Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: jemTmCT7mHyvriEwDbUTLVhY/+vKV9JlsDKhnMkA6Do=
Subject key identifier: 95:A1:8A:54:4F:3E:6F:0F:68:28:57:E9:29:B5:4D:D7:76:BB:50:9D
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019E1EA33672D2F7366126F65AC79D78FEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0FC2
Signing time: Wed 13 May 2026 00:01:13 +0000
Manifest this update: Wed 13 May 2026 00:01:13 +0000
Manifest next update: Thu 14 May 2026 00:01:13 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: FGj5OfYILEoKw5WiVKY57JcUN/nB2SIFB4Uyw97JWGI=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:36:72:d2:f7:36:61:26:f6:5a:c7:9d:78:fe:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: May 13 00:01:13 2026 GMT
Not After : May 14 00:01:13 2026 GMT
Subject: CN=95a18a544f3e6f0f682857e929b54dd776bb509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:ad:c4:f2:d3:9b:b3:c5:af:81:37:ad:07:
ce:04:c9:31:e0:2e:87:02:2e:83:7e:c9:ee:f6:cc:
12:0a:b4:d8:d7:7f:4e:48:59:04:10:3f:16:4b:2e:
c6:9a:59:d0:62:8a:2d:d1:96:28:47:96:e4:cd:46:
5c:d3:30:35:dc:e1:ed:95:e9:f9:1d:de:3d:99:b0:
ed:ba:44:a6:c2:bc:47:47:8d:64:7f:ac:39:11:97:
ae:21:71:b1:a0:1e:ba:31:c6:32:81:2a:47:88:22:
8f:18:91:1f:5f:6c:0e:53:7e:98:06:d7:6e:97:35:
a8:33:32:fe:18:91:26:75:55:31:63:39:c1:89:af:
cd:a2:65:87:1c:8c:b6:3b:8e:9b:8d:78:90:97:c5:
a2:48:bc:97:6d:11:47:1a:2d:9a:7c:a0:ab:9a:c0:
35:87:c4:a5:4f:62:3d:85:79:fc:74:69:c8:c3:8e:
ee:51:92:52:18:f1:02:04:f9:38:32:c0:a6:67:59:
5e:e2:43:45:0d:1f:20:35:df:c5:a7:53:8b:69:c1:
db:99:52:8e:d8:d3:40:1f:b6:23:4e:c6:ca:cd:c7:
d2:75:45:d0:72:ae:33:49:a3:e7:c6:bf:0a:b8:28:
35:9f:92:ac:a6:52:aa:fb:06:36:30:bc:85:65:cf:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:8A:54:4F:3E:6F:0F:68:28:57:E9:29:B5:4D:D7:76:BB:50:9D
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ef:8b:ab:67:37:94:3a:e2:1f:99:cb:35:bb:1d:16:bc:9b:
95:43:25:8d:79:ff:00:33:51:57:2e:27:7d:7a:40:b6:a7:fd:
ca:1e:00:99:39:c2:c9:6c:6b:f9:db:cd:a9:0d:b6:b8:f6:2b:
d4:ec:6e:ff:e0:40:e4:1e:67:94:0b:38:30:9f:61:1b:69:f1:
84:9c:65:7a:47:f9:65:18:79:37:fe:d5:65:ae:8c:bd:4e:cf:
02:3c:ee:db:38:2b:5e:5b:ef:0d:4a:be:1c:3f:71:00:3c:80:
5b:7f:ac:29:25:37:9b:48:39:cd:1d:54:e8:ad:0d:a1:22:25:
f5:f7:74:32:68:bf:46:92:09:05:60:74:65:b7:22:af:86:37:
ca:94:c5:e2:b1:d0:48:5c:f6:0e:17:71:0d:df:a5:5c:06:9d:
56:43:07:db:b4:19:b2:24:50:b4:68:82:e7:59:81:a5:11:44:
d6:87:56:fd:5a:ac:e5:0b:69:5d:12:32:94:25:b4:ab:f0:c7:
82:f1:f7:ed:14:7f:31:27:bf:e3:9c:da:ac:a2:1b:4d:75:bc:
99:78:41:d5:16:54:cc:97:8f:f9:a7:06:76:88:62:f9:7d:b4:
8b:a6:1b:ef:63:35:3f:8b:fa:7b:89:01:78:32:8d:d7:1a:11:
17:76:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:40 2026 by rpki-client