Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: 9Swxsisl2QcjkoZt/oqq98vmYIRZiNdlrZets8W1K+c=
Subject key identifier: 36:E4:98:C3:DF:08:B5:31:35:07:B2:56:A0:39:74:4E:CF:F0:99:3F
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019F8ED93CD338830990B992339A1958A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 018C
Signing time: Thu 23 Jul 2026 12:00:29 +0000
Manifest this update: Thu 23 Jul 2026 12:00:29 +0000
Manifest next update: Fri 24 Jul 2026 12:00:29 +0000
Files and hashes: 1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: S1vGUfoKp+FAfxOZBPIA2JF2BI0RXcwuEg2I6UHTMOo=)
2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:3c:d3:38:83:09:90:b9:92:33:9a:19:58:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Jul 23 12:00:29 2026 GMT
Not After : Jul 24 12:00:29 2026 GMT
Subject: CN=36e498c3df08b5313507b256a039744ecff0993f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:ad:7e:fb:c0:97:a6:9c:ec:d9:5f:fe:6d:
6d:cc:8b:cc:0f:bd:f9:c2:a9:06:39:68:31:f4:58:
82:e2:6d:cf:46:a3:25:d9:35:b4:ea:51:fb:9f:01:
9f:4a:25:b4:ba:34:fd:fb:b2:73:31:96:ab:89:21:
d1:e3:4d:4e:09:1e:45:d3:d4:8c:6c:ae:9c:8a:e6:
41:a5:eb:9f:1c:4b:02:b9:2c:42:4e:92:17:72:6b:
06:15:0c:20:39:d2:5e:c8:a1:55:56:08:d5:bf:03:
98:ec:4f:b0:72:6f:23:9f:a3:14:ef:a7:cc:9c:73:
11:51:7d:33:d0:6b:88:e8:ed:b5:2d:67:a8:b5:7e:
a3:ed:b8:fd:d8:d1:20:44:b1:3a:9a:13:20:0c:21:
de:74:5e:5c:ed:70:a1:d8:b9:2f:4e:ea:13:bb:34:
de:13:91:ce:98:a4:be:3d:83:3e:3d:37:0a:d3:7a:
98:d4:2c:43:14:3a:59:b4:d7:1e:2e:c8:21:8c:91:
b0:da:a4:24:9c:fa:85:5b:5d:4e:b8:7f:f4:8c:52:
26:5f:4d:cc:53:2f:83:ad:87:a9:a6:8f:d0:e1:69:
3c:2f:19:c7:5b:a4:1b:75:9a:21:0e:2c:a1:a2:f7:
04:cc:99:8d:82:e9:75:3c:40:7e:75:b8:46:6e:69:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:98:C3:DF:08:B5:31:35:07:B2:56:A0:39:74:4E:CF:F0:99:3F
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:eb:f5:19:10:bd:cc:89:f4:a3:86:b8:00:1c:27:fc:50:
14:12:98:78:61:61:93:d6:f1:3e:de:c9:ed:3a:9f:02:db:95:
b4:f9:b1:e5:2f:23:de:8e:2b:e1:1c:5f:cb:0a:55:df:9e:5f:
9f:92:9c:26:8f:11:5a:ff:c8:b8:6d:16:6d:08:ac:2b:d3:e8:
d6:48:3f:11:4a:b7:22:32:70:35:95:92:6e:73:79:52:3b:07:
48:01:64:ae:f8:7f:9e:bc:de:25:29:6a:2d:77:49:8d:8f:e2:
c8:77:3d:7d:a9:1a:51:ed:3d:52:1d:26:43:2d:99:87:f3:55:
b3:5b:b3:cb:27:df:14:07:20:96:24:9d:09:6c:59:04:81:9a:
55:84:a5:b7:ae:f6:df:e3:91:12:c5:40:fb:73:8e:62:fb:ef:
4d:c8:e4:8f:6e:e6:25:27:e4:db:ef:31:4a:ae:04:03:d5:cc:
fc:19:12:59:d3:bc:01:43:0b:85:a9:a0:eb:b5:f4:d1:47:4f:
50:a8:24:e1:b8:03:f0:0b:bd:72:ac:60:94:97:0a:c1:89:b3:
93:76:1b:a8:50:64:9c:2e:c1:83:45:b4:37:b0:1b:c0:15:71:
5d:4c:d0:e5:8c:a8:09:8d:92:11:f1:9b:93:a2:d8:a7:93:79:
f1:1e:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:41 2026 by rpki-client