Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: 2WoAUOyqwYRkUjcxu1iLoNhbHtezsa5aKg7/RopWXFs=
Subject key identifier: 1A:F3:FC:56:D1:90:2F:A3:7F:2F:89:E5:89:32:58:86:DF:29:3C:E3
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019F916C6639024225E8D884F59BB6E688A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 1082
Signing time: Fri 24 Jul 2026 00:00:28 +0000
Manifest this update: Fri 24 Jul 2026 00:00:28 +0000
Manifest next update: Sat 25 Jul 2026 00:00:28 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: 9hpck0W3NXfiwOuXOPzXvG0OsuOORgQaSOyH0Jm5iog=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:66:39:02:42:25:e8:d8:84:f5:9b:b6:e6:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jul 24 00:00:28 2026 GMT
Not After : Jul 25 00:00:28 2026 GMT
Subject: CN=1af3fc56d1902fa37f2f89e589325886df293ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:f6:e6:01:34:8f:0a:c8:03:6b:c2:75:d6:
58:3e:56:9a:05:d4:67:82:8f:ad:21:15:71:34:b6:
8d:c3:8f:bd:b6:6e:c2:a4:f1:77:c9:6e:36:ab:4c:
01:23:53:a3:29:06:66:80:29:33:5f:a7:f9:43:be:
2c:b8:1b:b5:49:00:9a:53:66:a8:e1:de:af:e5:00:
e8:92:43:d7:68:c0:23:6b:47:92:4b:e5:7a:15:54:
f7:8c:c1:fd:38:1d:37:3c:c2:85:1c:72:bf:56:03:
e0:11:88:15:c7:d5:2b:f2:53:08:f4:e1:87:2f:3a:
4e:43:2c:32:61:b2:fd:0e:23:38:fa:43:35:12:1d:
8f:30:b8:e3:8d:2b:81:fc:c8:9c:5c:20:ec:a7:e9:
95:04:37:36:ac:28:ac:94:da:a7:43:02:39:92:a0:
b2:48:3e:87:b9:d0:60:de:b8:e4:a6:d1:ae:d3:a4:
b2:be:de:ce:69:28:b7:d8:a5:f9:79:f8:54:2e:81:
a4:02:1a:1a:aa:ce:2c:b5:b1:56:13:7c:9b:a0:2c:
50:75:6e:ea:4e:a2:9a:18:27:db:da:da:77:95:66:
8a:4d:95:0f:e9:24:2e:1e:44:0e:88:b4:57:0f:ef:
df:58:eb:e5:3a:a7:a9:56:19:16:86:36:31:cf:2e:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:FC:56:D1:90:2F:A3:7F:2F:89:E5:89:32:58:86:DF:29:3C:E3
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:01:0c:01:e1:06:f8:4f:be:88:d8:dd:73:39:79:ce:60:
b4:e7:14:8e:4e:36:92:b1:be:f2:f1:98:3f:a0:12:76:12:71:
d9:e4:3e:54:d2:84:3c:9e:a2:b9:99:f5:59:34:a3:e2:6b:77:
33:4f:27:29:32:9b:08:c8:7d:3f:55:03:a4:71:e2:5b:aa:8c:
93:86:0f:bf:e4:0b:45:97:bc:03:de:80:93:3e:2e:25:18:98:
64:f6:37:68:3e:f9:25:90:26:cf:58:6c:dd:86:4f:6b:1a:34:
a4:9a:e3:40:34:0c:7a:07:9b:81:fb:08:61:e1:38:5f:3e:72:
48:9e:ab:3c:f7:bc:33:7c:50:18:6e:b2:71:3d:02:16:6f:4e:
f7:61:1f:fb:db:0b:d1:a2:51:00:49:18:3b:a5:4f:ae:2e:6a:
92:ef:8a:49:6a:0c:94:65:99:7e:1c:37:15:6b:b8:84:18:4b:
73:36:d1:a8:1c:98:4b:78:77:52:26:5b:6c:fe:44:02:7a:8a:
cb:e3:16:b0:fd:f3:7c:ea:4f:89:fc:44:a9:55:b6:45:0b:13:
a6:00:ad:2c:07:e5:46:41:b4:e1:06:a1:54:15:3b:73:65:1c:
56:3e:c8:17:44:5e:08:ec:9b:96:a6:2d:95:66:4c:aa:01:80:
02:1f:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:59 2026 by rpki-client