Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: YyqKEoS72iIndO8Trd3xMwx2GebFxezWt3y5oiDUZdk=
Subject key identifier: 02:B8:B7:C0:23:56:8F:17:8C:03:07:82:AB:8C:49:15:A5:BD:6B:7B
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019CABD97DAF4AFABDB880CE4A8662D96797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0F02
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: 8B9NTCBdEGOwcJdgPvPVAhw3/ZjcQZuH0aLIa1bVEnE=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7d:af:4a:fa:bd:b8:80:ce:4a:86:62:d9:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=02b8b7c023568f178c030782ab8c4915a5bd6b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:e7:c8:88:3b:a9:d9:51:e5:93:f7:b5:70:
59:f4:cc:36:df:86:fa:e7:c6:de:88:98:5c:c4:80:
16:67:ff:22:d4:87:db:59:3b:44:b2:5e:66:5a:dc:
27:d7:e6:be:4c:27:91:c3:a9:27:ab:8e:73:d8:16:
4e:73:98:c1:c2:68:7e:e5:bc:01:85:d2:1f:43:b0:
15:81:10:1d:a0:48:c1:64:8a:57:f2:cc:dc:16:72:
24:fb:a1:3c:c6:52:22:86:45:0f:05:48:e7:59:00:
75:dd:6b:00:a6:c2:47:f1:90:64:f1:e7:c3:8e:8b:
11:f7:6e:75:a1:99:8b:b4:fe:0f:c0:01:61:89:c8:
56:41:65:3c:34:69:71:1d:ef:c5:b5:98:45:45:0e:
b1:b8:95:b5:98:6a:45:89:89:59:1a:86:b9:2e:1b:
da:b4:d5:99:3f:b2:fd:f8:f1:73:17:5e:43:ab:5d:
88:4a:63:0f:fc:5d:cd:48:21:a7:d8:aa:1a:b1:6e:
a2:2a:0c:02:be:44:1f:14:b8:79:9e:7d:21:68:6e:
ab:f4:c9:6f:54:70:50:fc:e1:1b:0f:c4:48:6d:8a:
02:5b:0e:a4:b1:d3:75:15:b5:86:c6:ef:97:4c:a6:
21:7a:a9:97:99:18:06:d8:75:a2:5b:ca:b2:37:7c:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:B7:C0:23:56:8F:17:8C:03:07:82:AB:8C:49:15:A5:BD:6B:7B
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3a:18:a7:f5:88:c2:3b:cd:0e:77:d0:86:c4:2b:8f:19:81:
0a:15:5e:78:e4:25:d6:1f:6f:da:ff:9c:eb:e7:93:c7:07:d1:
39:91:0b:86:b0:bf:8b:5b:b5:ad:26:c7:51:2a:b9:90:a2:c7:
e8:22:bf:26:ec:b5:c3:ae:ac:b4:78:59:1d:6a:dd:2a:61:b5:
60:df:42:38:16:5c:31:b2:0b:b7:2b:59:9f:9c:d3:a7:b4:e9:
2f:ac:91:08:21:2e:29:05:53:c5:0d:fb:3a:eb:c5:f0:74:71:
84:7e:f6:5f:04:2d:ff:a9:f5:42:04:93:11:25:88:00:68:19:
2a:fb:38:3d:4c:52:1b:fa:46:07:56:99:53:ca:67:80:2a:6b:
bf:54:1c:c6:1f:a9:df:b5:7b:f8:a3:ea:c1:f1:43:32:e4:a5:
a2:ff:07:56:9a:52:c2:9d:ea:5a:58:58:66:b0:62:8d:86:13:
c3:28:76:5c:a6:9f:6d:b8:8e:3a:7f:a1:ce:ae:5d:04:db:95:
e3:21:9f:50:40:73:6e:e1:05:6d:ec:1c:41:8d:93:87:9e:7e:
9c:3c:95:72:5f:e9:d2:a3:b8:c5:81:77:03:eb:3b:e9:a9:e9:
25:5d:65:ad:27:a6:0e:d7:a5:a8:00:4a:7e:70:f5:d4:fe:72:
9f:61:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:07 2026 by rpki-client