:53:11 2026 by rpki-client