Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: 9rAB+naIvacb5BisILePkUbkC7TUGym4UObZZruHt98=
Subject key identifier: 2F:7F:DD:67:09:64:A2:5F:7B:61:A0:E5:4F:06:7C:3C:FF:D7:F6:35
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019F9E4C9441CE255180BC4FD8F334B9BEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 0194
Signing time: Sun 26 Jul 2026 12:00:46 +0000
Manifest this update: Sun 26 Jul 2026 12:00:46 +0000
Manifest next update: Mon 27 Jul 2026 12:00:46 +0000
Files and hashes: 1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: 80KbRtLg2GrWOrEBps8l8blxMET0Aue5YSEa0r5tcJg=)
2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:94:41:ce:25:51:80:bc:4f:d8:f3:34:b9:be:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Jul 26 12:00:46 2026 GMT
Not After : Jul 27 12:00:46 2026 GMT
Subject: CN=2f7fdd670964a25f7b61a0e54f067c3cffd7f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:09:53:05:09:c6:07:74:c5:48:72:56:e2:
f6:18:09:f1:b8:36:8d:e0:81:9f:1f:3e:a7:a4:3e:
fb:4f:fe:15:e7:2b:b7:de:88:c4:0a:68:68:b1:8b:
a4:a4:e2:92:de:cc:3a:da:74:d5:b4:b0:67:6b:70:
92:1e:2d:24:47:4f:bb:6a:24:eb:59:1b:35:fc:14:
f0:eb:b6:77:c7:52:af:d8:0d:00:f6:0e:e7:28:ae:
a0:fe:31:06:c5:bb:08:2b:64:50:2b:1e:94:f2:d2:
34:01:ab:70:27:58:a6:72:98:56:f7:79:ae:38:89:
85:bf:00:3c:df:69:08:df:97:52:91:28:f9:c9:01:
34:ed:80:5d:d8:8e:77:fa:2a:65:03:6c:ff:6a:57:
de:6a:8c:88:60:f0:8d:47:96:51:97:32:2d:1f:8d:
06:91:a6:e6:5e:84:a9:29:da:d3:ef:fc:62:b2:b1:
de:fb:b6:ba:35:74:1c:4c:8d:3a:45:30:e1:05:62:
89:d6:c7:92:5e:7f:52:17:a7:43:3a:54:8b:0e:9f:
29:48:bd:07:a9:4c:80:48:ca:e4:5d:d0:47:d5:fe:
a7:4e:62:a6:aa:53:02:8d:5c:72:4e:d4:17:33:60:
ec:2f:2f:1d:7c:5e:f0:c4:02:a2:06:c4:51:5c:0d:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7F:DD:67:09:64:A2:5F:7B:61:A0:E5:4F:06:7C:3C:FF:D7:F6:35
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:8a:e2:cb:26:eb:47:d5:67:2c:f3:1e:d9:36:22:b3:5c:
01:dc:cb:ff:28:28:5f:94:88:27:6c:99:4f:3d:a1:86:e6:44:
27:16:5c:8f:47:0a:e7:04:57:4b:50:ee:10:87:9a:6b:73:cb:
50:fc:d7:9b:60:59:28:4d:54:0e:d6:98:6b:06:71:8b:d6:34:
d9:55:3e:73:97:ea:6b:b4:52:17:56:a3:9d:9a:d0:aa:90:53:
ac:16:14:55:b8:4d:e2:91:87:81:56:3b:78:e5:cb:89:04:76:
02:9e:89:bf:ac:59:0e:bc:0c:8d:85:e6:d7:b1:44:47:31:3c:
35:d3:75:ee:6a:63:62:5c:4f:3f:69:ff:25:79:2c:b6:d6:8c:
83:d3:c2:f8:02:4c:6f:63:48:69:c5:0e:6b:74:f8:b4:e4:3b:
3e:4c:cc:4e:40:ae:53:b2:96:4c:c0:76:a0:a1:da:a0:33:65:
22:b5:68:e7:cf:e3:fc:d9:7f:a6:1f:4d:aa:6d:60:38:89:1d:
c0:cd:88:9e:29:4e:10:04:43:3f:e2:39:15:5a:73:96:d6:37:
59:23:2b:64:16:a5:b8:e3:17:90:eb:40:73:35:d0:20:85:9c:
35:f3:ba:71:46:3e:c1:15:ed:2b:11:53:d0:57:e0:eb:fa:bd:
a6:0a:15:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eTJRBziVRgLxP2PM0ub7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTY0N2NhY2QyMGY5NDQ3ZDA1MDUzODMzMWIxZmU3ZTA0
YzFhMjYwHhcNMjYwNzI2MTIwMDQ2WhcNMjYwNzI3MTIwMDQ2WjAzMTEwLwYDVQQD
EygyZjdmZGQ2NzA5NjRhMjVmN2I2MWEwZTU0ZjA2N2MzY2ZmZDdmNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpQJUwUJxgd0xUhyVuL2GAnxuDaN
4IGfHz6npD77T/4V5yu33ojECmhosYukpOKS3sw62nTVtLBna3CSHi0kR0+7aiTr
WRs1/BTw67Z3x1Kv2A0A9g7nKK6g/jEGxbsIK2RQKx6U8tI0AatwJ1imcphW93mu
OImFvwA832kI35dSkSj5yQE07YBd2I53+iplA2z/alfeaoyIYPCNR5ZRlzItH40G
kabmXoSpKdrT7/xisrHe+7a6NXQcTI06RTDhBWKJ1seSXn9SF6dDOlSLDp8pSL0H
qUyASMrkXdBH1f6nTmKmqlMCjVxyTtQXM2DsLy8dfF7wxAKiBsRRXA0ZswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9/3WcJZKJfe2Gg5U8GfDz/1/Y1MB8GA1UdIwQY
MBaAFPeWR8rNIPlEfQUFODMbH+fgTBomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMzQ3NDctNjU5Yi00NjcwLTg3NmMt
MjJjODg2MmJlYzFkLzEvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iMzQ3NDctNjU5Yi00NjcwLTg3NmMtMjJjODg2MmJlYzFk
LzEvOTVaSHlzMGctVVI5QlFVNE14c2Y1LUJNR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPuK4ssm
60fVZyzzHtk2IrNcAdzL/ygoX5SIJ2yZTz2hhuZEJxZcj0cK5wRXS1DuEIeaa3PL
UPzXm2BZKE1UDtaYawZxi9Y02VU+c5fqa7RSF1ajnZrQqpBTrBYUVbhN4pGHgVY7
eOXLiQR2Ap6Jv6xZDrwMjYXm17FERzE8NdN17mpjYlxPP2n/JXksttaMg9PC+AJM
b2NIacUOa3T4tOQ7PkzMTkCuU7KWTMB2oKHaoDNlIrVo58/j/Nl/ph9Nqm1gOIkd
wM2InilOEARDP+I5FVpzltY3WSMrZBaluOMXkOtAczXQIIWcNfO6cUY+wRXtKxFT
0Ffg6/q9pgoVQQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:38:19 2026 by rpki-client