Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: mfr+SEjmhlyL0xWjLthxE7JCKbJsWRptKPVclTs2XJE=
Subject key identifier: 7A:D5:EB:BA:64:86:22:04:9C:74:0B:A7:1B:25:B1:C6:D8:0B:C1:64
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 019D265ED9DF3003AF39689BBDB409006CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 08B6
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: xvRV1M51BOyTP9ZZsklJliDo+xa7w1nomDPt07OhjvY=)
2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d9:df:30:03:af:39:68:9b:bd:b4:09:00:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=7ad5ebba648622049c740ba71b25b1c6d80bc164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:c6:f1:51:aa:32:84:b2:e5:ee:7a:6a:43:
89:0c:a6:58:88:e7:db:a8:04:46:c8:8a:12:9a:fd:
68:4a:4e:2f:38:57:20:a4:c2:b1:88:1d:ae:b4:3c:
78:f9:31:59:ee:58:c8:d2:ac:f4:cd:69:ee:fb:6a:
db:d3:25:94:b5:c3:4b:64:83:03:2e:3b:5b:44:fe:
d8:ff:51:fe:61:ac:40:32:a2:20:f1:b2:6f:b5:e0:
18:63:39:98:4b:ba:6b:e0:7d:09:15:60:39:5f:02:
dc:73:59:50:f8:f2:64:06:d5:1a:78:4a:eb:2e:8a:
d3:a8:e8:31:20:31:92:56:24:c4:1a:1e:33:45:85:
7c:2a:c9:c4:d9:c1:74:52:98:cb:57:d7:41:91:4c:
55:36:57:7e:b3:b5:73:38:7d:71:66:0d:4b:39:86:
09:7d:dd:c9:be:80:82:25:6e:80:47:6c:6a:55:94:
ff:77:ed:5f:b4:d3:9f:87:0e:65:94:18:b9:96:28:
6c:91:f8:5f:fa:f0:84:8c:de:7a:31:3c:53:8a:a0:
f1:47:53:4c:81:7f:2c:e0:00:aa:8f:27:c0:e1:8b:
40:37:9d:93:31:5f:46:a2:82:ce:65:92:83:9c:e2:
0f:ac:37:fb:a3:6a:3f:73:40:72:e5:9b:06:df:11:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:EB:BA:64:86:22:04:9C:74:0B:A7:1B:25:B1:C6:D8:0B:C1:64
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a2:25:2a:43:29:5a:44:9f:74:c4:61:e4:9a:68:c0:4d:dc:
8a:c2:7c:76:c1:d6:2b:e9:14:08:d2:0f:9f:32:25:71:95:aa:
b9:74:db:84:05:35:93:44:fd:52:3b:54:1d:5f:be:68:53:78:
74:50:8c:a3:cb:7d:7b:1b:bc:00:4f:a0:fd:c7:f5:9d:d2:1c:
17:4c:18:69:78:cf:cd:fa:18:5c:be:be:95:6b:2f:ed:f6:16:
77:67:6f:4c:17:9a:af:12:dd:9a:49:86:e9:f5:32:ba:c8:02:
fb:8a:a2:0a:dd:70:c3:49:62:41:2c:6f:1c:42:aa:1f:39:7d:
da:1b:2e:d4:f4:00:8f:d2:0e:be:dc:b3:e4:30:91:4b:94:3b:
a2:8b:41:01:74:59:14:b5:98:c0:b2:07:1d:8c:a2:78:20:20:
d1:99:67:bc:f0:a0:9c:5c:4a:f8:95:df:39:32:7f:82:19:26:
bc:cf:45:3c:b9:cf:2a:df:7d:ff:ce:22:a3:98:2c:aa:bd:8c:
61:93:0a:0e:d3:a3:87:98:88:43:be:c7:43:da:70:f5:e8:cc:
4a:b2:42:94:d6:6e:ab:19:1b:66:81:e7:16:76:c1:85:4c:84:
6f:48:24:2f:14:9f:ec:91:a4:a9:ec:ea:61:77:e6:85:e8:c6:
bc:cb:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:17 2026 by rpki-client