Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
File: 95GOL2KDAdauUZe5M-PqJb-AUBg.mft (raw, json)
Hash identifier: ZGloALik8fcj1ieB6H+sT0cHLacudRdXMz5Ecx4+0UM=
Subject key identifier: BE:82:D4:2A:73:6D:30:63:B4:D8:80:48:71:1A:5A:67:37:F2:B2:71
Authority key identifier: F7:91:8E:2F:62:83:01:D6:AE:51:97:B9:33:E3:EA:25:BF:80:50:18
Certificate issuer: /CN=f7918e2f628301d6ae5197b933e3ea25bf805018
Certificate serial: 01A0CB591DA1466A65458E1BACA298CDFB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
Manifest number: E3
Signing time: Tue 22 Sep 2026 23:00:10 +0000
Manifest this update: Tue 22 Sep 2026 23:00:10 +0000
Manifest next update: Wed 23 Sep 2026 23:00:10 +0000
Files and hashes: 1: 52TpR6t3ARWh4r2WUqOWWA4XPIs.asa (hash: 9+4CI5GbZ/xO/RNWUs5Pz6QrRhV9vaitn+UXl40n8fM=)
2: 95GOL2KDAdauUZe5M-PqJb-AUBg.crl (hash: /yGTDGPSuU3HtTmRpTYQqds/JTngVfy/i7I5SM3jjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:1d:a1:46:6a:65:45:8e:1b:ac:a2:98:cd:fb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7918e2f628301d6ae5197b933e3ea25bf805018
Validity
Not Before: Sep 22 23:00:10 2026 GMT
Not After : Sep 23 23:00:10 2026 GMT
Subject: CN=be82d42a736d3063b4d88048711a5a6737f2b271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:ca:2d:87:8a:47:31:58:78:db:5e:f8:88:
77:94:ce:1e:1c:ff:bc:5a:3a:a6:40:2f:41:60:ca:
2d:ce:a5:6f:71:41:17:a1:cf:18:8a:74:81:14:59:
85:a3:42:3b:fc:7c:d3:68:f9:20:ad:28:1d:bd:a1:
73:c6:fb:c9:cc:41:94:a8:99:ed:3e:5e:98:6c:c9:
21:5b:85:54:4d:b4:f7:69:4a:a5:a3:d9:80:89:b7:
4a:23:33:aa:41:5a:a0:46:79:a0:1a:6e:95:92:64:
8b:be:7f:a1:3f:cb:f7:d8:31:95:2d:5c:00:8b:aa:
85:86:38:67:6e:6b:da:fc:68:80:b9:81:27:a9:44:
ac:6e:db:ce:6a:ed:f8:f6:2c:e8:ba:dd:56:df:3b:
4c:42:ff:4d:56:08:66:bb:6e:c7:87:b3:40:bb:d5:
77:42:f7:7e:93:81:f8:b0:9f:2d:e3:80:1e:7a:ff:
d1:57:fe:88:88:7c:d7:b3:ee:a9:05:0f:cf:56:e2:
2f:08:c9:8c:c6:bd:d0:84:3e:53:11:84:f8:71:bd:
1c:61:46:65:56:37:08:de:cc:69:fc:b9:52:f3:44:
3f:84:e3:34:42:ce:ba:e6:4d:71:22:f7:7e:91:90:
3b:60:2a:45:81:97:03:32:10:16:d3:76:77:dd:4d:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:D4:2A:73:6D:30:63:B4:D8:80:48:71:1A:5A:67:37:F2:B2:71
X509v3 Authority Key Identifier:
keyid:F7:91:8E:2F:62:83:01:D6:AE:51:97:B9:33:E3:EA:25:BF:80:50:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95GOL2KDAdauUZe5M-PqJb-AUBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/95GOL2KDAdauUZe5M-PqJb-AUBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:cd:34:a4:ca:98:11:35:7e:4c:c9:16:24:9b:9c:8b:ea:
f3:3c:f6:a0:b7:97:f0:1b:2b:72:a4:63:71:4b:bf:bb:87:60:
f1:77:61:53:92:aa:72:c8:41:d1:b5:09:54:16:ff:ee:ba:64:
ee:32:0e:3c:81:f8:64:0d:f5:6c:64:42:86:d1:9c:a8:ed:d3:
5e:7d:11:6a:dd:78:0d:78:90:1d:73:1b:52:5f:c9:19:72:b8:
03:5b:88:0e:8c:50:ed:96:87:7e:68:3d:d3:30:f5:fe:db:31:
29:9a:8e:57:88:27:7b:69:33:6f:3a:eb:57:5e:73:ce:37:ff:
bf:be:06:ba:af:e1:81:85:5e:d6:3f:dd:57:64:14:5d:67:5a:
f2:d7:34:78:71:7e:a4:26:8b:34:11:23:8e:bb:0f:1c:45:52:
7a:30:be:a4:f8:e0:2c:7f:91:28:3f:2e:5d:59:57:54:f5:f2:
a0:0f:a5:b2:c6:9d:96:43:23:98:36:59:f5:54:8e:2b:a1:80:
6f:be:1f:cf:e0:e4:58:c8:a7:a0:a4:7b:a8:5c:8e:e3:d6:aa:
b1:dd:a3:55:67:c7:80:25:13:da:15:36:37:bb:6b:a4:b7:7d:
9c:33:1c:9e:cf:07:52:cf:08:b5:fc:be:38:1c:d6:13:f7:88:
92:3d:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:35 2026 by rpki-client