Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: UrCgs+7+V3GhE5caIPjy0DhN2DJEuK1RWT/jr8uZ23o=
Subject key identifier: 45:55:91:9C:FA:95:B2:E7:75:77:8A:CC:E2:F5:E4:4C:D6:17:50:03
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 019F8F4764DEEA037BFEB26525D586DAE7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 01DD
Signing time: Thu 23 Jul 2026 14:00:48 +0000
Manifest this update: Thu 23 Jul 2026 14:00:48 +0000
Manifest next update: Fri 24 Jul 2026 14:00:48 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: kvaHgHc2MCNRxPxfZI+4GFZn9dioxVDFUMcdALHNPfM=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:64:de:ea:03:7b:fe:b2:65:25:d5:86:da:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Jul 23 14:00:48 2026 GMT
Not After : Jul 24 14:00:48 2026 GMT
Subject: CN=4555919cfa95b2e775778acce2f5e44cd6175003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:20:a6:7c:98:03:8d:4b:10:dc:bf:67:a1:
03:16:db:17:ce:13:81:e5:27:69:4e:92:fa:a1:0a:
7f:a9:6f:08:a5:ac:6c:49:92:03:41:7f:90:7c:00:
86:50:b6:6f:49:97:9a:e7:87:b2:d4:93:ed:b2:c0:
e7:ba:38:69:c0:3c:1b:30:75:29:bf:e0:5a:b8:cd:
75:28:b3:ba:14:4a:51:c3:4f:61:95:0d:a5:2f:28:
ca:d8:fe:92:0c:19:5e:46:29:46:1e:fa:df:3a:a9:
f8:c7:ce:9c:b5:3b:1e:40:95:2c:54:52:63:1d:8d:
9d:81:40:27:6a:be:1e:3c:a0:c1:cd:62:57:0a:ce:
01:e2:d1:fd:70:97:b4:fa:c2:a8:a6:36:ce:eb:20:
fd:5d:8d:1f:87:4a:fa:0f:44:e4:86:e8:a5:18:7c:
79:af:55:92:15:a9:3c:a4:e3:e0:62:5d:be:a8:df:
1e:bc:43:c0:64:45:d1:a4:da:df:25:a8:da:77:e2:
b9:da:30:f1:bd:51:17:ef:98:79:9f:9c:7a:ab:93:
9a:28:fc:b0:95:73:c6:27:9d:3e:0b:a8:cb:e4:e4:
a7:23:9d:36:47:1c:bd:b0:b5:62:cb:7e:96:9d:59:
ad:0d:81:f8:03:a8:b1:b0:cc:c4:3c:38:7a:74:f2:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:55:91:9C:FA:95:B2:E7:75:77:8A:CC:E2:F5:E4:4C:D6:17:50:03
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2c:bb:32:4f:92:52:5a:51:ab:ec:d6:48:d7:7e:43:48:cb:
a1:1a:23:2e:42:84:38:00:21:ed:35:ab:c8:5a:28:dd:28:9b:
c1:66:90:a8:d1:4e:c8:66:7e:f2:5f:2e:4d:d0:4c:b9:cd:5b:
06:29:e5:18:4d:20:fb:66:b2:95:92:bb:a0:8c:30:31:02:ac:
9b:0e:7b:47:9f:6b:77:54:76:98:23:30:a9:29:82:7a:2e:7a:
9d:b0:44:be:c8:58:f3:47:ce:6f:75:be:b3:00:81:5b:9d:4a:
7d:a9:d8:20:22:7f:6b:ca:70:9d:61:70:cf:55:95:ca:ca:d8:
01:39:3d:9d:02:24:1d:c8:7c:b2:57:6e:9f:09:62:9f:d2:96:
1a:ed:73:9e:64:d5:2b:c3:60:5b:92:84:6f:4e:c8:20:00:fd:
14:e2:98:82:c6:79:35:77:66:14:8d:26:db:e3:e2:e2:ac:0b:
38:6f:69:6f:40:71:e8:95:e3:72:a1:f4:a9:57:fd:7d:db:91:
dd:23:d9:b0:57:13:58:8c:e7:dd:0e:f4:8f:da:09:4a:19:08:
a7:c1:fc:fc:ac:e1:65:c8:19:b0:85:95:6f:8c:9a:5c:1d:40:
37:f7:62:99:74:eb:1b:b0:f1:63:5c:a9:b6:eb:17:4b:0e:e6:
7f:e7:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:18 2026 by rpki-client