Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: nmg4UXmFnsD8xfg6/TGClkpbaohlUyAoXNqu19ystQw=
Subject key identifier: E2:B3:65:EA:BD:88:C2:3C:59:94:4A:DC:ED:66:66:69:25:C5:A9:79
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 019D2816D353290E73BFE1614F369CA32D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0F0B
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: OVEYn2m+rmbdP13lXbUYSAlyXZiWLbeAy/qUpKFQ8l0=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d3:53:29:0e:73:bf:e1:61:4f:36:9c:a3:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=e2b365eabd88c23c59944adced66666925c5a979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:af:34:00:01:84:26:b9:a1:3a:7f:1a:5b:
29:28:85:94:dc:ff:c3:a1:18:7f:8b:bd:99:6b:68:
1c:27:40:66:23:4d:87:99:75:fa:61:1e:f5:d5:e7:
cf:9b:88:ea:4d:9f:b9:46:fb:13:50:4c:a9:25:79:
3c:ae:23:43:6a:42:d1:74:9c:83:7d:42:3d:25:84:
75:55:4d:60:33:14:97:d7:15:7b:1a:c8:6d:56:ab:
15:0e:a1:d8:02:9a:c3:66:92:4d:95:a4:fa:ba:01:
5d:a2:a2:c7:ad:b9:64:a2:96:c5:4c:90:02:96:a4:
f2:93:7e:ce:ff:dd:a9:05:47:6a:81:38:6a:c5:57:
1e:61:cc:15:0d:0f:bf:ef:40:4c:0f:75:d0:ef:b3:
fc:7c:cc:b4:b2:76:33:95:a4:15:60:3b:c7:69:cf:
03:a4:76:76:c3:60:ac:d3:6b:4a:0d:b0:e9:b3:8d:
bc:ca:fe:20:76:f2:a1:a1:b7:40:9b:39:ba:64:29:
14:47:f3:a3:a8:62:2b:23:1a:c7:82:51:d3:86:ac:
a4:53:99:5b:2f:62:c9:33:3a:dd:7c:ea:a2:52:d9:
7b:f1:bc:f2:1c:6d:6c:28:4c:7e:bb:a8:a4:0a:d4:
c9:97:b4:57:bf:e6:fa:1a:49:d3:83:08:64:d5:4d:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:65:EA:BD:88:C2:3C:59:94:4A:DC:ED:66:66:69:25:C5:A9:79
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5e:b1:a6:f0:92:b2:b9:6b:04:a1:51:a9:9b:be:0e:88:74:
e7:21:26:3d:6f:f3:6b:77:b1:82:64:ca:39:c8:1f:8b:a5:49:
27:a2:5b:d3:09:bf:a3:a4:e1:da:db:48:eb:ae:d1:0d:24:f0:
23:fd:38:d1:bc:e5:b0:99:0a:b5:4b:38:55:7e:24:aa:13:ef:
0e:41:57:da:a4:4b:66:9c:4b:4d:75:a4:e0:21:4d:82:2c:d5:
5c:f7:30:3d:57:15:5c:48:05:10:e8:b2:a4:7b:55:eb:df:b3:
23:a0:d4:63:06:89:0d:22:49:d3:38:a4:8d:bb:b6:9f:b8:29:
ef:58:ea:73:ee:fe:a2:1a:90:84:1f:16:1b:a9:c9:a0:58:19:
7e:b5:86:6c:32:36:57:ed:56:b1:5a:5b:9e:fe:1f:cf:f5:7e:
fe:03:b8:b7:a0:95:13:02:04:95:1a:57:be:0b:17:b3:f8:35:
1f:d3:75:0f:36:09:f0:2e:12:a5:c8:81:28:1e:0f:3c:fb:08:
e4:bf:8c:89:4c:f1:ea:5c:e3:45:75:fb:7a:95:74:df:1a:e3:
e6:eb:eb:5f:29:90:8c:96:ee:74:b6:f0:12:7c:38:5b:12:41:
04:d2:6f:5d:49:77:4c:ef:ba:95:43:0c:d2:19:fd:d3:fd:d2:
ca:06:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:37 2026 by rpki-client