Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: ve639dM9Js4iiv1fA2ROPcyeLxUQLxMiKyYn/u8hZcc=
Subject key identifier: 2D:A4:04:F3:80:AD:40:5B:79:0C:E7:9E:2D:39:DD:2C:DF:EE:E9:1E
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 019D26287230CD1E008D222EC19489013A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 0A32
Signing time: Wed 25 Mar 2026 18:01:17 +0000
Manifest this update: Wed 25 Mar 2026 18:01:17 +0000
Manifest next update: Thu 26 Mar 2026 18:01:17 +0000
Files and hashes: 1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: bNZlaGUpLoV3df9QnYh+nqFuZu9bj8/BAPxJnlpHk5g=)
3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:72:30:cd:1e:00:8d:22:2e:c1:94:89:01:3a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Mar 25 18:01:17 2026 GMT
Not After : Mar 26 18:01:17 2026 GMT
Subject: CN=2da404f380ad405b790ce79e2d39dd2cdfeee91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:fd:e5:d3:9c:c7:f8:69:c3:e2:95:c4:c1:
c6:48:56:1e:b7:9c:6e:af:85:7a:13:32:2e:ba:42:
ba:ce:71:81:b9:0c:62:dd:dc:34:07:55:3c:5e:19:
d6:aa:9b:79:c6:28:1c:49:0e:c6:d1:ef:03:60:44:
49:f9:0b:c0:72:25:0a:37:bf:97:28:98:b3:6e:56:
9d:67:21:5f:05:de:d0:f8:12:8e:62:2a:f3:5e:3c:
b0:38:5b:78:74:ff:b8:6c:95:54:be:dd:bf:8b:bd:
53:83:3e:04:14:4c:36:4b:02:8d:fd:e3:39:aa:eb:
40:0d:ed:b8:04:73:89:1d:5c:cb:12:96:b8:08:d5:
28:2c:d2:2e:33:ca:c5:5d:a4:dc:cf:ef:64:fc:e9:
ae:aa:e3:d9:db:e8:75:81:c1:22:f4:8d:ec:02:26:
73:73:90:52:93:82:b3:b0:ef:3d:9f:ac:a3:c2:0c:
50:1c:23:24:7e:2a:af:bd:94:cc:ad:8d:2c:14:37:
81:73:38:a8:07:b4:d8:37:1f:79:c3:26:79:46:cc:
7d:61:0a:0f:b6:eb:9e:59:6a:d6:6d:68:ca:1d:cd:
fd:91:d3:53:3f:18:cd:25:cb:7c:b8:aa:84:89:d0:
89:3e:24:7c:d5:f6:43:e2:14:71:f2:76:3c:98:fe:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:04:F3:80:AD:40:5B:79:0C:E7:9E:2D:39:DD:2C:DF:EE:E9:1E
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a4:22:e0:a1:51:de:c4:82:64:a9:11:f9:c1:32:9e:dc:3a:
7e:6b:4e:4b:89:6b:3d:11:ad:8f:97:56:48:12:7d:d5:3c:27:
ed:50:02:7f:57:b3:e3:f2:be:d8:83:73:2e:3a:c0:cd:6d:5a:
cc:ce:43:c3:90:87:96:36:e3:6f:ec:88:7b:be:41:85:20:97:
74:55:4e:bf:97:34:08:5d:4e:aa:1e:d7:79:de:3a:1d:36:4a:
16:b6:3b:7b:57:08:4e:cc:ce:6f:fb:10:e7:9f:c1:61:7b:31:
b3:55:b9:92:8f:86:0a:e0:67:8b:94:7e:56:41:3f:d9:91:36:
52:9c:78:a8:80:4c:1f:50:8f:5c:49:86:6a:9b:61:ab:88:a2:
3c:73:92:8c:47:80:bc:95:57:74:8d:32:d5:86:79:cb:f7:3d:
e2:fb:4c:cc:3f:d6:b7:f5:60:fd:65:02:66:a0:72:12:29:73:
cb:06:a0:f9:31:a3:fa:76:62:ce:d7:dd:cb:16:9c:a2:01:77:
e1:26:63:ff:8d:da:5a:f1:8d:e0:37:61:97:01:90:e1:e8:5e:
78:b1:f8:83:bf:18:6a:ee:34:62:73:ed:f6:13:18:2e:31:06:
14:45:b2:3f:54:75:b8:9b:8c:2f:34:a8:03:bb:e1:d0:b9:a1:
1a:48:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:57 2026 by rpki-client