Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
File: 95oZ9K73GkZgAf14WRQqjibz7v8.mft (raw, json)
Hash identifier: 6BWR9duD15a/0TKYtZlSHJ13DS0wzP2LwhcZ8t5vJ4E=
Subject key identifier: A9:01:28:D8:89:13:5D:79:EA:79:5C:F7:40:85:57:00:7C:28:13:1D
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019D269677063E87B387BB876EC96694FB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
Manifest number: 5A
Signing time: Wed 25 Mar 2026 20:01:28 +0000
Manifest this update: Wed 25 Mar 2026 20:01:28 +0000
Manifest next update: Thu 26 Mar 2026 20:01:28 +0000
Files and hashes: 1: 95oZ9K73GkZgAf14WRQqjibz7v8.crl (hash: wyvKt13pItsul3nA0nDKmgl6fMJAveRgb+W8Ty6PUeQ=)
2: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (hash: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:77:06:3e:87:b3:87:bb:87:6e:c9:66:94:fb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Mar 25 20:01:28 2026 GMT
Not After : Mar 26 20:01:28 2026 GMT
Subject: CN=a90128d889135d79ea795cf7408557007c28131d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:31:66:c3:c0:c2:49:1c:58:e2:43:63:12:
10:e5:44:00:ef:8b:3d:43:32:3f:94:4d:98:90:78:
8c:c8:15:f8:37:53:49:bb:eb:cf:33:16:df:c0:a5:
54:a9:26:55:c8:6f:0b:30:8c:fc:b7:c2:c0:1d:29:
8b:8a:03:dd:98:30:44:e6:9c:a4:d8:38:c4:7d:2f:
fd:53:0d:12:db:f2:b0:b7:1e:97:c1:6a:24:a0:cc:
83:e2:3c:0e:4b:13:76:00:61:5f:50:0c:9b:99:e5:
f8:93:7f:17:2d:50:cf:4b:76:e1:a4:c6:fb:e5:5a:
a9:61:3e:eb:06:b7:8a:ec:36:11:2d:58:f2:3a:78:
ed:35:cb:ad:99:84:3c:c4:55:9c:76:82:3c:e1:8e:
04:29:72:48:23:d3:99:fc:84:21:01:15:d7:a4:24:
92:e2:e0:5a:0b:81:e3:91:ce:e0:cf:4a:d4:52:c2:
59:34:af:32:33:3b:f3:07:9f:68:23:6a:cd:37:e0:
95:69:ef:aa:d8:3e:5c:24:67:8a:e0:68:29:2e:ba:
d4:3f:4a:c6:70:d3:e5:4d:30:e8:e3:c7:f8:8b:58:
46:09:ea:97:89:8e:27:f8:15:19:80:23:4e:c0:0f:
b8:51:2d:f5:a8:3a:d1:73:6b:25:fe:a1:24:c3:e3:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:01:28:D8:89:13:5D:79:EA:79:5C:F7:40:85:57:00:7C:28:13:1D
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:be:fc:a9:e5:8d:24:61:8c:06:77:61:a5:8a:c1:e1:bb:
e5:95:6c:38:c2:0a:17:a9:c8:00:da:a1:f6:97:a5:25:9a:a3:
7f:70:7e:cb:ba:ce:7a:55:0e:f6:5d:e0:8d:da:18:1a:0f:03:
e2:72:e4:a8:f9:a3:d9:51:42:bd:a4:30:f5:da:53:5e:cc:39:
2c:d2:f4:15:18:69:d2:9b:7c:33:2f:67:a1:2f:3b:3f:1c:02:
57:a3:25:72:cb:f6:5a:25:e2:ac:a3:d0:ba:b7:8d:8d:b9:ca:
07:fe:3a:60:f2:18:f1:c4:b5:28:c3:68:33:aa:cd:b1:02:e9:
b3:f5:cf:6c:fb:c6:a9:b8:b0:85:d5:53:09:76:b4:ae:51:02:
93:c5:ff:8f:fc:73:da:64:ab:9f:c0:52:62:df:2a:be:ea:a2:
1b:a1:41:8e:1f:bb:e5:32:b5:89:f6:4e:2a:db:de:4f:21:20:
f9:6c:cb:56:6c:47:ef:1d:d8:e8:69:59:eb:35:d7:fd:b4:25:
2f:4b:bb:68:f1:60:6a:bc:37:97:2a:79:d6:59:4b:67:3a:18:
98:56:a0:0f:0b:ef:26:66:59:63:b5:6e:1d:e4:04:a3:3c:5b:
bb:cc:e9:50:f4:05:d0:f5:a8:d3:0f:7d:6a:e1:e4:2b:26:38:
49:bc:a5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlncGPoezh7uHbslmlPtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWExOWY0YWVmNzFhNDY2MDAxZmQ3ODU5MTQyYThlMjZm
M2VlZmYwHhcNMjYwMzI1MjAwMTI4WhcNMjYwMzI2MjAwMTI4WjAzMTEwLwYDVQQD
EyhhOTAxMjhkODg5MTM1ZDc5ZWE3OTVjZjc0MDg1NTcwMDdjMjgxMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1gxZsPAwkkcWOJDYxIQ5UQA74s9
QzI/lE2YkHiMyBX4N1NJu+vPMxbfwKVUqSZVyG8LMIz8t8LAHSmLigPdmDBE5pyk
2DjEfS/9Uw0S2/Kwtx6XwWokoMyD4jwOSxN2AGFfUAybmeX4k38XLVDPS3bhpMb7
5VqpYT7rBreK7DYRLVjyOnjtNcutmYQ8xFWcdoI84Y4EKXJII9OZ/IQhARXXpCSS
4uBaC4Hjkc7gz0rUUsJZNK8yMzvzB59oI2rNN+CVae+q2D5cJGeK4GgpLrrUP0rG
cNPlTTDo48f4i1hGCeqXiY4n+BUZgCNOwA+4US31qDrRc2sl/qEkw+NdBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkBKNiJE1156nlc90CFVwB8KBMdMB8GA1UdIwQY
MBaAFPeaGfSu9xpGYAH9eFkUKo4m8+7/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZmQ1NDMtZTQxMy00ODg1LThkNTkt
YzBjYjgyN2ZkN2YzLzEvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zZmQ1NDMtZTQxMy00ODg1LThkNTktYzBjYjgyN2ZkN2Yz
LzEvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ++/Knl
jSRhjAZ3YaWKweG75ZVsOMIKF6nIANqh9pelJZqjf3B+y7rOelUO9l3gjdoYGg8D
4nLkqPmj2VFCvaQw9dpTXsw5LNL0FRhp0pt8My9noS87PxwCV6Mlcsv2WiXirKPQ
ureNjbnKB/46YPIY8cS1KMNoM6rNsQLps/XPbPvGqbiwhdVTCXa0rlECk8X/j/xz
2mSrn8BSYt8qvuqiG6FBjh+75TK1ifZOKtveTyEg+WzLVmxH7x3Y6GlZ6zXX/bQl
L0u7aPFgarw3lyp51llLZzoYmFagDwvvJmZZY7VuHeQEozxbu8zpUPQF0PWo0w99
auHkKyY4Sbyl1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:46 2026 by rpki-client