Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: 016dXH2JBt/DKWSCSynsBxJC16fDlpdNVqCGBkognn8=
Subject key identifier: 90:5C:F9:13:DB:66:A3:CA:27:21:95:21:01:6E:B9:3E:CD:EB:F3:28
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 019E1D90408B35873B5B3D7FDB5C7CD709ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0654
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: dUox3k53vqRv/CDk8Dh6yDVdz4ni7cZtE6LWMxSMV5k=)
2: F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa (hash: eVI8yrXfhvYwE0S/KV9hYg3kBr3HBxAmGlH35T90T1Y=)
3: tR9QLvg32zRpvf2oKCE6RFQVW0w.roa (hash: 9iUcyr09RC9S3vOC8uu0ZwV6C+S87j6TwJKmC2Yyv1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:40:8b:35:87:3b:5b:3d:7f:db:5c:7c:d7:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=905cf913db66a3ca27219521016eb93ecdebf328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:29:3a:9f:bc:a4:11:99:8e:6d:e8:55:3e:
25:a9:67:5d:42:90:1a:8c:b8:3a:09:3f:80:a4:d0:
8f:24:4c:26:37:47:47:16:eb:b2:1a:b0:11:9d:8a:
27:4e:33:86:31:e5:ec:d9:ee:fc:c0:fa:7c:b9:cd:
55:a8:0c:53:c9:7b:29:54:32:92:d5:ff:1a:4b:13:
1e:91:d7:18:77:77:8f:17:0b:d5:09:ce:50:25:60:
82:96:39:56:3e:47:28:bb:2c:4c:6b:4b:cc:54:ad:
0f:e8:68:4a:4e:e3:7b:5b:3e:af:c8:a3:a7:80:ab:
c1:32:17:3e:01:cb:7d:6f:6f:89:3c:5e:01:3b:be:
f8:e0:2a:e7:9a:dd:5d:f4:da:d5:c6:f7:70:65:a8:
f6:0e:d7:c4:c2:e1:8e:b8:bd:d3:eb:c0:40:1d:16:
7e:19:8b:3c:6f:b3:13:d4:09:f9:3a:01:33:e1:a3:
21:fe:d8:eb:9a:79:66:00:87:7d:0e:f9:e2:ca:aa:
5d:bd:17:cc:91:62:fb:16:c3:93:a2:3b:7b:38:b8:
67:7c:9e:0d:d4:63:83:8a:94:fe:f2:31:a8:ba:98:
09:f7:7a:2a:ce:fc:21:5c:08:48:4f:50:6e:99:aa:
85:53:97:3a:b0:e3:73:9f:cc:23:fb:31:7f:cb:65:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5C:F9:13:DB:66:A3:CA:27:21:95:21:01:6E:B9:3E:CD:EB:F3:28
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3d:ce:55:64:9d:5d:9d:a1:67:06:2a:07:00:4a:9a:55:fb:
6c:77:19:80:a9:9f:ce:72:1b:8a:10:81:2d:b9:15:30:1e:f4:
52:90:8b:38:fe:8c:29:eb:2f:15:d9:5e:fa:34:5f:de:fa:d2:
54:18:61:24:a0:3b:3f:3b:71:d7:06:8c:74:15:19:3d:c6:ad:
aa:f8:d2:c5:aa:70:52:ea:e0:53:63:1f:6f:e1:8e:41:43:7e:
28:70:0e:72:fe:f5:93:11:29:69:3b:a2:d8:a9:bc:fa:76:78:
31:fb:ef:41:e7:fa:6f:79:1c:72:dc:05:db:f9:f1:90:0e:74:
4b:f9:f1:71:36:a6:69:49:55:36:3a:1b:62:03:24:10:19:22:
55:e9:91:d3:cd:9a:01:7f:33:c2:cd:60:f1:d5:14:46:10:3f:
1d:07:5a:0f:b3:f9:4b:26:c1:74:fe:69:bd:b0:23:d7:24:06:
89:52:28:dc:d2:48:f9:4e:de:14:44:43:a6:ff:a6:f5:f9:b4:
f4:8f:88:37:32:8e:37:09:04:e9:28:0d:71:31:b1:0f:17:9d:
b2:a8:ad:bd:d1:fe:e9:e7:8f:98:ca:ee:3c:95:09:5d:0f:db:
bb:02:00:1a:0f:18:1f:e6:ea:0f:df:fb:d8:38:f8:74:4f:5b:
b4:2a:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:55 2026 by rpki-client