Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: 32iB4M2zfGLwUTuj4iM3hqvMHB46EPDoOUycQxJacIE=
Subject key identifier: 40:99:AE:EB:22:0A:48:BC:00:94:26:8C:FA:A7:FE:1F:93:8F:25:F8
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019D9961F77D01F49A1C7656F1543ED4F092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0F7D
Signing time: Fri 17 Apr 2026 03:00:27 +0000
Manifest this update: Fri 17 Apr 2026 03:00:27 +0000
Manifest next update: Sat 18 Apr 2026 03:00:27 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: SKsOc7jirg+yakrMvfy6yOCvfCosg7bwSKAjBwXDizE=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f7:7d:01:f4:9a:1c:76:56:f1:54:3e:d4:f0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Apr 17 03:00:27 2026 GMT
Not After : Apr 18 03:00:27 2026 GMT
Subject: CN=4099aeeb220a48bc0094268cfaa7fe1f938f25f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:67:60:3f:0e:d3:d8:46:cb:0c:5f:6d:8a:
f0:63:0d:5b:00:3a:5d:46:25:55:cd:7b:43:47:13:
8d:ec:19:5c:6f:de:52:80:77:87:d9:48:f3:6d:6a:
65:c9:92:68:01:2b:59:f9:a9:0b:d3:35:ca:9c:b4:
28:a7:1f:ad:3b:c1:d5:87:b8:df:69:df:13:70:c9:
02:16:eb:b3:ae:23:37:1f:b1:6a:ac:f1:c3:bb:d3:
69:0f:36:b2:e9:15:10:ef:67:02:8a:f5:ab:7d:71:
f9:6a:83:00:08:e1:9b:05:f1:77:d6:04:d7:8c:81:
0d:d4:3a:e2:ff:4f:af:aa:45:8d:d0:ab:25:4a:bf:
e9:3f:35:ba:ae:37:8f:f2:4f:da:34:5a:03:60:bb:
a8:ce:8e:04:41:29:ef:fc:f3:3a:11:0e:08:9d:e6:
44:c7:05:3c:0a:2e:9a:b7:1b:2f:47:f0:55:be:93:
8f:3e:41:1f:e8:73:52:9e:b3:24:27:f0:ed:07:ce:
d7:9c:cf:96:ad:aa:21:ef:19:3a:d9:19:b1:04:24:
38:b0:2b:7f:81:69:a5:63:83:df:04:55:c8:44:71:
68:2e:a0:1e:5b:50:de:79:6e:4a:f1:98:d9:ea:c2:
c2:a1:42:68:8c:c4:ba:33:d7:26:3f:92:a4:98:65:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:AE:EB:22:0A:48:BC:00:94:26:8C:FA:A7:FE:1F:93:8F:25:F8
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:71:22:36:e9:64:1a:eb:58:cd:ae:ea:e9:4e:86:58:ca:64:
1e:f9:45:30:31:b7:96:7b:a0:29:aa:9c:39:01:e8:5e:9f:c7:
8b:21:10:50:fe:85:95:32:71:e8:6d:e1:66:57:9d:e9:b0:b7:
24:0f:75:af:bf:e3:d6:7d:e5:f6:b7:98:20:5e:77:a4:72:2e:
5f:7f:47:7f:84:bd:25:04:84:56:87:38:c7:66:55:c4:dd:58:
a7:06:6a:d4:f2:07:55:ca:66:cf:89:19:85:8e:42:d0:39:89:
9b:7f:e6:43:1e:ff:df:ed:6a:a5:09:62:b7:8d:b5:13:35:33:
4b:b9:9b:1b:d4:80:97:cf:aa:41:16:e3:dc:a4:63:f8:d0:49:
ef:32:32:e0:29:94:f1:9a:a8:c4:7a:1d:53:84:00:08:0a:e5:
dc:df:cb:b1:9d:ae:e3:07:c0:da:2d:58:b7:d3:4e:b6:a1:ab:
e1:74:e1:88:3a:4f:eb:c1:24:29:36:09:b3:58:e4:4f:64:41:
a3:ab:fa:47:5c:6d:f6:56:ca:62:e0:69:df:0f:b5:57:3b:27:
cd:98:f0:dd:71:04:ab:ac:d5:a8:50:16:28:bf:67:bd:16:3f:
6e:1e:4c:7f:14:34:b1:f4:09:5c:10:a7:5c:b3:c2:10:ae:a2:
07:e7:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:04 2026 by rpki-client