Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: 4V9VVl6Wq1hoDUfwXyK+PHfp2zgWb7N6Y5XuaDREsjs=
Subject key identifier: E7:E2:5F:07:D0:6A:85:D8:69:2A:3E:05:19:8B:C6:20:08:4D:4D:D0
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 01A0C858EDF19AA69A93B8498D1875556C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 1123
Signing time: Tue 22 Sep 2026 09:01:06 +0000
Manifest this update: Tue 22 Sep 2026 09:01:06 +0000
Manifest next update: Wed 23 Sep 2026 09:01:06 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: N2L/V0F4tHp/O5o3zRFz1fsKP44dvf0KToQp9vVDcVM=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:ed:f1:9a:a6:9a:93:b8:49:8d:18:75:55:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Sep 22 09:01:06 2026 GMT
Not After : Sep 23 09:01:06 2026 GMT
Subject: CN=e7e25f07d06a85d8692a3e05198bc620084d4dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:e5:77:9b:7a:13:a0:12:2e:41:6b:25:0a:
14:97:1f:e7:03:9f:22:82:35:04:0b:cd:92:85:ff:
8d:f8:ce:51:86:28:de:fd:3b:54:ae:74:39:87:cd:
f7:bd:a9:ba:34:bc:4c:eb:b5:36:98:42:2e:71:99:
bf:18:bd:29:5a:6b:b9:27:b2:90:39:b0:08:df:d9:
c5:4f:dd:e5:f6:ea:7c:31:98:84:07:df:6f:f4:3d:
d0:24:02:a1:ac:f3:7b:ae:eb:0a:15:b0:74:ba:74:
f3:1c:71:97:bd:fa:60:27:b4:b2:a8:60:16:ca:a4:
d9:66:07:9c:b2:08:fa:b4:57:01:ec:13:aa:21:bf:
b9:d0:36:cb:c7:e7:f1:d0:41:52:01:9c:58:bb:f6:
c7:63:b4:33:06:cb:2f:dd:23:d9:a4:e8:3b:a6:7e:
8d:a6:9e:69:97:94:cb:c8:82:88:0d:bc:13:67:20:
63:d8:3d:2d:41:66:99:da:93:c8:43:1e:0d:b0:92:
22:ca:2f:b7:43:e3:51:9d:2e:d6:ef:ed:ca:2e:f7:
4d:10:58:22:7a:b7:0d:e5:a8:9a:6a:5f:27:0b:b5:
29:cf:85:66:5a:31:76:85:cf:51:45:84:02:3f:fb:
7b:bb:df:83:c0:d7:0a:1a:82:a4:7d:80:e2:f2:9c:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:5F:07:D0:6A:85:D8:69:2A:3E:05:19:8B:C6:20:08:4D:4D:D0
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:68:33:7a:f7:20:4c:84:96:8a:b6:11:ce:69:9f:8f:8d:
69:00:e2:ac:ed:65:cf:bf:f6:49:b3:47:c3:a3:bc:77:38:5c:
cf:ed:0f:e5:39:b5:cb:00:14:dc:60:99:57:d0:3c:de:20:71:
cc:8c:9b:46:79:b9:ce:44:65:9d:24:a1:c6:52:d6:c2:5e:9d:
e1:bb:5f:93:0c:b2:5c:3a:56:a1:c1:35:ed:12:84:13:14:b9:
ac:ca:5a:03:c4:6a:d2:94:c9:f6:73:f8:99:04:f6:59:eb:81:
54:e2:32:74:7a:4b:7a:48:83:50:7e:1e:38:7c:de:ac:6b:8d:
21:ff:bd:b5:6d:ca:f7:50:3a:20:a0:94:a1:c1:20:e0:c2:68:
01:d0:e8:a6:1a:ee:0e:47:e9:00:3b:8e:3c:50:e6:46:19:38:
1d:94:37:34:84:1c:0e:76:23:c0:02:45:08:90:26:8d:7b:75:
32:23:fd:46:02:0f:9c:e1:2d:74:34:6c:7a:14:e7:6b:fc:10:
fd:54:e6:eb:28:53:49:62:b4:f1:04:00:b3:d3:3e:48:dc:43:
d4:a7:84:39:04:02:05:7a:7f:9e:69:54:c3:77:cd:4d:4a:53:
97:89:00:9d:01:d0:6a:80:71:2f:b8:94:85:4e:a7:6a:f7:83:
c4:b9:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:04:35 2026 by rpki-client