Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: 87IEZahUr5ipnz2yDXRHV6GvVX/9EwEJV/QYt17NDE4=
Subject key identifier: 25:8A:7B:73:4F:C4:43:E0:F9:E8:F7:AE:C2:6F:24:40:F3:BD:54:D1
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 019E1D907490C5EB14136A3230AE24DD75B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 0936
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: huQtHzCHFnX70FVRq5yJ8k+usWfXboOl3IrXGRzlPIM=)
2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:74:90:c5:eb:14:13:6a:32:30:ae:24:dd:75:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=258a7b734fc443e0f9e8f7aec26f2440f3bd54d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:be:ac:f4:dd:8f:8f:11:fb:05:d8:c6:3d:
47:e6:63:d7:94:3f:7b:8b:26:7e:28:34:39:fd:35:
a7:86:65:fa:7a:30:dc:79:a8:28:7c:1e:1b:af:74:
0a:32:a0:f0:91:14:24:de:d2:4c:4e:80:9b:c9:d7:
ac:21:1e:48:bd:92:a5:4d:83:d4:74:ad:76:6b:62:
dd:08:14:00:2e:77:e8:ec:2e:9f:8d:28:a8:c4:79:
64:38:01:2d:16:3c:22:ad:98:63:99:d5:ff:1c:6e:
7a:96:4a:0f:c4:11:eb:0b:4a:af:98:50:94:03:b7:
26:2a:96:b2:aa:68:11:b8:74:10:b1:f4:78:ac:a6:
dd:8c:79:a7:85:fe:05:35:7b:a3:05:48:ea:a3:ed:
87:4e:fc:b1:54:d2:90:b7:b1:62:25:31:32:b5:e4:
35:4c:cf:a0:20:52:74:e5:4b:3c:40:eb:44:c8:9d:
27:c8:fc:2f:37:ea:f1:6f:ce:1a:10:db:9a:f9:1b:
07:62:dd:eb:a7:25:74:1c:d1:c2:9e:a4:d9:2c:e7:
b1:6e:4f:af:74:f8:ed:c6:85:7a:3a:23:06:9a:3a:
7b:a7:c0:58:06:3e:ed:a8:4c:cb:c1:70:e5:be:2a:
73:f5:3e:44:63:ca:ff:b7:a2:d3:84:1f:fd:6a:ca:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:7B:73:4F:C4:43:E0:F9:E8:F7:AE:C2:6F:24:40:F3:BD:54:D1
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:83:cb:a0:4a:28:c9:62:78:73:08:eb:8c:ca:6e:99:7a:
6a:7d:77:00:e7:d8:08:29:67:0f:ac:60:a8:d8:35:47:48:a8:
9c:22:cd:68:cf:84:14:6b:b1:3a:82:b2:4b:56:a0:bc:19:86:
81:28:cd:a0:3b:62:3e:c0:a0:db:c6:24:92:cf:b2:21:94:6b:
5d:08:c6:b2:b1:fa:7b:84:3d:da:78:65:b0:27:4b:8a:90:51:
00:4e:01:56:3f:31:3c:a8:6b:9c:ff:3f:d0:f8:12:88:5d:4d:
64:55:40:54:ed:b8:08:27:f7:db:03:47:3c:6a:d2:05:cd:b1:
02:4f:23:14:91:86:e2:98:f5:d9:32:de:39:c1:77:24:9e:0d:
8b:5d:35:ae:6c:5c:8a:1b:09:87:6e:6e:f1:fe:77:9a:42:a6:
cb:cf:07:56:09:a1:da:00:46:40:5c:5a:f3:0a:64:69:5c:29:
d9:fe:27:15:c2:27:1a:39:cc:ba:3d:0b:91:ab:e2:7f:1c:7b:
e9:3a:ff:ff:a8:3d:02:0b:6d:9b:14:e4:8d:47:76:fc:b1:b8:
7b:ee:4a:14:46:31:6e:5b:61:46:dc:cd:48:de:77:24:3c:cf:
2e:a2:f4:d5:e3:70:9d:ab:c8:b5:ba:2b:da:ff:e6:d7:60:99:
e1:b0:2e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkHSQxesUE2oyMK4k3XW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTVjOWM5YTdmMTlhOWFkNzE3ZTRkYWE1MzBjODVjZjk5
YWI5NzUwHhcNMjYwNTEyMTkwMTA2WhcNMjYwNTEzMTkwMTA2WjAzMTEwLwYDVQQD
EygyNThhN2I3MzRmYzQ0M2UwZjllOGY3YWVjMjZmMjQ0MGYzYmQ1NGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRu+rPTdj48R+wXYxj1H5mPXlD97
iyZ+KDQ5/TWnhmX6ejDceagofB4br3QKMqDwkRQk3tJMToCbydesIR5IvZKlTYPU
dK12a2LdCBQALnfo7C6fjSioxHlkOAEtFjwirZhjmdX/HG56lkoPxBHrC0qvmFCU
A7cmKpayqmgRuHQQsfR4rKbdjHmnhf4FNXujBUjqo+2HTvyxVNKQt7FiJTEyteQ1
TM+gIFJ05Us8QOtEyJ0nyPwvN+rxb84aENua+RsHYt3rpyV0HNHCnqTZLOexbk+v
dPjtxoV6OiMGmjp7p8BYBj7tqEzLwXDlvipz9T5EY8r/t6LThB/9aspeBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWKe3NPxEPg+ej3rsJvJEDzvVTRMB8GA1UdIwQY
MBaAFA+Vycmn8Zqa1xfk2qUwyFz5mrl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTIt
YzkzNjU5Zjc2NzM3LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTItYzkzNjU5Zjc2NzM3
LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGyDy6BK
KMlieHMI64zKbpl6an13AOfYCClnD6xgqNg1R0ionCLNaM+EFGuxOoKyS1agvBmG
gSjNoDtiPsCg28Ykks+yIZRrXQjGsrH6e4Q92nhlsCdLipBRAE4BVj8xPKhrnP8/
0PgSiF1NZFVAVO24CCf32wNHPGrSBc2xAk8jFJGG4pj12TLeOcF3JJ4Ni101rmxc
ihsJh25u8f53mkKmy88HVgmh2gBGQFxa8wpkaVwp2f4nFcInGjnMuj0Lkavifxx7
6Tr//6g9AgttmxTkjUd2/LG4e+5KFEYxblthRtzNSN53JDzPLqL01eNwnavItbor
2v/m12CZ4bAuVg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:04 2026 by rpki-client