Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: DWtzJvd/tQWy0nN067QX+Mi2ZMnHy+TtOl+J8fmFxMk=
Subject key identifier: 52:7F:FA:76:DE:4C:18:C5:12:2D:92:28:57:D0:B7:E6:5D:72:83:0A
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019D277258B66278D57C0C42B64DDE76D5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0F42
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: whCeuPzLEw2V6dCo6EbNuWiuApK62eq6oLRk8f3vyIM=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:58:b6:62:78:d5:7c:0c:42:b6:4d:de:76:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=527ffa76de4c18c5122d922857d0b7e65d72830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:65:83:57:90:43:f6:46:bf:c2:f1:44:31:
3d:a0:24:07:37:4b:2c:66:c2:0f:ca:79:93:95:ae:
8c:a9:3f:52:37:e8:1c:15:a0:84:a4:0f:11:a4:93:
36:d8:7a:63:b4:7f:13:78:38:e9:c2:37:24:5a:bd:
dc:f3:cc:f3:d7:2a:ca:20:00:4c:f4:2e:a2:a8:d5:
03:d2:84:cf:41:55:74:ee:6d:9d:5a:07:83:a6:8e:
cb:62:0f:f1:c3:11:34:8e:14:15:a8:2c:d5:b4:df:
9f:1f:e0:14:43:d7:59:6f:72:30:6e:41:ea:ce:38:
9c:61:89:41:ff:0e:af:aa:c6:ca:06:3e:38:94:cb:
a9:c7:30:73:ad:ad:7f:83:df:26:23:5f:d0:89:9a:
5d:e5:ab:80:44:64:72:fb:25:14:4a:94:c2:6a:69:
aa:07:e5:78:bf:f3:25:1e:55:8e:c5:43:f4:07:dc:
20:90:c3:e4:52:0e:fb:c9:e9:f4:d0:d5:ce:45:58:
1c:75:d5:57:bc:a8:5d:67:df:44:78:75:1f:a5:de:
81:50:b2:e8:ed:64:7a:bb:4b:f9:17:d0:71:2a:ca:
b7:2e:ad:20:49:ff:6c:51:b1:cb:09:ff:91:28:f8:
d8:6a:25:c0:2c:a1:14:84:e5:e0:84:ba:c5:3d:53:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:FA:76:DE:4C:18:C5:12:2D:92:28:57:D0:B7:E6:5D:72:83:0A
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c3:4d:b7:03:fe:bf:6d:12:bd:bd:28:9d:6f:58:6f:e4:59:
e0:b6:bf:cb:d8:10:89:c6:aa:3d:31:af:45:15:60:77:bf:be:
8d:1e:75:57:81:6e:00:be:61:01:9f:22:c7:bf:b5:51:bc:94:
2e:fa:ae:dd:66:14:0a:16:d1:40:87:cb:41:a1:21:80:4f:8d:
f6:5e:4f:f9:8d:bd:f0:e1:92:14:4c:28:14:69:72:f4:f8:60:
d0:c8:d2:77:be:41:12:b7:b2:ee:14:3e:f0:14:47:78:4f:27:
46:29:e4:52:a1:54:53:de:bf:d7:86:c1:4e:09:95:bc:5c:87:
db:eb:0d:d5:c1:e6:f7:33:91:3d:df:e1:0a:4a:73:04:d2:75:
f9:58:f9:ae:d7:64:1a:2b:43:81:ee:32:7f:cc:94:50:63:f3:
06:91:76:6e:c0:cf:96:1b:fb:6b:c8:c4:21:9f:9f:9e:37:55:
4d:1e:a0:3c:6d:41:32:f6:01:8e:94:09:25:33:3c:16:95:a0:
32:70:ca:80:ba:aa:46:73:06:8a:bf:f0:f1:ea:55:4b:b8:e0:
c4:7d:f5:92:4b:00:c3:d4:01:4e:44:ca:90:66:85:69:45:a0:
9e:4a:75:27:06:b4:f3:2d:ec:63:88:b7:fb:29:88:86:c2:b2:
b9:04:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:41 2026 by rpki-client