Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: vUpuClnFcK6GX5SyJsPjiJvbWnHgrDN9D7z0QWo1rV4=
Subject key identifier: 0C:54:D2:F8:CE:D0:20:40:B4:83:50:9D:BC:C3:CF:B9:3F:E5:D7:FE
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019F90914D4733C1B5A5A5DF41A62B9FEF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 019A
Signing time: Thu 23 Jul 2026 20:01:09 +0000
Manifest this update: Thu 23 Jul 2026 20:01:09 +0000
Manifest next update: Fri 24 Jul 2026 20:01:09 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: tUgdO3kfp+5tS1mCTbMAuLs6/SES696OGiTGBZC28L0=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:4d:47:33:c1:b5:a5:a5:df:41:a6:2b:9f:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Jul 23 20:01:09 2026 GMT
Not After : Jul 24 20:01:09 2026 GMT
Subject: CN=0c54d2f8ced02040b483509dbcc3cfb93fe5d7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:b6:dc:41:b6:19:2c:f7:29:7b:63:6a:68:
4f:63:2d:5f:66:15:29:ce:a3:4a:5b:d4:09:7b:7c:
b7:ac:00:c9:b2:98:72:a4:aa:24:1b:1d:ac:ab:7f:
0f:8a:52:e2:4b:ff:69:4e:ea:01:58:29:77:4e:dd:
de:ed:e7:b1:b7:94:13:19:10:43:26:b0:ad:19:9d:
e1:a9:4e:1d:01:ce:a1:5f:4a:d2:63:03:0e:d8:e3:
1f:78:55:5c:15:fc:da:77:ad:f0:56:66:f5:76:c4:
6d:14:46:57:b6:3c:da:90:f3:27:b9:70:84:75:fd:
09:72:fc:14:98:bd:ba:99:65:75:95:d9:26:4a:b0:
54:42:c2:65:a0:97:98:62:61:f0:77:2e:32:6c:22:
8f:a2:6e:d2:ae:af:6e:21:04:4b:b9:da:d9:95:17:
45:16:33:19:1e:33:f4:c2:b1:ee:af:d2:93:9f:f9:
77:ec:15:db:cd:9f:ea:12:08:9d:bd:0c:29:cc:4b:
dc:bd:39:74:e1:43:bd:5b:10:60:67:18:a8:71:a7:
84:c2:f4:95:5f:0e:80:44:98:4b:4d:f1:eb:63:eb:
51:0c:3d:a6:45:01:61:c1:08:2a:c5:ab:83:58:95:
bc:80:7f:af:18:b2:28:61:fd:9e:73:fb:9e:45:78:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:54:D2:F8:CE:D0:20:40:B4:83:50:9D:BC:C3:CF:B9:3F:E5:D7:FE
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:39:01:85:1b:0c:a4:12:c2:0f:8e:60:5c:da:e9:ad:8c:b3:
80:c4:39:24:52:96:78:b8:cd:cf:91:5b:ec:64:bc:8f:0f:18:
8a:c8:d2:35:59:75:39:1e:34:d3:5d:be:b9:99:c6:5a:1e:2c:
24:22:de:b0:15:36:45:9f:3b:56:99:a9:e9:e8:1e:0f:7a:c3:
e6:b7:1c:8d:e2:27:9e:4f:27:1a:ca:4a:de:8d:ce:45:a9:bc:
fa:db:b6:7b:a8:17:d7:8f:7d:ec:45:17:b1:13:c1:ad:6e:9e:
0a:b2:5d:46:b2:5d:f1:e0:1d:4b:7c:44:63:2f:c4:b0:32:8d:
99:63:4a:07:db:04:77:59:b3:59:6d:ef:ec:06:f9:7f:9d:18:
f0:da:b2:5e:dc:e2:0b:35:ad:56:4c:fe:bf:8d:3c:31:ac:f4:
a3:dd:9e:40:c3:b6:27:5d:f1:33:f3:cd:bf:21:07:02:2e:25:
c6:90:dc:91:00:7d:94:16:73:53:2b:1b:58:e5:56:66:2f:a3:
69:99:d4:90:3a:3f:2e:32:de:46:57:db:d0:52:1c:66:9d:4c:
91:c1:75:e0:55:7a:c2:06:85:1c:81:72:c8:da:e1:03:bc:8a:
c7:99:80:93:26:45:aa:cc:d0:ec:b8:6f:27:a9:73:6c:2e:56:
a5:06:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:07 2026 by rpki-client