Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: DuQL9Nor/eMY0WjD3zJfz6v+06tUOsHrotj6i1VrWbk=
Subject key identifier: 2A:16:A7:E2:DC:D8:B1:23:A6:19:88:4B:AC:90:B1:B3:AD:D0:2A:E2
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01A1DF150DF4D624E9B4C2C774A6D831FC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 117C
Signing time: Sun 15 Nov 2026 12:01:01 +0000
Manifest this update: Sun 15 Nov 2026 12:01:01 +0000
Manifest next update: Mon 16 Nov 2026 12:01:01 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: GlL2R31VlDINaB5gdaMaGPbtRWJWgj9litym8ZpcPZs=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:0d:f4:d6:24:e9:b4:c2:c7:74:a6:d8:31:fc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Nov 15 12:01:01 2026 GMT
Not After : Nov 16 12:01:01 2026 GMT
Subject: CN=2a16a7e2dcd8b123a619884bac90b1b3add02ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:42:5f:57:29:4a:ef:31:d8:ad:10:eb:05:
46:5c:8a:46:ea:3f:c8:d6:a3:0d:ce:04:16:3c:ef:
c1:b4:32:7c:a1:7b:85:1b:09:c2:fa:4a:1c:52:60:
43:eb:2d:a7:1e:55:e6:70:48:2b:ef:39:99:97:21:
fd:3e:eb:2f:dd:b4:13:dd:f1:2b:64:4a:d2:11:d3:
ef:f0:fa:cf:14:2e:ff:d2:b3:2f:8a:15:89:9b:e7:
0e:82:52:ea:b4:59:67:5f:ba:b4:e3:19:b6:8a:ac:
6c:14:fa:65:fd:d1:84:5d:ad:0d:90:e2:80:8c:21:
74:30:6b:94:2b:3c:ad:32:15:f0:d7:0f:78:5f:fe:
d7:ef:2e:62:33:f0:b9:90:32:cb:83:78:98:a8:23:
f7:4c:5e:c5:32:f7:7d:09:d7:19:0f:51:55:62:91:
66:21:b9:66:08:7b:be:e5:28:f9:d8:f2:a2:59:6e:
e8:cb:52:c2:4e:eb:00:2b:4d:8b:8e:e1:44:56:26:
4c:2a:59:9f:13:7d:f2:ea:9d:49:ff:af:35:2b:a8:
f1:24:af:dd:77:23:01:5f:96:9e:3a:fc:c4:8e:53:
6a:a6:2e:96:43:5d:70:f3:c8:ca:d3:27:fd:1c:75:
d1:1a:dd:e9:2f:d1:da:16:5d:9c:fa:dd:70:07:da:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:A7:E2:DC:D8:B1:23:A6:19:88:4B:AC:90:B1:B3:AD:D0:2A:E2
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:58:2c:cf:21:2b:8f:8e:07:ac:7f:f4:ad:b2:e5:ee:db:46:
06:04:49:30:37:83:95:fd:ac:6e:7f:ee:4d:88:af:d2:c7:c0:
c4:12:1b:0b:e8:ed:39:37:8f:2c:ad:e0:6e:fb:8f:22:07:e5:
dc:65:87:b1:bd:59:2e:1e:9e:0b:9b:1e:4d:75:3c:fa:8d:ad:
10:2d:54:26:b4:72:c3:24:e1:e6:a3:54:2c:cc:75:93:91:1c:
3a:d7:33:39:9a:df:fb:09:ee:eb:82:a3:c3:5c:e8:20:c5:6d:
c0:9b:d6:37:85:16:1e:93:56:55:44:7a:7a:2f:fd:05:d5:dc:
4c:b6:5f:c1:22:1f:ac:2f:31:37:72:35:31:f2:55:95:1f:71:
10:31:01:6f:db:46:fa:58:56:af:f9:16:56:c3:99:d8:35:a9:
d6:26:8c:52:5b:36:3f:1b:fe:0c:88:d3:69:f3:eb:71:31:14:
27:f4:c8:3d:76:4c:5b:1a:76:5e:61:32:17:4f:5a:20:fa:cb:
74:66:fb:61:bd:a4:69:02:26:28:0d:a2:e3:75:b7:a7:70:30:
a6:44:0b:14:c8:5d:8e:56:ce:57:47:0e:ce:a1:54:38:85:5a:
4b:1f:1e:79:b7:fd:80:f2:28:ec:10:2c:89:f7:d8:ac:2f:fc:
5f:53:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:23 2026 by rpki-client