Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: zPO5Z6bn+f3qmwETIee0bFEnn0hnlL9ubPTGb8V9358=
Subject key identifier: 45:AA:83:16:19:9C:5A:CD:CE:36:5F:B3:6E:0E:B3:DF:62:FD:AB:08
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 019EBFC8BA0008B65F551A4DAB672EDDFF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 098A
Signing time: Sat 13 Jun 2026 07:01:03 +0000
Manifest this update: Sat 13 Jun 2026 07:01:03 +0000
Manifest next update: Sun 14 Jun 2026 07:01:03 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: Y2DvtddZ66MnB4N66nYYQFt1nIZqrHLM0lEAn/QkFHc=)
2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:ba:00:08:b6:5f:55:1a:4d:ab:67:2e:dd:ff:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Jun 13 07:01:03 2026 GMT
Not After : Jun 14 07:01:03 2026 GMT
Subject: CN=45aa8316199c5acdce365fb36e0eb3df62fdab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:64:2b:22:34:78:3a:40:83:b1:aa:db:a2:
dd:0a:28:7e:0a:8e:e0:e0:0d:4d:1b:da:0a:36:05:
d8:c7:a4:26:93:57:67:1b:bf:13:17:ef:6c:bb:15:
45:4c:b8:08:72:65:46:02:5d:6e:4b:4c:be:2e:84:
5c:27:7a:17:60:75:c3:84:c4:c4:af:f9:78:cd:3d:
11:5f:08:2c:12:01:40:e6:a2:ae:0b:9d:6b:6b:5c:
d9:7a:2e:8e:82:a9:7c:a7:47:cf:6c:de:e7:8c:ab:
68:29:ce:50:ad:0e:f0:13:1a:a9:cd:0d:ec:eb:b4:
41:e5:75:0b:c7:67:2e:88:e5:84:d8:1b:64:ce:95:
91:e4:bc:3f:86:d1:ba:7e:3d:95:a6:c8:b3:0c:61:
22:6b:00:57:7f:5d:14:95:e6:94:8d:0c:c2:f3:6b:
5f:b3:09:3b:64:55:34:cd:0b:71:7b:d4:fc:6c:c0:
96:c3:fd:21:45:70:67:af:18:80:3a:ad:5b:c7:06:
6e:ec:3c:4e:a2:1f:48:3c:be:8f:37:5d:87:f9:ad:
fb:19:16:83:81:25:a2:6b:33:65:7c:ec:5c:56:aa:
d5:5d:de:73:d9:50:fe:ea:a6:c9:6d:ad:e1:4c:94:
10:44:af:f2:49:a6:ed:2b:1f:a8:5d:36:a8:80:94:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:83:16:19:9C:5A:CD:CE:36:5F:B3:6E:0E:B3:DF:62:FD:AB:08
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:32:47:6e:56:f5:73:11:ee:da:3e:0f:99:5a:35:56:eb:
c8:e4:c6:94:15:f8:01:f2:eb:da:29:a3:85:6a:5e:15:04:fb:
49:e6:5c:fa:0e:40:24:61:e6:f8:eb:f8:fc:70:87:c9:48:f6:
22:28:b0:1b:df:c5:db:54:ec:ad:db:16:46:31:b1:28:cc:bb:
ab:65:f9:75:66:7c:1c:2f:2b:f1:9f:58:d2:8a:8d:08:11:59:
db:ab:6b:26:39:77:19:00:ce:40:6d:ab:ce:e7:a7:93:f7:ef:
44:5a:3b:78:34:67:02:31:9b:d0:bc:8d:89:2c:ed:48:16:a6:
0c:d2:a8:29:ef:9a:39:d6:75:34:ee:0a:80:d8:ef:18:bd:87:
df:4c:fd:fe:d5:a0:d5:1d:21:ce:13:a0:5f:7e:d6:88:55:d6:
a8:35:57:f0:eb:33:f9:6c:d0:db:4c:51:0b:f3:88:b6:d0:6a:
e2:e6:85:13:00:7f:57:ae:75:33:f2:34:65:33:48:05:9e:1c:
b7:1d:40:d8:68:8d:fa:c3:3f:f3:20:2d:29:45:92:2d:bc:94:
02:5c:bf:10:43:d9:54:e1:0e:95:a6:91:5b:d7:ba:de:16:31:
7f:76:e0:0c:58:88:d5:08:35:b3:31:fb:b8:19:ea:f0:f5:84:
65:b2:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:00 2026 by rpki-client