Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: 3gLirji2ivqEzJzbUH3ZBYA2D77ZCWkAiNbPHtIIA5Y=
Subject key identifier: 03:9B:8A:A7:AF:56:10:06:44:66:E3:C9:2F:B8:3F:D5:15:EC:07:BC
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 01A0C74607A6CC00681882DF9CED8E06ADE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 0A97
Signing time: Tue 22 Sep 2026 04:00:50 +0000
Manifest this update: Tue 22 Sep 2026 04:00:50 +0000
Manifest next update: Wed 23 Sep 2026 04:00:50 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: Li6Qp9XfA+gBKXtY/QaERHhFVi9t9aVx8LrHMXttY8w=)
2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:07:a6:cc:00:68:18:82:df:9c:ed:8e:06:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Sep 22 04:00:50 2026 GMT
Not After : Sep 23 04:00:50 2026 GMT
Subject: CN=039b8aa7af5610064466e3c92fb83fd515ec07bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:f2:80:b0:ac:6f:3a:98:6b:fc:dc:41:ad:
6c:0c:96:19:64:c7:51:5a:ac:44:3e:fa:de:1a:7f:
c3:56:21:f8:b9:2a:39:76:59:7b:d9:f3:8e:52:d1:
4b:2e:82:37:e8:32:c0:f7:4c:34:23:80:ea:cf:2f:
7a:90:c0:24:62:e3:ba:b7:68:bf:11:7f:76:22:42:
32:83:41:91:76:57:ff:ac:af:ba:8e:33:ec:31:5d:
68:d6:45:f9:28:ce:1f:68:3f:a2:a2:54:16:89:2d:
1b:00:d9:a8:03:2f:ce:f6:80:1b:8b:71:78:34:71:
b5:ed:95:b7:08:e4:67:eb:ce:c5:15:38:c6:3d:24:
a6:ce:df:3c:d9:1e:fc:58:80:60:77:c9:3d:8b:d9:
df:ee:59:6a:51:4c:07:b4:62:50:9e:c5:1f:6b:4d:
d3:0c:06:de:76:86:c5:7e:f3:d2:f0:71:23:39:4f:
23:ce:da:03:b2:bc:07:76:09:5a:9f:f0:c0:6c:17:
f8:e5:1e:05:40:e1:fc:4d:68:43:00:8d:f2:53:6d:
d8:bb:f7:53:83:5e:66:00:69:45:6a:ee:3b:0a:6b:
7e:73:2f:32:f8:9c:87:a6:e0:23:26:97:c8:e4:61:
3b:9f:bd:41:b2:73:60:90:40:97:8e:77:c4:b8:15:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:8A:A7:AF:56:10:06:44:66:E3:C9:2F:B8:3F:D5:15:EC:07:BC
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:96:63:66:2a:fa:49:64:e0:35:09:f3:64:21:e9:ce:e5:
70:82:a5:62:e7:89:ba:bf:cf:46:6f:c6:7c:c9:92:55:41:5e:
70:27:b6:73:9f:09:65:03:8b:2e:81:89:1d:13:76:3f:09:05:
b3:80:3b:13:96:89:2a:d2:25:e5:d2:b0:55:7a:80:05:bd:c3:
fa:d5:72:0e:6b:23:ad:00:4e:39:a7:20:80:0c:c0:dc:82:cd:
6a:01:6d:6a:d6:a1:0d:a5:91:51:60:df:19:97:ff:73:56:f8:
cd:eb:53:e9:72:e3:a0:ad:94:b8:6b:a6:de:f9:c2:8b:d3:de:
13:2f:9f:f8:39:17:3f:44:5b:6d:93:06:90:33:49:d7:cd:83:
30:66:50:08:c7:a2:4c:5d:dd:87:97:1c:b7:13:f3:76:91:58:
49:b2:79:a2:c8:63:80:1a:4c:1b:2f:62:12:b0:92:56:5d:93:
4d:79:03:82:4a:28:8f:60:b4:84:8e:60:f9:e9:5b:0a:d5:4a:
75:dd:84:a3:78:d4:b9:bb:76:cf:d8:b4:7b:23:39:e7:a8:35:
16:b6:54:5f:e4:e0:61:18:81:f8:4b:68:c3:75:e2:f0:14:28:
76:a1:1b:e8:44:e2:7b:33:59:84:fc:c2:77:68:2f:37:0d:9a:
4a:72:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:47 2026 by rpki-client