
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: o6Qr+s+rT7OciEFj/tljV/xY4iJ6xm2waRMfuGOY+VM=
Subject key identifier: 1D:F5:D9:09:26:4A:67:55:F0:59:11:23:7A:39:B5:84:BB:AA:CA:E9
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 019E1D5990CC9AE8B0FBAB9C1EE11656D8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0F8A
Signing time: Tue 12 May 2026 18:01:09 +0000
Manifest this update: Tue 12 May 2026 18:01:09 +0000
Manifest next update: Wed 13 May 2026 18:01:09 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: NrX+pX1c8tpdJe5LWnyQZ2dB+QiExEjvmRQVjrqSpl0=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:90:cc:9a:e8:b0:fb:ab:9c:1e:e1:16:56:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: May 12 18:01:09 2026 GMT
Not After : May 13 18:01:09 2026 GMT
Subject: CN=1df5d909264a6755f05911237a39b584bbaacae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:f4:34:e0:53:d0:2f:e3:6b:c7:3e:40:3b:
98:a2:72:a2:e2:e3:81:72:7f:ba:9b:20:bc:99:7e:
a1:9d:dd:ed:5b:3b:a1:7b:76:0c:a2:9b:f5:95:a0:
03:ce:cc:a8:18:bf:37:99:56:b5:cb:bb:ad:6e:87:
3e:42:76:b9:32:48:54:71:99:76:7c:8f:93:6d:97:
45:09:c6:2f:8e:91:d4:9e:a9:bf:d7:5e:ec:76:52:
e7:9c:fa:ab:18:29:33:b8:fc:78:2c:40:c7:de:32:
ab:32:07:88:0a:9b:31:19:0b:00:da:87:8b:9c:6c:
01:35:48:55:16:82:58:2a:41:7b:07:ba:ca:ea:d5:
b3:48:a7:64:c9:a0:94:d3:0d:7c:f5:29:c5:bc:66:
8f:56:3f:3e:ea:dd:d9:b5:00:d7:e1:70:41:df:1b:
a6:4a:79:32:23:97:55:aa:33:93:64:b0:1c:49:31:
c3:cd:88:c6:05:76:bb:ce:b6:ad:63:9d:72:31:16:
2b:ac:69:74:76:93:6f:94:4a:46:13:8e:03:2e:22:
3d:32:31:35:01:9e:a9:3b:9a:c7:88:a9:d3:16:42:
97:d7:21:7e:32:33:a2:28:7f:f5:77:a1:9d:f0:c8:
9a:a8:3f:cf:1b:bf:e5:a0:73:0f:9c:59:a8:d2:69:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:D9:09:26:4A:67:55:F0:59:11:23:7A:39:B5:84:BB:AA:CA:E9
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:27:9f:0c:ec:61:38:20:d9:bf:64:36:8a:de:53:37:d0:f7:
15:4b:82:3f:5c:a0:f0:c0:b3:d7:70:81:1f:6f:f4:9f:b9:eb:
ac:9a:29:d0:f6:e5:b0:2a:70:39:6e:11:52:8a:08:a8:32:f5:
33:2c:db:95:7b:65:2d:df:2a:96:b2:f8:ac:c7:f0:ed:0b:a2:
7a:63:88:c0:59:02:07:6b:67:21:b0:45:6b:74:f0:ac:09:70:
97:8a:ef:2a:c0:53:cf:09:1a:3b:35:2e:1a:80:cb:eb:f1:8c:
03:28:29:63:98:46:c4:27:4f:b6:3d:0e:9f:98:b7:49:62:8e:
a9:ca:b0:e6:d2:4f:1b:5c:62:02:00:2a:da:55:cc:5b:3e:76:
05:bf:19:74:5b:f6:01:72:f9:50:01:1e:5f:08:98:a9:5b:dc:
91:39:c5:17:47:52:b9:d8:66:d1:8e:ca:fb:68:ac:df:b0:b8:
e7:00:f1:ef:44:36:86:6a:45:0f:40:bd:16:7d:41:38:b2:25:
d1:e8:a5:42:43:64:33:98:80:d0:fb:87:3e:d6:16:8b:51:2f:
7a:ff:b7:28:dc:4c:de:4c:58:66:69:46:39:41:d9:01:c5:29:
35:f3:9f:ed:d1:51:26:8a:cc:55:2b:3f:ec:0e:09:0a:4c:67:
15:59:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:23 2026 by rpki-client