Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: TqZ0wdNJp0orUjfToyRLBfHkrN9YllXIyTuNBuNSAa4=
Subject key identifier: A9:16:83:F6:F5:65:55:F1:30:9C:62:1F:53:F9:18:9F:A6:2A:B2:C0
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 01A0D501E9CFF919DED19155071B3383ED34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 0242
Signing time: Thu 24 Sep 2026 20:01:07 +0000
Manifest this update: Thu 24 Sep 2026 20:01:07 +0000
Manifest next update: Fri 25 Sep 2026 20:01:07 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: HqIXuLllul8RmgwucUuhVmWT4ySvs7PtBCiQj53uYj8=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:e9:cf:f9:19:de:d1:91:55:07:1b:33:83:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Sep 24 20:01:07 2026 GMT
Not After : Sep 25 20:01:07 2026 GMT
Subject: CN=a91683f6f56555f1309c621f53f9189fa62ab2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:b7:ce:60:42:4a:87:38:7a:7d:99:91:c4:
38:9b:15:7a:e2:68:44:79:21:11:bc:72:b7:1c:78:
67:18:31:91:15:32:2e:32:62:4a:5e:f3:fc:cc:4e:
0e:4e:ef:76:d3:98:12:08:cb:80:44:37:dd:17:87:
fe:2d:c1:32:75:b5:65:82:f8:cd:47:16:ca:25:22:
ee:1f:33:df:bd:f2:79:34:3f:a4:03:2e:6a:11:36:
00:13:a9:46:50:41:64:7e:97:93:be:ad:8d:92:d8:
42:28:72:16:b9:6d:4b:64:97:98:80:7e:eb:04:5b:
47:2b:70:90:c1:44:62:0e:d7:74:f1:d8:f4:57:bd:
ee:94:9a:a4:d9:52:a3:a7:b9:d3:39:79:59:9f:44:
03:72:4f:9f:24:fe:de:a4:26:41:b7:f1:4d:d0:a5:
44:32:c3:19:7e:49:0d:24:93:28:ad:48:a2:2d:1e:
f9:2a:e4:c2:61:60:89:07:f0:4b:1a:46:06:2e:27:
99:2a:d2:89:af:5f:af:e6:26:0c:84:13:b9:65:e3:
76:ab:90:be:86:31:b4:b2:b7:fe:a3:16:48:d7:b1:
3a:76:ac:e3:c3:f5:2b:47:3e:ab:1e:71:a6:03:91:
e4:d6:fd:89:18:7e:31:54:54:18:30:88:63:66:94:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:83:F6:F5:65:55:F1:30:9C:62:1F:53:F9:18:9F:A6:2A:B2:C0
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:c8:f7:14:08:d3:ac:6b:6f:a5:01:3b:d4:40:51:b4:8e:
1f:65:16:b6:78:e0:14:9e:23:45:48:ea:1b:09:df:0d:a0:79:
9b:db:14:c8:ce:dd:b1:6e:31:43:fb:63:de:c6:eb:7e:23:9e:
79:aa:56:91:49:06:c2:da:14:d9:e4:35:83:7e:f2:85:86:02:
74:96:a2:36:4b:5e:5a:09:0b:60:62:2e:bd:5d:44:0e:05:84:
2b:0b:99:f3:d6:a0:4f:3c:09:fc:ae:ec:a1:a8:ad:e6:f3:6c:
1f:43:1d:51:99:91:48:bf:dc:3c:eb:13:7a:5c:a3:84:01:2d:
68:14:93:80:89:64:78:cc:ac:a1:c8:09:67:d0:57:e5:95:8d:
7d:f7:ef:8b:3c:50:e1:5c:8e:be:80:64:b8:95:f4:94:d6:95:
d2:4f:b5:e7:53:cb:50:4a:3a:d5:a5:56:f4:0b:b8:c2:62:21:
fe:ce:49:48:a1:59:9e:9a:71:59:6f:1d:eb:d5:f6:3d:53:32:
62:22:a0:d6:da:22:bd:56:dc:e5:1a:00:49:dd:b4:e4:c4:7e:
a7:14:b6:df:2e:3a:d4:e1:5b:21:54:5b:d6:dc:f6:98:26:b8:
7c:e0:f7:93:07:4c:fe:c3:f6:81:4c:fa:76:99:ad:cd:f0:ba:
2f:34:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:48 2026 by rpki-client