Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: W310cpX80k3FacbyutbZU/t0xV6J/PVlEYeXuhi9iGE=
Subject key identifier: 89:EE:B5:F5:4A:07:43:1C:54:2A:AA:85:A6:F3:1E:03:2D:75:A2:23
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 01A0EA7736CE1D49201D55051908F86E4B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 0240
Signing time: Tue 29 Sep 2026 00:01:16 +0000
Manifest this update: Tue 29 Sep 2026 00:01:16 +0000
Manifest next update: Wed 30 Sep 2026 00:01:16 +0000
Files and hashes: 1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: Ts5iw+Q0Ffi+lDQ1bkw2PNNbrnT1YfgNSathY5kHnjQ=)
2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:36:ce:1d:49:20:1d:55:05:19:08:f8:6e:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Sep 29 00:01:16 2026 GMT
Not After : Sep 30 00:01:16 2026 GMT
Subject: CN=89eeb5f54a07431c542aaa85a6f31e032d75a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:c1:cd:13:5a:12:f2:13:fe:c4:cb:20:0c:
38:33:94:80:a6:3b:f1:b4:79:6e:ff:e5:31:41:c5:
81:e1:b7:1f:18:8c:d2:b6:3c:a7:6d:c0:77:a1:71:
58:26:07:24:1f:81:1b:13:fb:ee:c8:1a:b9:c8:1a:
7b:08:d0:22:3c:12:9d:0a:08:52:9e:62:07:e2:f4:
26:13:93:9d:b5:81:20:e7:1c:58:0c:ff:21:79:b8:
c8:2d:fa:af:d9:86:fa:db:42:a1:03:01:6f:67:52:
55:31:50:4b:b8:4c:b3:fb:07:b5:71:3f:62:9c:7b:
a2:d6:45:f0:96:53:f3:06:5b:c5:9a:f5:8d:8c:a3:
02:4c:7d:07:a7:95:4c:5a:38:73:d0:5d:5a:30:0c:
8c:9b:07:9b:4c:3f:a6:77:0d:7e:3a:3c:a4:c6:ad:
91:53:34:28:9a:c1:d6:0c:50:94:20:cb:b9:2e:01:
66:d0:f5:e5:f2:3b:59:13:5f:01:68:dd:5d:09:ed:
d0:7d:3a:67:b5:74:3f:b6:f5:98:7b:0c:91:58:61:
ba:b7:cd:73:59:67:a6:26:21:51:d9:f7:d3:9d:83:
5d:b8:6b:38:d0:24:8b:ac:ca:18:2a:45:8b:98:be:
bc:e5:40:a4:4e:82:7b:d1:03:3e:f5:c6:66:db:f5:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:B5:F5:4A:07:43:1C:54:2A:AA:85:A6:F3:1E:03:2D:75:A2:23
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9c:20:f9:e8:18:61:97:6b:5a:ea:e6:48:44:e4:35:d8:15:
f2:d5:67:84:08:49:08:9f:5e:50:32:bb:9d:5c:de:47:94:e6:
88:40:29:89:55:8f:02:23:3a:0b:04:50:22:da:b0:29:b8:d5:
b8:26:c9:cc:04:fc:fa:95:88:31:e4:f6:f6:bd:77:4f:5b:9e:
fd:03:7a:4d:bc:49:09:96:bc:fd:bf:0b:be:ba:da:31:20:87:
ff:62:31:97:b3:05:6a:a8:f7:88:38:11:df:aa:7a:2d:d6:20:
79:32:8c:c2:26:4e:b4:0f:25:99:04:1d:17:42:be:f7:3d:5d:
89:56:ff:e9:fb:06:0b:86:6e:b0:2a:5f:09:6f:a8:cd:9f:b5:
7b:e4:56:fe:1e:cf:bc:f1:e8:32:aa:67:a7:b0:e9:40:e4:7e:
0d:6d:42:4f:3b:60:94:6d:04:6e:a6:77:99:2c:b0:dc:8f:1a:
23:b6:e4:25:17:98:ec:40:b4:5a:6b:7c:59:ef:68:ac:51:0e:
c7:e2:b2:b2:7e:b7:b2:12:1a:13:99:2b:37:69:15:a5:e0:fc:
5f:d3:4e:d3:65:18:84:53:d3:11:5f:80:a1:2b:f4:4c:4f:74:
35:d1:c7:d3:2f:a7:8f:e9:d0:75:40:1d:2f:c5:e2:43:e8:23:
2b:f9:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:08:38 2026 by rpki-client