Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: PnNvm3RA0cPdSFlode0qges7ug3Xrt+lIBntK0eG0vA=
Subject key identifier: 0F:F3:C6:6A:FC:31:2B:AC:9E:E9:45:60:28:6A:88:12:9C:C0:A3:60
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019E1CEB87C59CD01280089CC757FF3F98CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0714
Signing time: Tue 12 May 2026 16:00:58 +0000
Manifest this update: Tue 12 May 2026 16:00:58 +0000
Manifest next update: Wed 13 May 2026 16:00:58 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: ECm9VCVQc9pG2Wui7Yho0Yw2liJsZyPuSFKlrOI1+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:87:c5:9c:d0:12:80:08:9c:c7:57:ff:3f:98:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: May 12 16:00:58 2026 GMT
Not After : May 13 16:00:58 2026 GMT
Subject: CN=0ff3c66afc312bac9ee94560286a88129cc0a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:fb:98:19:c3:86:1e:a6:c8:bf:c7:28:5b:
5e:c6:4d:3e:a9:db:fe:e5:ed:1f:d9:41:1b:35:fb:
ee:f7:9e:f2:80:69:b6:ff:4a:b3:bc:cc:02:8a:91:
44:cd:39:b3:d1:90:10:f7:1b:82:21:34:1b:2c:58:
c3:73:9a:de:e6:2e:a1:9b:39:60:9d:1f:d7:35:73:
42:04:3c:0e:72:06:61:ac:28:74:e5:7f:99:15:04:
df:5f:cf:15:10:15:97:b6:4e:60:f5:ab:f9:07:8b:
77:9f:31:dd:11:65:33:5f:96:cf:43:60:d4:99:70:
8a:93:89:e6:cc:14:5b:f9:95:60:e1:46:c8:f1:26:
69:51:42:e0:67:53:2e:f6:ae:9a:8e:99:fd:ac:74:
5f:c5:11:b5:10:ce:2e:3e:a3:f6:e7:cd:9a:c9:f5:
ad:2e:00:e4:4c:82:4f:8a:e7:ab:76:13:1e:99:f4:
8a:15:91:f0:48:90:e1:e5:a9:8d:aa:1b:f8:33:9a:
4c:67:da:04:29:62:a4:7a:7e:ad:00:d4:0f:ad:9f:
c3:3f:52:5d:dc:59:e8:60:a5:c5:89:5c:32:be:17:
9c:d7:d6:13:f5:59:b7:74:56:5e:58:2b:6f:bd:63:
89:f2:ed:69:32:83:4e:87:85:6f:87:91:46:72:27:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:C6:6A:FC:31:2B:AC:9E:E9:45:60:28:6A:88:12:9C:C0:A3:60
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:55:55:67:10:71:46:d1:d4:bb:25:9b:7d:40:ec:2b:04:8f:
bf:7f:d5:4d:d7:a9:a3:01:e1:d9:f9:78:96:d0:4d:f9:96:d1:
20:09:38:81:d0:99:e4:9c:bf:2a:17:84:de:12:24:39:20:9b:
ec:75:73:e6:5c:33:24:c2:7b:40:7e:ef:a7:70:f9:27:71:87:
8f:88:c2:c2:96:32:59:3a:7a:24:10:1a:bc:16:ec:02:ce:df:
ad:d0:84:43:57:98:04:4c:3f:30:2d:ba:60:51:6b:8c:5c:9d:
83:28:0a:81:c3:25:61:00:f7:c0:dc:47:33:86:dd:21:c0:bd:
77:92:5b:c5:cc:2e:43:75:3c:93:3a:84:1c:b5:ab:18:59:c2:
8d:62:48:e2:73:4a:7e:73:bb:4f:0d:e0:75:09:85:31:60:d6:
6d:e3:7f:41:7d:9d:e4:25:6d:c0:7a:b1:30:56:36:5f:bc:2d:
57:da:97:50:f9:97:02:0b:db:1b:f5:4e:ee:90:ea:ce:76:b9:
a4:f7:b4:d9:32:c7:6b:bb:cb:80:df:df:66:14:9f:f8:cd:0d:
f5:36:d6:04:b0:ea:7c:c2:01:3b:04:6b:30:7b:4a:bb:20:5e:
62:af:28:3e:cc:5b:17:ba:3c:aa:31:7d:16:e5:f2:cb:a7:04:
d5:73:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:56 2026 by rpki-client