Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: jt+BzkoX0IzHzVfy28cIYcd99MR8vjfZknlr2++oOYo=
Subject key identifier: 6F:D9:A9:95:FB:AE:A1:27:92:BD:EB:77:EE:F3:E2:4D:9E:47:29:E5
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 019F94377341C9FADA7825C234A75AB0C50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 09F8
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: ZY9xYPcG7jTrIP4WW/HWCH8Rb35ul2qhCXIHGQj2uIQ=)
2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:73:41:c9:fa:da:78:25:c2:34:a7:5a:b0:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=6fd9a995fbaea12792bdeb77eef3e24d9e4729e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:df:af:2e:df:8c:1d:1a:ba:77:9f:b5:71:
be:ce:1e:e1:ab:4e:9b:d7:32:6e:9f:02:8e:a0:f4:
4f:14:d0:39:24:5a:40:93:1d:72:62:4b:b1:23:05:
83:d9:a9:96:a3:95:35:e3:7b:bd:7d:80:7e:6f:d3:
d8:43:32:6c:5e:f7:0b:49:c6:d0:85:70:13:ad:60:
61:3d:81:ef:17:86:cb:8a:de:08:24:21:0d:d0:58:
d8:97:40:a2:05:72:68:3b:10:6d:ca:0c:10:3e:ce:
10:6d:5d:db:b8:a5:11:d4:94:0b:e2:31:29:05:31:
49:18:9c:59:33:7b:bc:3b:ba:5d:36:2d:e4:4e:e0:
b4:ac:9d:7b:c6:4c:2f:30:b0:d9:54:c1:3b:29:39:
e3:ba:80:67:db:c8:97:68:6e:a1:50:b4:37:4e:be:
47:6b:2f:65:2d:d5:81:48:1b:5e:95:40:e1:fd:89:
e2:6c:c7:27:f0:4d:0d:27:89:d6:11:9a:d8:8c:5b:
8c:3d:ca:d1:09:a8:e2:a2:a5:be:f9:df:6b:e3:a7:
ff:4b:8c:46:47:d3:d4:0b:e5:13:97:57:77:11:fa:
23:b7:b2:53:7a:e1:a8:44:58:9d:ed:49:3a:a2:5b:
23:9a:b9:91:e7:5a:ce:e3:b2:5c:1e:c2:5a:75:df:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:A9:95:FB:AE:A1:27:92:BD:EB:77:EE:F3:E2:4D:9E:47:29:E5
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:67:a9:84:36:24:b6:be:73:4e:bd:64:9f:96:6d:73:81:73:
ff:a3:61:00:31:4f:60:62:ce:3c:69:f7:28:b7:7d:d4:ea:df:
97:b3:90:55:18:a2:e3:5c:79:d9:82:c3:75:9f:bd:39:b3:54:
dc:ed:09:b6:a3:41:09:3b:88:1c:ce:58:23:6e:f0:49:ed:eb:
d4:bb:34:03:4e:71:84:f4:bd:28:67:47:31:a6:db:d5:66:8c:
39:59:bc:6a:e7:7d:df:68:6d:19:63:a9:a5:ba:61:50:27:69:
78:67:af:68:0a:e6:12:c3:0a:8f:ab:16:91:1b:40:c4:25:39:
3b:26:c1:d6:3e:af:97:74:b5:00:f1:ad:1f:f3:88:f8:5a:95:
df:4c:c1:17:48:67:3a:98:e4:e6:05:e1:32:b3:2a:5d:e9:6d:
bc:f2:a0:a1:f2:95:5a:da:c8:9b:4f:6a:81:ab:26:03:9d:32:
12:1d:7a:d5:03:f6:2f:53:e9:f6:b9:aa:09:25:70:d9:b3:81:
7b:d7:2f:1b:f8:59:28:dd:06:a4:c0:f5:bb:34:32:91:99:0d:
fa:a3:d7:f2:ff:f7:44:42:bf:75:40:bd:ab:76:44:64:db:67:
4c:8b:68:c6:76:4a:ce:32:62:27:c9:b8:58:df:f5:75:10:11:
d0:99:06:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN3NByfraeCXCNKdasMUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTVjOWM5YTdmMTlhOWFkNzE3ZTRkYWE1MzBjODVjZjk5
YWI5NzUwHhcNMjYwNzI0MTMwMTI5WhcNMjYwNzI1MTMwMTI5WjAzMTEwLwYDVQQD
Eyg2ZmQ5YTk5NWZiYWVhMTI3OTJiZGViNzdlZWYzZTI0ZDllNDcyOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45ffry7fjB0auneftXG+zh7hq06b
1zJunwKOoPRPFNA5JFpAkx1yYkuxIwWD2amWo5U143u9fYB+b9PYQzJsXvcLScbQ
hXATrWBhPYHvF4bLit4IJCEN0FjYl0CiBXJoOxBtygwQPs4QbV3buKUR1JQL4jEp
BTFJGJxZM3u8O7pdNi3kTuC0rJ17xkwvMLDZVME7KTnjuoBn28iXaG6hULQ3Tr5H
ay9lLdWBSBtelUDh/YnibMcn8E0NJ4nWEZrYjFuMPcrRCajioqW++d9r46f/S4xG
R9PUC+UTl1d3Efojt7JTeuGoRFid7Uk6olsjmrmR51rO47JcHsJadd9fMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/ZqZX7rqEnkr3rd+7z4k2eRynlMB8GA1UdIwQY
MBaAFA+Vycmn8Zqa1xfk2qUwyFz5mrl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTIt
YzkzNjU5Zjc2NzM3LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTItYzkzNjU5Zjc2NzM3
LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2ephDYk
tr5zTr1kn5Ztc4Fz/6NhADFPYGLOPGn3KLd91Orfl7OQVRii41x52YLDdZ+9ObNU
3O0JtqNBCTuIHM5YI27wSe3r1Ls0A05xhPS9KGdHMabb1WaMOVm8aud932htGWOp
pbphUCdpeGevaArmEsMKj6sWkRtAxCU5OybB1j6vl3S1APGtH/OI+FqV30zBF0hn
Opjk5gXhMrMqXeltvPKgofKVWtrIm09qgasmA50yEh161QP2L1Pp9rmqCSVw2bOB
e9cvG/hZKN0GpMD1uzQykZkN+qPX8v/3REK/dUC9q3ZEZNtnTItoxnZKzjJiJ8m4
WN/1dRAR0JkGSw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:49 2026 by rpki-client