Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: 9Suc4oracFYp/UCULMVzi9pFqrUh/nxWpktJewLM2Bk=
Subject key identifier: 1D:D2:64:2E:98:65:60:6E:D3:4D:09:B4:F1:66:58:41:CF:2C:CB:CF
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 019F90C8073F53F5A2B7A83EDB82C0BC6391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 095A
Signing time: Thu 23 Jul 2026 21:00:55 +0000
Manifest this update: Thu 23 Jul 2026 21:00:55 +0000
Manifest next update: Fri 24 Jul 2026 21:00:55 +0000
Files and hashes: 1: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (hash: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: 2cXqPP/dcdwK0/xiI6lhiTltCoeFWk1tEUWa+6rA/Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:07:3f:53:f5:a2:b7:a8:3e:db:82:c0:bc:63:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Jul 23 21:00:55 2026 GMT
Not After : Jul 24 21:00:55 2026 GMT
Subject: CN=1dd2642e9865606ed34d09b4f1665841cf2ccbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:69:72:88:6c:07:f5:58:fc:86:ee:2c:2b:
32:a4:36:2a:b0:5a:b9:26:fd:1c:c9:29:3d:43:5e:
5f:77:dd:01:f8:1c:4d:6b:86:13:49:3b:f6:2c:b1:
d3:b6:0f:33:af:8e:92:f1:d9:91:84:b5:a4:8b:15:
26:90:55:43:ce:26:52:a2:2f:9a:8c:ed:0a:70:a4:
29:d6:6a:6b:a3:3b:fb:3b:1f:cb:5f:a8:d8:8b:2f:
67:e9:b4:80:24:77:72:b6:0d:b7:f2:e3:6b:26:79:
58:db:02:5b:f5:1b:22:46:42:09:5e:90:15:de:42:
d8:79:ae:41:f1:3c:d6:57:c9:75:74:9d:99:41:af:
1d:d5:86:4e:b8:14:42:b3:5f:b7:e5:76:ee:bb:be:
19:df:05:0b:cc:60:b7:dd:84:a0:78:ec:59:07:9b:
cf:da:87:c0:00:bd:3e:39:c9:06:f5:65:7d:53:ae:
a2:ae:bb:c7:f3:ec:8b:6e:d1:21:08:f1:85:92:f0:
65:37:92:68:d9:08:a1:e5:1c:5a:e5:d3:0f:f9:84:
a8:70:29:ed:40:11:1b:0e:b2:a4:dc:2f:3d:2f:13:
81:8f:2b:8a:24:a6:93:d1:e8:92:fc:85:16:16:6a:
6c:20:f0:dc:96:20:3f:ea:36:ef:fc:e6:82:1d:88:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:64:2E:98:65:60:6E:D3:4D:09:B4:F1:66:58:41:CF:2C:CB:CF
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:7f:54:73:5f:a7:f0:43:27:9c:c4:63:45:28:fa:57:2c:
48:56:b8:e2:bb:23:ea:1f:25:82:76:de:2a:4f:7d:fd:a5:03:
2c:dd:a7:7f:8a:0e:4d:9f:0c:51:f6:31:fb:94:08:27:cb:02:
9f:d4:e5:23:71:96:ea:04:00:49:e3:e0:f9:cf:23:3d:18:41:
13:1e:74:78:ff:58:66:5f:62:ad:73:79:41:50:af:af:51:8e:
df:1f:49:5c:a2:b5:d2:b6:35:fd:e7:ba:ab:f8:10:9b:3c:8e:
21:78:2f:af:cb:d4:fb:99:5a:9a:a5:bf:55:c0:86:d5:68:67:
71:8e:76:28:8d:9d:5b:ff:80:ef:7d:ca:87:9e:ca:97:ff:bf:
35:dc:9a:b9:40:9c:7d:ff:9a:74:06:b1:11:d2:13:13:ff:ea:
01:d0:21:ac:4c:a2:ee:b9:07:b9:28:53:20:68:93:ae:f9:94:
73:21:e1:a7:36:fd:92:d5:a4:d9:66:38:cf:2b:88:98:69:a3:
02:cc:8d:b5:e8:eb:14:1c:0d:9a:48:6e:84:6a:f7:d1:0e:7c:
c4:4b:49:bc:b0:bb:50:e6:a1:7b:8e:a2:38:33:41:e7:d2:fb:
3a:54:c8:c6:da:41:89:b2:40:1b:82:a8:40:b8:64:83:7d:8c:
35:3d:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:12 2026 by rpki-client