Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: oOnC+U8VHXQu5XcuNc6yyl1X8rE9vsJrbQxraezRrF4=
Subject key identifier: FF:83:E2:50:7A:4D:16:30:53:70:95:11:3D:EC:EB:CD:CF:63:92:6F
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 019E1C7D7C8CB7584713828EDE1CC31D5CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 068C
Signing time: Tue 12 May 2026 14:00:46 +0000
Manifest this update: Tue 12 May 2026 14:00:46 +0000
Manifest next update: Wed 13 May 2026 14:00:46 +0000
Files and hashes: 1: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: IrulcHb3K43euPp/qC7jlemqPzR/H2XUKAHbge71LBM=)
2: Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa (hash: deUDIfKP8EAYYGoQ4lRaCxh8/fRxNHbmoAk7A20/nwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:7c:8c:b7:58:47:13:82:8e:de:1c:c3:1d:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: May 12 14:00:46 2026 GMT
Not After : May 13 14:00:46 2026 GMT
Subject: CN=ff83e2507a4d1630537095113decebcdcf63926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:85:a8:49:49:e5:ca:cb:07:76:30:f6:74:
14:0d:ef:e6:61:f2:8c:ab:ae:69:99:2f:3d:4e:8e:
57:84:87:04:37:f3:1a:a0:7d:e1:db:49:70:d4:db:
bd:13:48:17:8e:7c:19:3d:ef:f0:34:81:71:da:d3:
b7:59:3f:e0:5d:00:87:d1:67:16:ef:ef:73:37:17:
64:aa:8e:3d:ce:81:bd:4f:78:78:0e:f6:24:3b:b3:
8c:f7:fb:ee:31:7f:43:56:ab:13:cd:f6:f9:3d:30:
09:71:6a:3b:f4:6a:6e:8a:a3:c3:a4:e9:aa:a5:a6:
af:de:d0:c3:92:5f:61:04:d7:71:50:43:18:11:1b:
ff:15:43:ee:14:a1:89:45:0d:09:60:e0:7c:7c:13:
67:be:0f:80:99:89:9e:cc:76:4e:d6:03:fa:a2:51:
75:d6:64:60:48:4a:d8:dc:f2:ab:02:ae:51:60:42:
eb:de:63:a4:8a:98:f2:f6:c3:0e:cc:ac:02:45:f2:
c1:fd:9d:e8:63:0a:79:3e:41:35:c9:75:45:d6:ec:
f9:b4:29:4c:04:40:da:a0:55:47:6b:2c:15:68:d0:
e1:1b:4d:39:2d:3f:6d:99:52:50:e9:97:28:c3:cd:
fd:cc:cf:20:99:8a:75:2c:68:81:1d:d0:9e:9d:fd:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:E2:50:7A:4D:16:30:53:70:95:11:3D:EC:EB:CD:CF:63:92:6F
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:8a:53:83:1c:1a:a9:2c:d6:af:97:5b:84:ec:bc:37:8c:
93:d4:52:b4:38:24:aa:16:a7:ea:f5:e0:81:90:20:60:f1:49:
04:47:a3:6b:ff:4f:86:9e:18:c7:4c:e2:b2:3a:d3:2f:dd:cb:
26:bf:91:8e:6b:6f:cd:48:5d:6a:8e:86:43:88:29:37:83:c3:
45:53:20:a0:7d:f5:12:54:59:d5:91:da:93:77:c4:3a:ca:8d:
e7:77:fb:fc:dc:51:d8:95:0e:01:cd:04:43:fc:86:c6:82:0e:
f0:47:e8:a7:2e:44:89:19:a6:d5:2b:00:88:d3:d1:3a:2a:9c:
48:16:70:0c:75:06:1a:b1:b0:0c:6c:2a:f5:ff:3c:42:84:38:
6f:1b:be:42:1c:e1:77:90:b2:8a:12:1c:3c:c0:3a:9d:9a:33:
d7:91:bc:20:f7:7a:57:43:50:6f:e9:e6:17:d1:cf:3b:ee:47:
02:9b:bc:15:a7:ef:47:57:ed:bb:24:7d:5a:1d:39:b3:40:01:
f1:74:9d:a4:91:54:05:70:e3:2c:d3:90:34:e4:74:7a:5a:ab:
74:cc:d9:f2:bf:68:69:53:c8:f8:68:b4:6d:6f:c2:c1:5b:ef:
5d:d9:75:13:9b:2e:fb:b6:5b:1a:36:b0:b7:18:eb:29:89:91:
a7:35:78:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfXyMt1hHE4KO3hzDHVzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2
OGVkMGUwHhcNMjYwNTEyMTQwMDQ2WhcNMjYwNTEzMTQwMDQ2WjAzMTEwLwYDVQQD
EyhmZjgzZTI1MDdhNGQxNjMwNTM3MDk1MTEzZGVjZWJjZGNmNjM5MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3SFqElJ5crLB3Yw9nQUDe/mYfKM
q65pmS89To5XhIcEN/MaoH3h20lw1Nu9E0gXjnwZPe/wNIFx2tO3WT/gXQCH0WcW
7+9zNxdkqo49zoG9T3h4DvYkO7OM9/vuMX9DVqsTzfb5PTAJcWo79GpuiqPDpOmq
paav3tDDkl9hBNdxUEMYERv/FUPuFKGJRQ0JYOB8fBNnvg+AmYmezHZO1gP6olF1
1mRgSErY3PKrAq5RYELr3mOkipjy9sMOzKwCRfLB/Z3oYwp5PkE1yXVF1uz5tClM
BEDaoFVHaywVaNDhG005LT9tmVJQ6Zcow839zM8gmYp1LGiBHdCenf09UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+D4lB6TRYwU3CVET3s683PY5JvMB8GA1UdIwQY
MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt
OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj
LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3OKU4Mc
Gqks1q+XW4TsvDeMk9RStDgkqhan6vXggZAgYPFJBEeja/9Php4Yx0zisjrTL93L
Jr+RjmtvzUhdao6GQ4gpN4PDRVMgoH31ElRZ1ZHak3fEOsqN53f7/NxR2JUOAc0E
Q/yGxoIO8Efopy5EiRmm1SsAiNPROiqcSBZwDHUGGrGwDGwq9f88QoQ4bxu+Qhzh
d5CyihIcPMA6nZoz15G8IPd6V0NQb+nmF9HPO+5HApu8FafvR1ftuyR9Wh05s0AB
8XSdpJFUBXDjLNOQNOR0elqrdMzZ8r9oaVPI+Gi0bW/CwVvvXdl1E5su+7ZbGjaw
txjrKYmRpzV4yw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:27 2026 by rpki-client