Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: 3zrzyRJMQ504HJrwBEw1zNtMg54XMvmQY7QCH/kFaCY=
Subject key identifier: FF:8C:0E:93:14:E8:72:51:70:40:84:A1:C4:EF:69:FB:F9:F2:6C:D1
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01A0CAEB3E92BF8BFEED59D0A92497560B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 10ED
Signing time: Tue 22 Sep 2026 21:00:09 +0000
Manifest this update: Tue 22 Sep 2026 21:00:09 +0000
Manifest next update: Wed 23 Sep 2026 21:00:09 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: vZj2KHG7qnNaSTztfmBoD4D3oQ4sTvdQjgXPET2+fLw=)
2: MLYNkRRQ88o0jRLfUL-66Ts7owk.roa (hash: 1qOMlKH7FctGbFfwx8gGNyhgQRBsMDafuOc9je+w+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:3e:92:bf:8b:fe:ed:59:d0:a9:24:97:56:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Sep 22 21:00:09 2026 GMT
Not After : Sep 23 21:00:09 2026 GMT
Subject: CN=ff8c0e9314e87251704084a1c4ef69fbf9f26cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:fc:4d:92:f5:41:06:1d:f5:0f:2f:d7:1e:
e6:41:93:ef:59:6e:5e:df:72:89:c7:cc:c0:3d:0f:
a8:d2:68:d5:00:54:f8:53:8d:bf:f2:1f:e6:aa:49:
fb:f6:76:dd:0b:31:5c:85:05:4f:15:5c:ec:92:a1:
47:22:31:3a:63:c2:8d:84:21:73:4b:df:a3:21:6b:
96:2e:df:2e:2e:59:9c:f5:39:24:5f:58:6d:e1:a0:
a8:fe:eb:8b:f4:e7:1d:7b:24:fc:d6:18:4c:c8:87:
98:a9:db:ff:3e:f1:93:7d:e7:87:b3:fc:35:f1:b0:
e6:9e:bb:8e:34:23:b4:e7:ba:85:28:6c:08:bf:1f:
e5:ea:2b:c4:2c:98:4e:5e:5d:d6:a6:cc:4e:2c:c6:
3b:09:40:83:62:01:58:35:9b:76:79:96:83:5b:0c:
83:80:d1:91:1f:19:f2:6a:af:4f:44:55:44:97:fa:
b0:46:8e:86:87:35:11:12:26:55:13:30:fd:d8:e9:
39:64:fa:f8:fa:40:4a:57:ac:d2:af:b4:fa:24:e6:
aa:60:83:e8:83:f2:c3:64:36:66:ae:38:55:36:73:
0c:b3:94:c9:41:56:b6:b2:25:d7:d2:70:f1:dc:ed:
da:2c:88:5e:54:45:7e:a6:31:26:50:65:c2:34:af:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:0E:93:14:E8:72:51:70:40:84:A1:C4:EF:69:FB:F9:F2:6C:D1
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a7:1a:6c:cb:fa:38:10:cb:c0:e0:63:63:5c:5a:80:b4:9b:
49:1b:91:71:dd:2d:4b:b5:5c:95:ba:1a:76:38:50:28:8f:f5:
32:c8:25:d9:22:1b:18:15:f5:2f:83:ca:ad:ea:5f:db:2d:d3:
40:b4:58:76:75:af:7b:b5:33:d8:00:24:ea:2c:cb:b4:4f:7a:
e0:ba:61:cf:4f:97:8c:af:16:46:97:fe:18:32:85:19:a7:8b:
37:64:2f:99:eb:60:03:2d:eb:f0:e4:52:a9:b6:31:c2:aa:3d:
03:5a:bc:12:3d:3f:10:99:1b:f6:09:4e:0e:d0:de:e4:d8:01:
81:05:d7:d2:97:d6:8b:3a:3a:61:94:f4:83:25:bf:65:b0:4f:
d8:4e:a3:a9:5e:ef:ec:f4:3b:85:91:81:43:49:a8:1d:1b:b5:
02:b1:b8:6d:1b:10:5e:46:c4:90:69:57:be:de:16:7b:15:4b:
85:c0:89:91:b3:ce:32:98:e7:85:2d:33:d9:74:ac:df:6e:97:
d1:6c:e4:88:ff:bb:21:78:8b:d6:2e:0c:da:73:4f:d3:34:9d:
b1:c7:f6:df:27:72:42:b3:00:8a:b9:a4:a9:ca:a3:45:6d:23:
8d:a5:af:c8:05:af:c6:36:5f:e4:8e:e7:ef:ac:fc:15:5d:58:
91:fa:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:26:47 2026 by rpki-client