Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: ueyfbdpvnfdpZQxAXynfoE+y4r5/ACZEJhTMmFkIm6g=
Subject key identifier: 6A:C5:46:E0:38:F0:66:BF:85:91:A2:4C:23:66:5D:B0:06:EF:3C:CE
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 019E1D5952BF13E8C83D4DBDC52BCD8549F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 0AB2
Signing time: Tue 12 May 2026 18:00:53 +0000
Manifest this update: Tue 12 May 2026 18:00:53 +0000
Manifest next update: Wed 13 May 2026 18:00:53 +0000
Files and hashes: 1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: RfsTmOhE+RptlVg+hDILAl/RBZYTj4aaxkL55Oc86UI=)
3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:52:bf:13:e8:c8:3d:4d:bd:c5:2b:cd:85:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: May 12 18:00:53 2026 GMT
Not After : May 13 18:00:53 2026 GMT
Subject: CN=6ac546e038f066bf8591a24c23665db006ef3cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:49:0b:48:37:ca:24:1b:b1:12:86:30:de:
39:46:d0:60:27:e1:ca:11:be:d4:6c:c4:08:b2:ae:
42:72:a9:80:97:63:0c:74:3f:a7:84:d7:35:9f:ab:
98:84:50:48:74:7a:f2:4b:75:96:01:2e:d9:a9:12:
53:40:15:be:60:90:ae:7d:79:46:f5:79:b4:28:b1:
5c:10:b1:d2:fb:32:7e:a1:cf:9e:98:5e:91:bd:8f:
8c:b9:a7:20:2c:3a:3e:04:79:0f:b7:21:33:6f:27:
99:60:4f:02:5e:3c:b8:1a:54:1b:2b:38:64:8a:4c:
61:db:e3:58:95:1f:7c:af:b3:de:5c:5a:1f:f2:47:
a6:17:09:8d:98:ab:11:0f:27:2e:10:68:a9:54:d8:
c8:91:97:9d:f9:2a:04:8b:92:de:4c:ba:3b:b9:b4:
16:b3:f4:9e:4c:0f:ae:ed:f0:62:73:91:01:e8:58:
71:2c:9f:3e:18:a5:d7:de:85:e3:3f:ab:8e:8b:ab:
fc:2b:63:44:56:09:da:3a:cb:cd:7d:53:7f:fc:d3:
30:81:e7:91:40:fe:9e:d5:e9:65:3e:17:25:e9:9e:
6e:d0:7e:61:97:14:07:d6:7d:9d:1b:3b:68:9d:a4:
39:68:88:4a:b9:7b:b5:81:48:65:4b:7b:0d:1e:14:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:46:E0:38:F0:66:BF:85:91:A2:4C:23:66:5D:B0:06:EF:3C:CE
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:c9:4f:d1:df:4b:76:7f:9f:a3:15:83:f7:76:08:19:39:
ca:61:c8:d7:8c:93:0a:51:9b:d7:b5:a9:6f:33:3b:dc:31:1c:
81:33:bf:79:6a:2e:81:6b:be:0b:05:7d:0a:8d:c0:1c:86:75:
81:75:55:31:6d:6c:df:ac:d9:7b:d0:36:ce:0e:1e:a1:a7:7a:
3d:9e:ed:bc:b4:dc:68:34:0d:c6:20:51:1a:5b:16:3b:20:d9:
11:e9:04:ce:02:8a:30:93:c4:c1:35:b2:ec:3f:52:20:04:f1:
04:8a:80:3c:a6:9e:f8:2d:03:8a:b9:2d:42:b0:6a:76:c1:35:
c5:39:34:62:18:50:43:44:8a:30:16:71:e9:68:c7:25:b8:79:
17:54:c9:71:4f:33:31:a1:8d:c0:56:25:6a:40:e7:24:13:67:
d5:5d:1d:e5:97:f4:83:ae:ce:66:d4:3d:47:1f:97:2c:fe:b6:
69:b6:b2:34:a5:09:26:b1:3b:3f:f4:f6:89:17:0e:5d:18:40:
c2:c5:d7:89:36:dd:8c:55:b2:4a:5b:72:e2:66:11:fc:16:b5:
08:80:58:34:b6:0a:43:b1:56:1b:13:11:07:e1:c4:d2:34:30:
52:85:15:a6:02:23:a6:c5:93:a6:59:b0:cf:b8:f8:db:9f:5b:
df:83:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:10 2026 by rpki-client