Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: n/G0wwiM0EqKHv557Pg/X9BdQf+Q6QloA3XPSgobZBs=
Subject key identifier: 4F:E3:DE:C1:B0:E0:93:34:61:FA:72:17:0F:15:58:C8:22:64:66:6A
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019E1DC753C34F73CFCE960154B12D2CF84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: DA
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: VKiLyG7HwFwNC9ldudhH0chUsgnYK6lV9jx0958cs84=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:53:c3:4f:73:cf:ce:96:01:54:b1:2d:2c:f8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=4fe3dec1b0e0933461fa72170f1558c82264666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:2c:04:ad:b8:8c:4e:c5:a3:cf:86:c9:51:
63:03:75:96:d7:88:9f:ad:a1:b2:0e:f0:37:42:f8:
3e:de:a6:56:a5:0e:e2:83:15:83:9b:64:27:7d:ca:
e6:c1:78:8d:b4:f2:71:a0:bd:ee:93:4c:fd:34:b3:
61:bb:e3:e5:04:ba:73:23:8f:c1:5c:bb:3b:cc:70:
d6:2b:a9:bd:54:ba:ba:48:f5:ff:cc:b1:27:9d:36:
54:63:1e:23:20:20:9e:da:6e:6f:3a:a2:bb:d7:a6:
f4:9c:26:d8:ab:35:7a:dd:d2:39:06:3d:66:76:f0:
f2:11:c5:f3:12:53:03:29:b0:ea:59:b6:03:48:db:
68:fa:14:c8:5b:34:dc:ad:56:a0:ad:c7:6b:0d:45:
8c:36:43:db:1f:f3:79:3d:e7:ce:15:52:b4:73:66:
95:aa:09:51:ae:40:04:29:dd:95:03:4a:30:9e:4a:
70:82:18:3c:a2:1c:69:1f:97:a2:2b:35:38:b5:6b:
58:21:ef:fd:3b:a8:19:32:b8:b9:07:c6:79:04:b4:
c3:b7:e2:fe:30:1c:65:3d:58:ec:15:d2:5b:49:a6:
fc:29:de:64:2b:2c:4e:6e:ab:26:ab:fc:11:1a:9a:
ed:31:c1:e1:b8:39:d4:6d:05:a9:7a:17:35:5c:b9:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:DE:C1:B0:E0:93:34:61:FA:72:17:0F:15:58:C8:22:64:66:6A
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:52:e1:b7:e2:a4:fd:5a:e1:75:8e:3d:34:2d:49:ce:df:36:
9e:4d:99:3c:9c:5b:1d:b3:72:e5:0f:4c:66:ac:6f:95:e2:a3:
e2:e4:41:aa:6c:c6:ac:30:b6:fe:f3:97:77:0e:9a:be:71:15:
f3:4d:76:99:0b:1c:31:1f:3a:b2:dc:7c:8c:01:09:36:da:04:
0d:c5:53:b3:e4:a3:0e:a8:79:09:01:5f:92:40:26:f3:e6:6c:
b3:21:30:04:eb:28:7e:1a:af:80:82:af:d0:11:73:8d:64:fe:
1e:a0:ac:45:5c:57:a4:dc:a3:46:cb:e9:e4:04:98:04:00:c9:
be:fd:9e:8a:00:a2:c5:b3:4a:45:cf:0f:a7:46:ce:b0:77:24:
5d:64:51:5e:92:1f:ed:63:d8:c6:a7:c2:ec:fe:95:bb:39:fc:
d8:57:90:38:47:ab:c0:d6:86:76:fe:26:c6:59:ae:d7:a6:ab:
c6:d2:13:bc:3a:3d:f9:6b:db:0d:1a:f1:8d:1a:83:fb:12:33:
cd:40:24:d0:83:f7:d4:12:83:fa:f1:aa:cd:ab:6e:7c:2b:8e:
95:03:2d:04:9f:4c:03:c0:a7:d3:dc:6e:ed:e4:93:f0:16:de:
0b:4c:9a:08:ea:22:21:98:18:c6:f6:37:5a:d1:37:b1:b4:21:
49:22:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:28 2026 by rpki-client