Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: w3UTLkD6trAcD+hiUiOz6I7077kqN8iA/OgMSLhb7/o=
Subject key identifier: 5F:BA:B0:93:A3:30:D0:3D:3C:C8:86:CC:5B:5B:53:81:8C:AF:10:F8
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 01A1DA5CB9EBFF0DA9A7213CE1F8FF6A4B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 030D
Signing time: Sat 14 Nov 2026 14:01:12 +0000
Manifest this update: Sat 14 Nov 2026 14:01:12 +0000
Manifest next update: Sun 15 Nov 2026 14:01:12 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: /KwZaGTZqlz+Urem1AJnAHNnhB9BF6fFJEdui4ylQ6c=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:b9:eb:ff:0d:a9:a7:21:3c:e1:f8:ff:6a:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Nov 14 14:01:12 2026 GMT
Not After : Nov 15 14:01:12 2026 GMT
Subject: CN=5fbab093a330d03d3cc886cc5b5b53818caf10f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:8d:c0:c3:f1:af:ab:e7:d1:7e:d5:f2:0a:
bc:9b:e1:82:22:02:3a:c7:46:2f:9e:e3:b6:b7:21:
a9:07:ff:9b:81:50:21:4f:75:3b:b2:8e:32:a6:2c:
f3:30:30:de:8f:28:46:6e:84:0c:34:c8:27:6f:05:
c1:09:71:c9:b0:4e:d8:2d:b3:9e:f1:28:c8:24:fa:
08:23:75:91:00:e5:40:07:07:08:d6:f6:3a:b7:52:
68:51:0f:67:7b:d0:48:7b:04:79:fc:60:0b:31:df:
88:5d:e0:a4:5b:1f:58:44:2a:2d:ee:8b:8f:7b:d3:
2c:9f:85:7a:11:17:94:0f:92:95:a9:19:c8:34:02:
0e:d9:97:2d:22:a6:62:93:e9:5b:7e:ee:07:c6:cd:
db:90:93:ce:c1:fa:b6:04:cc:f0:b6:18:90:5d:ef:
49:53:4e:0f:75:78:e9:ab:bd:df:84:2b:71:19:94:
9f:66:76:ef:6e:ee:9d:af:52:c9:80:5d:38:39:2c:
0b:82:90:4d:32:ee:73:3b:b1:1e:4f:b4:8f:21:e7:
40:2b:7e:03:eb:25:43:3e:57:d2:e6:4c:39:d0:2b:
14:97:60:95:14:c0:12:2b:6c:db:a5:84:32:59:4d:
48:88:ec:11:fb:d2:14:ab:31:68:17:3e:92:dd:07:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:B0:93:A3:30:D0:3D:3C:C8:86:CC:5B:5B:53:81:8C:AF:10:F8
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cf:b3:11:ba:bc:8a:f8:20:46:89:ec:0b:81:6c:28:72:0b:
d2:9e:6d:0e:29:34:3a:c6:75:4c:49:81:3e:82:a2:39:ab:3a:
9b:44:90:89:06:92:b0:30:67:52:0f:9c:57:99:4c:eb:73:c9:
89:98:9d:c0:af:25:6e:47:69:9a:8b:83:67:96:47:83:b1:cf:
3d:0d:dd:ed:71:a1:41:4c:27:05:95:9b:75:ed:a8:4e:d4:cb:
16:c4:7f:3d:fa:1a:9c:ec:91:06:51:aa:24:06:98:e9:a6:29:
82:72:30:4d:4e:04:b1:04:33:39:c1:6a:fc:30:a3:05:fd:77:
8e:53:34:44:b1:b3:a5:0a:0a:bd:64:f6:53:fe:60:97:24:33:
d7:17:d8:1b:5a:8f:5b:65:7c:7b:3f:8f:65:bc:bd:a2:fe:3e:
50:cc:99:b3:48:79:cc:67:be:48:19:ac:78:a6:8c:d2:31:bb:
cf:61:f0:69:30:88:b7:d4:af:ea:9e:27:d4:be:4d:fb:2b:ad:
d9:03:2a:6c:90:a7:c7:6a:bf:d9:d2:4a:4a:ce:2d:8d:8c:3a:
6c:a2:33:30:d8:40:bb:fa:62:55:04:09:37:bf:f0:96:14:80:
6a:c8:cf:6a:04:01:33:0c:6f:c1:66:20:78:ba:67:de:3c:c6:
9c:3a:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:28 2026 by rpki-client