Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: pZHQQPPXlJp4Dd316kYFNCP7fvmOPLiCfd571jehhs8=
Subject key identifier: 4E:0D:14:94:20:6B:2C:BD:90:97:A9:B1:57:7B:BF:F6:E3:2E:3A:F3
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019EBEED139E06D1F9391529E2150B1137A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 1015
Signing time: Sat 13 Jun 2026 03:01:08 +0000
Manifest this update: Sat 13 Jun 2026 03:01:08 +0000
Manifest next update: Sun 14 Jun 2026 03:01:08 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: yD/fVrhZr+IktFvrnFheDkxRfm+q7uNy8npSXR/V5wM=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:13:9e:06:d1:f9:39:15:29:e2:15:0b:11:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jun 13 03:01:08 2026 GMT
Not After : Jun 14 03:01:08 2026 GMT
Subject: CN=4e0d1494206b2cbd9097a9b1577bbff6e32e3af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:f4:21:76:ff:ac:94:34:4e:86:3a:4f:54:
ce:d4:de:88:00:84:6a:b0:3a:17:48:55:1a:58:07:
10:8c:dc:7e:89:11:c3:ce:59:15:79:99:6a:7f:71:
5a:aa:2b:1d:be:9e:1d:4a:da:54:03:c2:d6:0e:54:
45:c9:64:10:85:c4:88:ef:99:f7:9d:47:89:db:f7:
d8:56:dc:b3:5f:20:c1:97:79:dd:08:8f:ad:1c:2d:
65:44:81:e9:45:c2:51:c6:da:5b:80:70:55:e0:48:
e8:d9:19:d5:da:5e:e1:de:57:64:a3:24:e8:1f:44:
4d:ce:c3:67:07:83:ab:45:48:33:8c:50:bb:cf:6a:
ee:e1:b4:76:d4:1f:6c:54:e1:b3:08:15:d6:a1:b5:
e6:83:b9:16:17:d0:c2:61:dd:42:ad:1a:60:8f:6e:
a1:84:c4:b0:97:8a:6b:4f:96:dc:f2:c0:e0:3e:cf:
1f:a6:38:29:0c:d2:9b:04:28:cb:73:b1:d3:a3:b9:
55:17:8b:6e:1f:d1:b1:06:3d:2b:96:51:b8:96:21:
72:0c:9b:17:ee:19:43:e5:d5:43:c5:8c:63:43:1c:
fb:67:c4:28:6a:0a:d9:ec:09:40:d1:b9:f3:b1:1b:
8e:7b:62:2f:18:2f:2a:0c:4c:c1:c8:21:b7:a1:b3:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:14:94:20:6B:2C:BD:90:97:A9:B1:57:7B:BF:F6:E3:2E:3A:F3
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:75:45:48:5e:9f:aa:24:bc:d0:5a:40:22:2b:ed:e8:1d:d0:
e6:5a:e3:c0:ff:69:1b:4c:be:b2:28:cf:7d:96:fa:19:46:4e:
70:43:8a:c7:4e:20:fd:c6:9e:22:d3:e5:4e:cb:30:b3:56:08:
1e:28:a2:68:89:c6:5b:c2:c6:ab:a2:4d:fe:2e:7b:d2:d7:3f:
56:db:07:4a:d7:26:f5:43:f6:3a:90:50:af:34:fa:c7:fd:87:
01:07:3a:59:05:12:53:92:1e:26:21:89:30:f4:30:cc:0a:52:
c0:ed:b9:ad:d8:d3:68:30:11:86:0f:21:fc:3d:67:24:22:56:
5c:e2:b1:d8:b3:3b:14:f2:5c:c5:53:26:0d:41:6a:4e:c0:76:
83:6e:8b:1e:6b:57:4b:4d:90:f1:6c:a8:1e:63:67:e4:c0:81:
a0:dc:93:e5:61:69:e7:3c:54:1e:85:b1:63:f4:36:4f:0c:8f:
32:40:c8:54:f6:6f:c5:31:d6:44:38:25:20:2b:2f:06:bc:30:
94:66:33:50:ef:37:ae:10:c6:f3:c3:2b:2b:54:1f:3d:fa:f9:
19:6e:6d:4e:61:59:4e:b1:f0:3c:1d:d8:dd:c0:ce:ef:15:20:
6d:f1:66:69:c7:de:d4:cb:99:cc:6f:3e:2d:cf:9a:be:b5:99:
6a:d2:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:32 2026 by rpki-client