Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier: NzCy6l3fC7PxKRT7gWPnxvwW6d3b8u4rZJ+8BCRUBuM=
Subject key identifier: 59:E8:F1:AD:02:B0:96:A3:31:08:E1:DF:A5:F6:1B:B5:86:89:A1:15
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019D262800A8FF4A5872410CC8D1D75821AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number: 4C
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: 44muUChp5JRRZ63agxqoMHmu2uk.roa (hash: BUqt5hQEDJqjTZAY38OPC7Xm/4ladOgcW1BaLTx7yWI=)
2: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: bzuhMD6aPgKJ4060siySwgk+wn6jYgBl/FPQLVJ4YL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:00:a8:ff:4a:58:72:41:0c:c8:d1:d7:58:21:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=59e8f1ad02b096a33108e1dfa5f61bb58689a115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:5b:05:4d:be:33:b4:ff:35:e0:bc:92:48:
95:49:12:48:bf:2b:ec:41:ad:ab:9a:ba:9c:3d:78:
e1:3f:be:f0:f9:17:7f:f1:45:dd:da:57:31:90:47:
20:07:fb:72:ed:43:dd:f1:f9:ec:90:f7:1f:f4:bb:
bf:fa:eb:44:08:ed:d9:b8:c8:87:1e:bb:ae:b0:32:
95:19:4e:55:30:5a:75:08:48:44:cc:47:de:95:b0:
76:5b:51:8f:be:c7:0d:bf:e9:5e:a3:3b:2c:55:00:
55:85:82:22:30:76:80:a8:86:08:df:17:27:96:90:
c1:7c:9e:0d:d4:80:31:2a:ff:2c:bc:42:c5:ba:1a:
a8:e7:75:59:2f:40:5a:5e:2c:2e:4b:19:0e:75:03:
82:12:fe:db:22:ad:3d:7f:1c:0f:a1:c7:35:23:a7:
25:3f:e5:c8:bf:42:e5:52:d9:61:b5:07:dd:15:22:
41:95:0a:f8:d9:49:c4:77:6b:47:1f:63:a2:4d:31:
6e:e5:59:0d:f1:82:ea:d2:22:d8:15:22:01:1e:2d:
dc:e7:6c:c7:a0:cb:50:0e:cd:cf:13:4a:d1:ee:a5:
7c:f6:b0:68:89:0d:d2:ca:8f:49:51:5c:5e:d9:c0:
45:80:43:37:56:91:55:9d:6e:3a:05:1a:c5:2a:1c:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:F1:AD:02:B0:96:A3:31:08:E1:DF:A5:F6:1B:B5:86:89:A1:15
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:ff:b1:10:04:0d:cf:7c:e3:dd:d0:53:2c:16:4c:17:89:
29:1a:a7:db:92:df:12:e1:d4:23:ed:10:41:cd:86:3f:de:b0:
f6:fb:3b:cc:4a:2f:ae:f1:cf:72:ad:11:56:21:6a:65:ec:ae:
4d:89:01:49:67:39:2d:73:ae:98:b0:e8:b9:ec:de:df:d7:07:
58:70:6b:8e:a8:f2:64:c0:11:97:d0:8d:fd:01:d6:70:1b:77:
ee:1b:cc:9d:a0:e6:aa:ab:e0:90:01:48:20:ca:b1:4e:30:4c:
df:2a:5e:5f:43:b9:b5:05:12:93:43:97:04:84:fb:95:00:e1:
c5:68:59:d9:5b:c9:a5:ec:10:28:66:8d:39:d8:4a:72:14:62:
dc:a4:04:f8:48:fb:5f:50:95:13:a5:bc:17:bb:08:ec:7d:02:
9c:71:99:eb:6f:2e:07:31:4e:c8:fc:14:e5:e0:80:cd:a0:94:
ba:0b:66:5f:63:68:00:5d:e2:4e:51:3e:95:f1:92:82:17:53:
78:25:ae:14:53:25:cc:e1:70:39:04:72:bc:3f:55:4f:06:af:
46:01:96:b2:c7:2d:fa:a2:49:33:a1:c0:dd:80:18:3f:84:da:
87:b3:e5:eb:80:25:2a:c3:29:81:83:c9:4a:8a:bc:cb:8f:ac:
de:b6:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:20 2026 by rpki-client