Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: WLY9pAOU/qEHWjkz0dXFaYWfS0nX5PH6r+ZiLn4hJsI=
Subject key identifier: 05:D0:24:3A:01:34:98:40:D6:07:08:0B:91:4F:25:59:62:44:C8:4F
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 01A0CEC7F573063E4C3A09062D3687D1712D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 0C17
Signing time: Wed 23 Sep 2026 15:00:05 +0000
Manifest this update: Wed 23 Sep 2026 15:00:05 +0000
Manifest next update: Thu 24 Sep 2026 15:00:05 +0000
Files and hashes: 1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: uJgcrBPeHNIu3zedXijnhBBezKMS9p3b/IKLBzl/c80=)
3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c7:f5:73:06:3e:4c:3a:09:06:2d:36:87:d1:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Sep 23 15:00:05 2026 GMT
Not After : Sep 24 15:00:05 2026 GMT
Subject: CN=05d0243a01349840d607080b914f25596244c84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:a9:8a:55:04:0d:de:e1:92:7a:4d:80:f2:
df:52:2c:0f:61:68:c7:b5:e3:ea:fb:09:bf:16:d2:
b0:a5:b2:1e:a3:a9:aa:b8:73:5a:ad:09:d3:3a:81:
4f:d2:ad:bc:a0:d7:aa:96:64:b1:ca:31:e3:f7:fd:
45:91:41:75:61:03:92:5c:4f:23:86:f2:3a:a7:98:
ce:c6:40:2a:91:70:76:11:1f:da:a6:dd:cd:2d:47:
82:9e:9f:1e:de:d6:62:0b:a4:32:f2:b5:1b:f7:5e:
f2:22:a9:59:6e:78:0f:97:23:d6:78:6a:69:c0:4f:
36:e8:6f:b6:3e:24:d8:b1:59:32:de:ee:5d:65:01:
fd:ce:4d:af:cf:7d:b3:5c:99:e5:d5:04:08:68:ed:
d1:75:2f:57:12:59:f0:b9:df:10:9e:2b:75:17:48:
a7:7f:3f:b1:85:89:ae:f8:56:dc:3d:32:b4:67:a7:
d6:cf:0a:90:5e:d2:35:20:1a:e4:3d:48:b1:04:7b:
27:73:0c:98:40:54:a9:cc:31:b5:9e:d8:fe:1b:af:
1e:79:ba:8b:81:99:fd:e6:55:9b:60:ea:fb:f3:dc:
ef:85:47:6c:e9:5f:50:c0:7c:d6:32:1a:33:52:76:
ea:5c:47:0d:9d:43:0b:37:e9:2f:27:7c:ff:77:f3:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:24:3A:01:34:98:40:D6:07:08:0B:91:4F:25:59:62:44:C8:4F
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:b8:8d:ef:98:6e:4b:bb:bb:81:04:bf:1f:37:02:43:0d:
d5:70:9d:3c:cf:e5:9f:49:3d:c9:1b:b4:5e:61:66:b5:0e:54:
8a:d1:f4:cd:a5:bf:a1:01:ed:f9:6c:12:ef:cc:9d:39:8f:9f:
69:13:ed:91:8d:3d:f3:0b:81:d1:70:68:6e:50:9c:de:07:ad:
b4:0e:9e:81:15:6a:1c:04:db:5a:20:90:62:32:c2:70:4e:c8:
68:bd:95:8f:5b:6f:16:b3:73:06:c8:6a:e1:07:72:2d:dd:ea:
d1:42:72:47:88:21:d8:f3:67:3e:78:a1:89:59:28:78:16:5f:
b5:5e:88:a9:8e:14:1b:8c:c8:42:fe:df:74:7b:87:63:44:2a:
7c:b4:4f:82:22:c4:4d:bc:da:1b:b5:90:83:60:62:91:a5:93:
b6:06:7f:75:e3:d8:96:86:8c:fe:ac:8a:b4:ca:8d:86:06:b0:
fe:fd:0d:a3:4c:db:58:ca:2b:a8:b8:77:19:50:75:4f:2a:55:
7d:42:f5:d8:22:82:8a:5d:b9:2a:ef:a9:62:f9:67:3e:56:e0:
b3:8e:8b:c8:1c:17:98:73:69:55:9d:85:73:82:6e:e0:63:ff:
b1:eb:5a:1b:31:79:45:ed:69:1a:d8:00:5b:45:a5:e6:b5:2a:
c9:08:ae:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOx/VzBj5MOgkGLTaH0XEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjYwOTIzMTUwMDA1WhcNMjYwOTI0MTUwMDA1WjAzMTEwLwYDVQQD
EygwNWQwMjQzYTAxMzQ5ODQwZDYwNzA4MGI5MTRmMjU1OTYyNDRjODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTKpilUEDd7hknpNgPLfUiwPYWjH
tePq+wm/FtKwpbIeo6mquHNarQnTOoFP0q28oNeqlmSxyjHj9/1FkUF1YQOSXE8j
hvI6p5jOxkAqkXB2ER/apt3NLUeCnp8e3tZiC6Qy8rUb917yIqlZbngPlyPWeGpp
wE826G+2PiTYsVky3u5dZQH9zk2vz32zXJnl1QQIaO3RdS9XElnwud8Qnit1F0in
fz+xhYmu+FbcPTK0Z6fWzwqQXtI1IBrkPUixBHsncwyYQFSpzDG1ntj+G68eebqL
gZn95lWbYOr789zvhUds6V9QwHzWMhozUnbqXEcNnUMLN+kvJ3z/d/PDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXQJDoBNJhA1gcIC5FPJVliRMhPMB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk+4je+Y
bku7u4EEvx83AkMN1XCdPM/ln0k9yRu0XmFmtQ5UitH0zaW/oQHt+WwS78ydOY+f
aRPtkY098wuB0XBoblCc3gettA6egRVqHATbWiCQYjLCcE7IaL2Vj1tvFrNzBshq
4QdyLd3q0UJyR4gh2PNnPnihiVkoeBZftV6IqY4UG4zIQv7fdHuHY0QqfLRPgiLE
TbzaG7WQg2BikaWTtgZ/dePYloaM/qyKtMqNhgaw/v0No0zbWMorqLh3GVB1TypV
fUL12CKCil25Ku+pYvlnPlbgs46LyBwXmHNpVZ2Fc4Ju4GP/setaGzF5Re1pGtgA
W0Wl5rUqyQiuAA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:16 2026 by rpki-client