Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: YyhLWw7WFhagf4sOhu4agdStTdhTaqqnhHnyUKpzXa4=
Subject key identifier: 68:72:C6:CD:3E:02:83:BD:89:21:0E:49:5E:7F:1F:1F:8F:7E:A3:44
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019D9962885979D6DF09FDA4EB0BAFDA0B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 0515
Signing time: Fri 17 Apr 2026 03:01:04 +0000
Manifest this update: Fri 17 Apr 2026 03:01:04 +0000
Manifest next update: Sat 18 Apr 2026 03:01:04 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: MvxZzqLq1Nm/1VgAxKAatjVwccaHuCkrbFxRlASt2Gk=)
2: OfoBCzmtnFm0hwGR9A2PXWfAk1I.roa (hash: ayIedPzOzNkrSBeiWSMs33csQjbzHkEQVrKoALTU/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:88:59:79:d6:df:09:fd:a4:eb:0b:af:da:0b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Apr 17 03:01:04 2026 GMT
Not After : Apr 18 03:01:04 2026 GMT
Subject: CN=6872c6cd3e0283bd89210e495e7f1f1f8f7ea344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:73:33:6b:49:b1:2e:fb:21:91:8c:15:9a:
47:96:e4:1e:e6:8b:ba:27:fd:8a:0c:ee:4f:82:f3:
a0:ca:e3:2a:71:f0:03:01:b8:e6:ea:2f:9f:e4:8d:
4a:6f:cf:96:e3:39:07:65:b8:28:47:20:6b:e1:fa:
03:4c:b6:4d:42:5e:65:37:e3:cb:ec:1e:82:41:bd:
71:83:66:f4:20:4c:6f:b7:61:dc:d7:ef:c4:01:8e:
b2:64:98:f2:d5:ff:ae:42:8d:43:a2:4b:53:0c:6f:
74:86:03:16:bc:48:54:1f:69:ae:66:d5:40:71:12:
91:16:b2:19:1b:c6:22:54:43:f6:8f:53:79:2a:6d:
0c:08:00:43:52:d6:33:df:67:69:2c:87:de:82:70:
19:b3:7f:78:4e:d1:98:d9:01:ca:06:84:5d:fc:fa:
c5:09:d4:fa:a0:fc:df:aa:92:3f:c5:a3:d0:b4:b6:
1b:df:f0:c6:ba:64:c1:cc:ca:77:9e:c0:23:8d:3d:
44:dc:e6:07:96:63:11:fe:b9:a1:c5:c1:e2:9e:b7:
f2:b5:43:5b:32:51:9e:31:82:a3:22:14:73:7e:d3:
e6:7a:1f:76:6c:2d:ed:bd:fc:2a:1c:b9:68:1b:2f:
23:28:ac:b4:5a:e4:89:54:12:61:2c:8d:ca:7a:e2:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:C6:CD:3E:02:83:BD:89:21:0E:49:5E:7F:1F:1F:8F:7E:A3:44
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:37:ac:b2:1d:36:b3:ae:e1:82:47:a8:b2:af:dd:26:1c:
00:71:3b:34:be:91:32:57:a7:27:5a:a0:b4:b0:f2:f1:d4:27:
cb:bf:d3:45:ea:10:6a:7d:82:a8:05:1b:9d:f6:72:50:1c:61:
5e:de:fc:00:1d:48:ac:fa:4c:6a:94:4d:df:4c:3a:0c:f5:2c:
0a:56:18:52:50:3f:ed:e7:1e:80:34:c9:96:1f:88:47:a6:8c:
4e:d3:34:c5:58:3c:d3:23:2c:ac:f5:29:f2:a0:0a:b8:ba:a8:
36:31:51:ff:23:fd:49:3d:08:5e:b1:63:c1:93:0d:69:e4:fe:
0f:f1:65:bb:3f:9f:1b:fa:6a:26:d0:23:1b:27:df:69:64:dd:
a5:06:7b:e9:5f:ae:61:1b:8a:09:f8:db:f7:bc:8d:fe:f3:67:
f1:27:9e:bc:53:11:8c:c4:ff:e4:90:99:07:bb:81:ff:c0:de:
5e:c7:4a:45:b3:e4:43:7f:c8:a9:c4:7f:dd:81:0f:a0:12:90:
0b:6f:3d:67:34:88:cc:a5:5d:51:73:67:5f:81:1d:c5:1b:52:
ef:58:24:2e:54:95:cb:c7:29:e8:5e:95:10:23:05:ef:df:4f:
f4:14:fb:e6:36:0a:92:fb:72:3e:a2:95:eb:bb:96:49:cb:1f:
e4:cd:af:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYohZedbfCf2k6wuv2gtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGU0M2NkMWY4YWY0NWM2ODk4NjdkOWY1YTg4MWEyYWVj
MzRiMzEwHhcNMjYwNDE3MDMwMTA0WhcNMjYwNDE4MDMwMTA0WjAzMTEwLwYDVQQD
Eyg2ODcyYzZjZDNlMDI4M2JkODkyMTBlNDk1ZTdmMWYxZjhmN2VhMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51zM2tJsS77IZGMFZpHluQe5ou6
J/2KDO5PgvOgyuMqcfADAbjm6i+f5I1Kb8+W4zkHZbgoRyBr4foDTLZNQl5lN+PL
7B6CQb1xg2b0IExvt2Hc1+/EAY6yZJjy1f+uQo1DoktTDG90hgMWvEhUH2muZtVA
cRKRFrIZG8YiVEP2j1N5Km0MCABDUtYz32dpLIfegnAZs394TtGY2QHKBoRd/PrF
CdT6oPzfqpI/xaPQtLYb3/DGumTBzMp3nsAjjT1E3OYHlmMR/rmhxcHinrfytUNb
MlGeMYKjIhRzftPmeh92bC3tvfwqHLloGy8jKKy0WuSJVBJhLI3KeuJYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhyxs0+AoO9iSEOSV5/Hx+PfqNEMB8GA1UdIwQY
MBaAFNXeQ80fivRcaJhn2fWogaKuw0sxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYt
NGQwYTdlYzA3Nzg2LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYtNGQwYTdlYzA3Nzg2
LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUI3rLId
NrOu4YJHqLKv3SYcAHE7NL6RMlenJ1qgtLDy8dQny7/TReoQan2CqAUbnfZyUBxh
Xt78AB1IrPpMapRN30w6DPUsClYYUlA/7ecegDTJlh+IR6aMTtM0xVg80yMsrPUp
8qAKuLqoNjFR/yP9ST0IXrFjwZMNaeT+D/Fluz+fG/pqJtAjGyffaWTdpQZ76V+u
YRuKCfjb97yN/vNn8SeevFMRjMT/5JCZB7uB/8DeXsdKRbPkQ3/IqcR/3YEPoBKQ
C289ZzSIzKVdUXNnX4EdxRtS71gkLlSVy8cp6F6VECMF799P9BT75jYKkvtyPqKV
67uWScsf5M2vpw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:50 2026 by rpki-client