Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: HF28C05bOrmxvgR3Y7eTLcxxl1G4l88a71MkeNMsOEg=
Subject key identifier: D5:19:69:77:7A:86:66:BD:34:90:43:E5:22:AE:C5:A0:C9:5B:BB:AF
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019D258445866402610D9895145E5387FF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 04D9
Signing time: Wed 25 Mar 2026 15:01:58 +0000
Manifest this update: Wed 25 Mar 2026 15:01:58 +0000
Manifest next update: Thu 26 Mar 2026 15:01:58 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: NmgCZh0UNtQMzmPVqSfl+cYdC+/BwiBdpO+LuiEaT9g=)
2: OfoBCzmtnFm0hwGR9A2PXWfAk1I.roa (hash: ayIedPzOzNkrSBeiWSMs33csQjbzHkEQVrKoALTU/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:45:86:64:02:61:0d:98:95:14:5e:53:87:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Mar 25 15:01:58 2026 GMT
Not After : Mar 26 15:01:58 2026 GMT
Subject: CN=d51969777a8666bd349043e522aec5a0c95bbbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a9:d1:d3:66:d7:da:24:3f:b8:2c:a8:5c:
48:c3:a7:97:9a:7d:7e:4c:ae:f7:c6:e3:94:d4:af:
ce:c8:e5:8a:93:86:55:3d:29:3d:72:84:a0:62:e9:
89:fd:1d:75:db:ce:0e:b7:0b:a2:85:b4:6a:07:74:
ac:5b:31:60:df:c2:3c:5a:63:08:e0:4a:aa:b5:73:
26:8c:05:b1:14:34:94:1b:da:15:8d:e1:0c:5a:35:
cc:d6:bd:16:5e:eb:4c:b6:65:48:eb:54:d2:85:e6:
f4:7f:db:5f:8b:a5:c7:fd:10:3e:3c:b0:98:c8:7e:
36:95:db:69:1a:99:53:eb:e3:35:59:76:9a:4d:ec:
8f:d9:12:87:26:3b:21:8f:8b:8c:dc:12:ff:bd:eb:
85:95:95:28:a8:f8:70:4e:2c:4a:da:d4:16:88:5f:
5e:67:7e:ad:ea:76:66:ed:09:58:69:b3:a0:92:c5:
f1:28:12:bd:51:22:9e:62:ca:ba:ec:0d:07:29:79:
93:60:28:4d:52:15:8a:1c:09:d7:0a:7c:7b:b2:cc:
eb:fd:3c:b1:f1:0a:ae:d1:0f:a1:f1:8e:c5:0b:ef:
b9:1e:06:4a:0c:b2:fb:a3:13:4d:f8:02:6c:c4:a5:
a0:12:60:89:3f:3c:6a:19:fb:bc:93:c3:4b:af:98:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:69:77:7A:86:66:BD:34:90:43:E5:22:AE:C5:A0:C9:5B:BB:AF
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:dc:cb:4a:0b:04:2a:5c:83:09:b1:2a:6f:40:e0:a5:96:
65:66:3f:3e:48:c9:ca:6f:83:3b:02:ef:1d:25:74:88:ff:04:
72:e0:18:40:a9:09:6e:c6:ad:5c:8f:59:85:8c:1f:ca:25:d4:
d9:db:5f:07:d9:76:16:da:8e:7c:3e:ac:59:97:b1:62:e0:43:
6e:dd:77:f2:72:a9:bc:0a:4c:2c:fc:51:60:eb:a4:31:d5:9f:
05:49:c9:a7:d6:38:f3:56:5a:01:44:d5:ba:7f:9d:b7:0e:db:
74:d5:bc:9f:20:0b:72:36:53:ed:21:56:bc:ca:85:50:14:f3:
5b:51:e6:13:3f:5e:78:c9:d6:ec:9e:72:1e:bd:0f:4a:8e:7b:
5e:43:79:63:1c:5b:9a:c8:84:c2:9a:fb:70:c5:fe:22:fd:c2:
81:c1:a6:48:64:af:46:94:1d:07:0c:42:0b:83:46:4f:6e:39:
a4:85:b4:66:35:96:c3:be:31:1d:05:d1:ec:b3:98:14:cb:ee:
89:05:fb:c6:f4:77:9c:a1:8c:6f:90:3b:d4:fa:28:17:5a:e1:
e5:6f:0e:e1:bf:5a:3a:cc:01:73:0c:22:52:54:f9:40:bd:8e:
93:23:87:be:7c:4b:e6:0a:6f:04:81:29:72:fa:a5:ce:2a:4f:
ab:b2:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:50 2026 by rpki-client