Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: HeCowYo5WngO2Q6epTr33h8W0oEzZkc774m+KDXbLYg=
Subject key identifier: E7:9D:25:6C:0B:EE:3B:C7:DD:3B:F3:0C:8D:FC:F8:E1:FC:BC:75:D4
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019D2696002AA0BD3E7B8662DE8ADB00E7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0C94
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: V8n8ydghZMpsaWS-dFmHBwi4qdE.roa (hash: wby6j6Fvc4buadteItu1tm7omgxplHfuuMsm39nmHJc=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: mgVk3E9NS7CBnuEujHPSPzrNtEQf6fgNAXx5EEZnOVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:00:2a:a0:bd:3e:7b:86:62:de:8a:db:00:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=e79d256c0bee3bc7dd3bf30c8dfcf8e1fcbc75d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:b4:96:ab:b2:e7:1d:de:9c:49:88:f2:49:
cc:90:21:7a:22:c6:e9:ed:5a:4f:26:49:73:db:6c:
fa:ac:2f:6d:b1:0a:4a:c9:e2:d1:92:ee:02:6e:47:
f1:ca:a9:be:e2:47:fd:f0:ca:c7:83:65:4e:af:91:
f6:4b:8b:09:20:56:e1:58:92:47:16:d6:4d:53:69:
69:d3:f2:a5:b7:a7:2a:35:22:68:20:13:58:4f:77:
0a:18:e3:9c:f9:63:3a:df:ff:4c:aa:73:a1:e1:5a:
a3:79:37:88:0a:92:b2:f7:76:57:46:51:3e:45:08:
56:57:e1:e5:00:a9:9a:02:0e:43:8a:5f:04:af:87:
e3:40:65:6a:10:b2:d9:45:e0:2b:3c:a2:cd:42:7c:
08:e3:e7:c3:a8:0f:73:ea:91:81:63:fe:64:9b:55:
19:66:29:b1:e6:5a:f1:18:e4:5b:1b:05:40:d6:8a:
b6:7f:c4:3f:41:a0:0f:3b:b8:91:ce:9a:ba:48:e2:
4e:4f:76:93:32:a6:23:71:5f:a0:85:cb:97:0a:36:
1c:be:b6:f0:0b:27:29:6e:93:f1:79:a7:70:66:6c:
c2:60:27:a9:86:f2:32:e2:72:39:51:5f:d4:57:97:
81:bd:78:72:31:75:18:16:ab:a4:7b:03:84:9b:9f:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:25:6C:0B:EE:3B:C7:DD:3B:F3:0C:8D:FC:F8:E1:FC:BC:75:D4
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:92:96:23:fe:c3:6d:91:c9:b0:cd:17:01:f6:9e:b3:cf:18:
93:6e:c2:9b:a2:41:04:b4:da:7c:a7:93:90:90:27:ed:5b:d6:
f6:8e:fd:56:ce:f3:40:68:e5:bc:d0:09:f9:a7:a4:4c:19:02:
d0:22:55:1e:b4:d4:b3:50:f3:2f:d4:21:4c:c9:5c:4e:5e:98:
4c:b7:d4:c7:ea:82:fb:ec:67:2c:52:6e:97:19:a8:11:f6:5d:
37:ba:c4:a9:0c:26:67:98:c6:c0:a1:f0:f0:68:95:33:1f:45:
e6:f5:39:66:7c:e8:20:18:36:3b:a6:af:c0:a1:be:eb:db:49:
f4:65:ca:67:a2:11:d1:a1:a8:7f:43:0f:c2:19:14:27:a5:a6:
17:5a:c8:30:7a:25:79:5e:84:9b:4f:58:70:fa:e2:ea:11:93:
16:7a:9b:15:59:0f:40:9a:6e:be:33:94:d8:1a:51:62:7a:bb:
e6:7f:38:e8:13:69:f8:b0:16:93:ed:10:d1:ea:f1:9c:55:9f:
63:af:37:36:39:f1:5d:70:32:0b:6a:e6:5b:dc:51:9c:6c:d5:
bc:84:9c:9f:41:00:d7:55:bb:8b:de:8f:62:7a:85:68:61:62:
5c:9c:2d:43:21:4e:d8:c6:38:82:2b:c7:20:c3:81:2d:10:9b:
80:ce:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:30 2026 by rpki-client