Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: O9Nf6GwNMmg114IAONqPpgtKOaD1yFnqrY13M2jD6yY=
Subject key identifier: 9D:C2:79:28:EC:A4:76:18:5D:AC:28:C9:3D:DD:81:60:E5:97:6D:0D
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019D2B175DFDB85390919B472F3744B1F7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 17:00:44 +0000
Manifest this update: Thu 26 Mar 2026 17:00:44 +0000
Manifest next update: Fri 27 Mar 2026 17:00:44 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: 3e9JjUV1A+ekC08jTwgd7rLmOUZjS5nWjlxl2qakiv0=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:5d:fd:b8:53:90:91:9b:47:2f:37:44:b1:f7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Mar 26 17:00:44 2026 GMT
Not After : Mar 27 17:00:44 2026 GMT
Subject: CN=9dc27928eca476185dac28c93ddd8160e5976d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:d3:13:d0:c3:68:d4:d8:fc:fe:62:c6:7c:
28:95:a0:95:b6:7f:05:b7:c1:59:95:64:28:45:1e:
ab:9a:9f:67:ac:3d:38:99:ec:db:e2:6f:f8:76:63:
68:db:c8:1e:f5:69:45:ac:ca:56:e3:3e:b0:75:67:
17:b1:e6:e0:9d:5f:6f:a9:45:99:c8:e6:e1:05:81:
9a:bd:60:e5:f0:39:30:3b:0a:73:04:0e:db:48:e1:
a2:3a:40:b6:38:f5:19:96:9b:28:7f:62:ef:12:d4:
ee:37:fa:59:d1:41:f0:a2:01:2b:d8:2e:bf:e6:59:
b3:7f:66:8b:f0:93:21:db:2e:26:86:6e:35:e0:11:
ec:f9:78:7c:f6:c9:84:1b:53:d7:bf:e7:66:7e:31:
47:31:9d:a8:b5:f9:54:55:22:8a:4c:1f:14:47:4d:
76:7b:43:aa:a3:a2:63:9d:6e:65:1e:ab:1c:11:0f:
e0:d3:e9:4f:66:45:42:52:e0:f4:7c:5a:85:6f:d5:
a1:ca:8b:ff:0f:eb:e9:a2:c3:68:c0:80:53:e3:ca:
de:35:0d:10:00:96:0b:f7:cb:da:7d:2c:07:9d:76:
54:c4:a5:69:c1:5c:b1:5b:68:42:76:b7:65:49:db:
1b:e7:8a:82:16:ec:43:bf:b4:37:6c:0c:81:b5:7e:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:79:28:EC:A4:76:18:5D:AC:28:C9:3D:DD:81:60:E5:97:6D:0D
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:fe:f5:18:92:53:58:70:a2:3e:a3:98:56:25:59:a9:91:
2c:33:14:3d:66:9f:57:5b:d3:65:cf:20:83:d4:4b:9f:66:a3:
b8:2f:9b:dd:6d:21:27:58:25:70:95:2f:5b:a5:e1:3f:2b:e9:
b7:be:fb:97:49:3a:ee:1c:78:da:29:88:80:6c:15:02:22:2e:
63:76:e2:00:6e:84:c1:66:2a:bf:e9:97:df:e8:c6:dd:79:11:
ba:4b:c1:89:c1:e7:fa:c1:af:7a:37:22:b7:84:ff:68:ac:95:
ae:ac:45:ff:11:f5:1e:62:04:b7:29:64:3f:5a:3c:e9:be:7c:
6f:35:2f:96:ee:ea:b0:8c:ee:fe:db:a2:7a:8f:35:22:c2:d4:
71:20:cc:2f:aa:f5:14:76:5f:d6:f4:03:df:40:12:19:b8:ce:
25:81:13:6d:13:80:c5:27:bf:58:b1:2c:2c:fd:bc:ba:c9:5f:
4c:f0:50:6e:dc:79:42:8d:cb:c4:b9:10:24:b6:b3:15:0f:1e:
87:db:da:1d:ad:66:25:ab:5e:a8:30:28:70:bf:1d:e5:ab:23:
4a:ed:bc:66:ff:03:2c:56:43:95:23:f4:9d:a1:ad:b3:49:12:
98:72:73:fd:55:e6:cb:63:23:e1:39:a1:0d:99:8e:d5:8e:b1:
93:78:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:43 2026 by rpki-client