Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File: 95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier: UNK0u5tkNAaun5n+mMG0oBqSyRnBPJ5E4D3EaEeg7kU=
Subject key identifier: CF:9C:53:BE:F0:66:2F:1C:D8:3C:41:85:29:DA:62:99:3E:CF:5E:EC
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer: /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial: 01A0D3B90209A78530B53AE93F256E58F345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number: 0285
Signing time: Thu 24 Sep 2026 14:01:52 +0000
Manifest this update: Thu 24 Sep 2026 14:01:52 +0000
Manifest next update: Fri 25 Sep 2026 14:01:52 +0000
Files and hashes: 1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: y5IBYHimFgw/pdBujUXEOqicOFthKVXpeIIvViY57b0=)
2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b9:02:09:a7:85:30:b5:3a:e9:3f:25:6e:58:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Validity
Not Before: Sep 24 14:01:52 2026 GMT
Not After : Sep 25 14:01:52 2026 GMT
Subject: CN=cf9c53bef0662f1cd83c418529da62993ecf5eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:42:d5:56:19:7a:fd:1c:8d:9a:f7:c2:2f:
a3:62:5b:ac:8c:7a:73:44:58:ce:d8:39:c5:e3:f8:
e6:b0:fd:a8:12:15:a7:27:76:5e:18:50:5b:b6:84:
7d:8c:e5:c7:02:eb:cc:6d:b8:1d:1a:4a:75:ac:6e:
fa:13:51:14:4f:a4:6b:19:01:5c:7e:be:50:d4:5b:
4f:a7:4c:41:38:e8:54:57:cc:07:c4:f8:f1:76:1e:
d6:4f:23:b2:43:c6:80:c7:fa:d3:7b:eb:6b:9d:d5:
d7:40:b8:58:45:8a:0e:31:06:b8:bf:9b:49:39:8a:
c9:b3:7c:50:b0:03:78:0e:9c:9a:58:3f:b8:da:ae:
0a:35:dd:8d:94:3b:56:54:70:31:12:c3:dd:bb:55:
5c:7b:df:c3:0f:0c:69:8f:78:d1:0a:d9:11:d2:13:
f4:e9:cf:4d:68:90:f9:14:45:ae:7f:1b:1d:2a:df:
9f:63:64:bb:54:4e:ff:bd:47:05:f2:8e:62:35:82:
62:dd:81:51:ac:26:a3:84:5d:01:32:a4:02:dc:ab:
ab:7f:32:7c:9e:16:92:29:4b:77:e5:c0:e8:8c:18:
f3:c7:36:a2:b9:00:79:ec:66:ea:a4:22:14:65:d4:
5d:4c:d1:dc:4e:70:ac:a5:f2:f5:56:80:ad:38:20:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:53:BE:F0:66:2F:1C:D8:3C:41:85:29:DA:62:99:3E:CF:5E:EC
X509v3 Authority Key Identifier:
keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8f:38:ba:9f:b7:b9:d4:47:fc:b9:f8:57:67:a1:17:55:54:
40:4b:63:da:29:a5:31:6f:ee:9d:50:ac:64:6d:58:8a:ca:a0:
7c:ac:eb:a1:3f:9e:15:ef:0f:a8:22:16:fe:63:77:d0:ac:98:
2c:ac:a2:c2:c3:04:43:78:3f:e9:13:f8:ba:f2:37:47:e7:0a:
57:ea:67:10:05:02:c3:d5:42:65:c7:46:5c:9c:0c:43:30:19:
32:da:fa:c2:9c:1d:a7:69:e5:2d:ce:9f:a5:53:2a:80:53:79:
d0:19:2f:e9:34:9a:e1:38:04:70:7b:82:3a:85:3e:d2:b1:68:
15:60:fd:24:ba:64:f0:68:eb:70:06:f7:5c:99:6d:b5:c5:92:
8f:3b:92:8e:99:40:93:98:4a:13:29:01:5f:6c:9f:8c:2f:fb:
64:a3:df:60:39:c9:96:4f:a7:ce:fc:b1:f4:cb:9f:8d:77:bf:
40:7f:a0:dc:d0:2e:29:ea:f3:7e:d9:86:5e:29:c0:7d:4b:3a:
19:15:a3:ba:4c:59:17:ea:60:ed:d1:05:92:5d:08:f7:2c:c3:
9e:0d:17:a5:4a:8b:dd:46:82:4c:62:9a:3a:84:0a:fb:b1:1e:
69:15:1f:ef:73:79:05:e9:11:6d:c4:8b:97:fc:9e:44:da:75:
1d:3a:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:57:28 2026 by rpki-client