Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: 1+Ro2QBBUyREUxDUGxeWFwZusC/I1nkvC2zxg/QThss=
Subject key identifier: E3:2A:69:A0:57:71:C1:1B:2E:E5:4E:32:E1:12:8D:D0:CA:FA:7C:4D
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019EBEECD80E5CFEA5C6BA2409B200DF5A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 05AD
Signing time: Sat 13 Jun 2026 03:00:53 +0000
Manifest this update: Sat 13 Jun 2026 03:00:53 +0000
Manifest next update: Sun 14 Jun 2026 03:00:53 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: DyBwMlWBmHrsInsWQir+DCr9WsDStUDZ9mAQvCIIanw=)
2: OfoBCzmtnFm0hwGR9A2PXWfAk1I.roa (hash: ayIedPzOzNkrSBeiWSMs33csQjbzHkEQVrKoALTU/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:d8:0e:5c:fe:a5:c6:ba:24:09:b2:00:df:5a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Jun 13 03:00:53 2026 GMT
Not After : Jun 14 03:00:53 2026 GMT
Subject: CN=e32a69a05771c11b2ee54e32e1128dd0cafa7c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:d3:6e:47:05:71:d0:a2:0e:2f:d6:4e:ab:
22:98:88:29:b9:a0:3e:c4:14:79:8b:57:e3:c7:f2:
75:ab:0c:95:46:0c:79:24:5c:97:0e:3d:6d:1e:2d:
66:67:e6:f3:0d:43:6c:d0:85:d7:44:e9:73:25:3f:
23:89:3f:51:f3:dc:07:9f:b1:e2:f4:a9:1f:2c:c0:
56:79:9b:4b:9f:4e:c8:04:78:c4:f5:f5:d0:52:68:
3e:0a:a1:3f:c3:1e:73:89:ad:1d:0f:7c:fb:e9:1f:
ad:1c:01:b9:0b:53:e2:41:45:ef:82:28:b2:a4:eb:
35:db:70:d7:4d:1f:7d:80:6e:de:e0:bf:3f:2e:9f:
45:31:13:09:60:a4:a4:2a:ef:75:cc:2a:d4:c7:a5:
4b:1e:1c:64:e1:d8:9c:95:e8:10:df:79:4d:6e:06:
3c:94:6f:4c:35:be:ed:2e:9e:e9:c7:f2:cf:a3:a3:
b6:ee:f9:d1:0a:ef:b4:5b:f5:be:cf:89:2b:bd:ba:
09:23:84:9a:5e:93:1e:ba:5b:44:7d:de:ec:f2:9b:
db:b1:99:f9:14:eb:66:2c:fe:03:ea:a1:d4:af:99:
53:d0:78:c0:e1:9a:91:62:dc:b4:9a:9b:a9:8e:46:
51:01:bd:0e:13:a6:b4:4b:e4:cd:64:b9:21:63:a2:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2A:69:A0:57:71:C1:1B:2E:E5:4E:32:E1:12:8D:D0:CA:FA:7C:4D
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fd:10:e0:9e:79:f0:23:6d:1a:b5:22:de:8a:43:91:d6:6d:
30:6b:8f:98:23:3b:5f:a1:aa:df:66:f7:59:f6:ca:ca:23:ac:
2a:b4:60:73:9f:5e:71:03:54:08:43:c0:01:40:ad:a6:db:a2:
c7:c1:84:6f:9d:10:89:dc:ce:00:8d:6e:07:49:f6:d1:56:da:
90:27:f2:f1:59:7c:90:c7:e5:ec:4e:d0:00:40:cf:92:f6:fc:
10:96:a9:6a:60:25:0f:e8:4c:0e:dc:76:3a:39:e8:8f:f8:a9:
29:fd:f9:9a:8c:62:1c:f7:d2:8a:5b:21:53:14:f1:e5:e3:bd:
ff:56:a8:a0:a2:f9:df:c4:8e:5a:96:9f:7a:92:de:3a:cd:c4:
67:6b:f8:0a:50:68:fc:8a:96:32:bd:60:46:b0:92:ef:ea:e6:
8e:74:f5:4c:46:8d:94:f9:10:57:25:fc:a7:d3:81:db:b0:84:
0e:9d:3a:d3:ad:bf:69:4e:bb:29:51:ba:2d:31:ec:8c:89:aa:
22:43:ee:9b:3e:6e:83:1c:e6:71:70:e4:ff:2b:f1:e4:04:ad:
89:f4:6e:3f:8d:ee:cb:0e:2c:27:83:31:9b:73:83:a9:6e:52:
5c:5a:e6:d6:23:12:23:60:0f:e2:67:cd:fc:9c:e3:99:89:76:
ea:01:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:04 2026 by rpki-client