Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: qIaBUjf1fFcchsp8jMV46eem3XVZ3RsZCCxUmnMYJxY=
Subject key identifier: 87:46:D3:DF:89:B7:B2:B1:C5:A1:13:47:EF:35:C0:5C:8B:06:F9:49
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019D999910134AE7C56D4D95397455A4215E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 06D0
Signing time: Fri 17 Apr 2026 04:00:38 +0000
Manifest this update: Fri 17 Apr 2026 04:00:38 +0000
Manifest next update: Sat 18 Apr 2026 04:00:38 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: YYYCYzh2n2Mr3AjRCGU28VM8w5Rb2+RkzElVVEOjooA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:10:13:4a:e7:c5:6d:4d:95:39:74:55:a4:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Apr 17 04:00:38 2026 GMT
Not After : Apr 18 04:00:38 2026 GMT
Subject: CN=8746d3df89b7b2b1c5a11347ef35c05c8b06f949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:b1:30:b3:5d:cd:09:f1:33:0e:f7:b9:26:
53:82:77:b6:47:62:6d:26:84:04:87:eb:25:87:65:
bd:2d:81:57:62:69:38:29:0f:cc:2c:a4:1b:ba:9b:
95:fc:30:46:71:bb:f6:7a:75:11:09:3e:de:ec:2e:
2c:10:3b:39:cc:43:a0:31:ca:21:74:1e:c3:eb:01:
c6:70:9d:a5:a4:23:45:0e:45:d3:86:f9:a3:73:84:
29:c8:e7:b8:26:bc:c5:c6:0e:23:ce:95:d1:d1:a7:
63:19:86:5a:92:3e:1f:f7:8a:8c:50:6a:76:91:57:
1e:7a:c8:de:9c:7a:a9:98:4d:31:75:43:58:8a:0e:
e2:52:48:2c:3b:26:b1:b7:28:4d:d0:99:94:96:27:
71:74:13:1f:83:f9:a8:67:35:40:b7:49:98:35:a2:
71:bc:c4:1f:ca:e6:19:8f:8a:72:77:07:72:19:fd:
a9:f9:9a:ef:a3:e0:00:b8:35:62:71:93:6a:ce:81:
36:36:69:86:6b:a7:f3:20:fe:59:07:61:43:07:06:
19:99:08:45:e5:94:5d:3e:84:66:ef:fd:be:f5:f6:
27:56:1c:b2:89:17:bb:ab:ee:46:6a:b0:23:14:48:
16:9e:8a:8b:7b:f3:b7:17:f8:29:11:92:f3:08:bc:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:D3:DF:89:B7:B2:B1:C5:A1:13:47:EF:35:C0:5C:8B:06:F9:49
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:c9:d5:db:ed:9d:84:da:d8:3c:75:ca:9a:34:3d:b5:da:
6a:51:e4:37:6b:0e:4f:9a:45:a4:65:90:11:a7:e3:76:bf:79:
0d:32:cb:a8:41:5c:28:d5:fc:76:84:5c:a4:41:65:f6:e0:34:
a8:86:5e:73:52:7f:e4:d7:6e:04:43:14:90:9a:07:6f:ed:45:
c2:54:f3:52:af:ee:77:6c:1f:9b:48:e3:75:18:01:7c:1d:6b:
0e:f1:4a:bc:da:ac:9b:d8:8b:9e:81:7d:ff:d3:98:d2:91:46:
77:ba:55:a7:dc:05:f2:8b:b4:ad:08:3b:c6:12:90:52:f7:91:
fb:58:76:cb:67:df:91:fe:85:3a:ea:45:97:bf:be:3c:e6:aa:
64:6c:1e:0a:81:48:7e:e6:ce:87:fc:02:50:b8:d2:b8:45:14:
5f:9a:a3:5e:29:cd:72:5f:ec:1b:85:1b:97:d4:59:a3:b7:bf:
b7:7e:e3:a3:b0:9e:5a:1f:43:29:9f:f5:c1:25:70:43:67:20:
0e:6e:89:4e:55:59:79:8a:f0:a0:a7:92:9c:a8:97:62:78:a3:
88:28:41:c3:ba:12:15:80:5e:56:2b:f3:f3:96:be:46:a4:85:
96:92:73:3e:3e:e5:38:0a:d0:c5:a0:c9:b9:62:26:0f:60:24:
b7:52:ac:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmRATSufFbU2VOXRVpCFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTI1NjkxNjAzOTAzZWYyNDQ4NWNiNGJmMzVlMjgzMDc4
NjdiODMwHhcNMjYwNDE3MDQwMDM4WhcNMjYwNDE4MDQwMDM4WjAzMTEwLwYDVQQD
Eyg4NzQ2ZDNkZjg5YjdiMmIxYzVhMTEzNDdlZjM1YzA1YzhiMDZmOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquCxMLNdzQnxMw73uSZTgne2R2Jt
JoQEh+slh2W9LYFXYmk4KQ/MLKQbupuV/DBGcbv2enURCT7e7C4sEDs5zEOgMcoh
dB7D6wHGcJ2lpCNFDkXThvmjc4QpyOe4JrzFxg4jzpXR0adjGYZakj4f94qMUGp2
kVceesjenHqpmE0xdUNYig7iUkgsOyaxtyhN0JmUlidxdBMfg/moZzVAt0mYNaJx
vMQfyuYZj4pydwdyGf2p+Zrvo+AAuDVicZNqzoE2NmmGa6fzIP5ZB2FDBwYZmQhF
5ZRdPoRm7/2+9fYnVhyyiRe7q+5GarAjFEgWnoqLe/O3F/gpEZLzCLyGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdG09+Jt7KxxaETR+81wFyLBvlJMB8GA1UdIwQY
MBaAFA+SVpFgOQPvJEhctL814oMHhnuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYt
ZTNlMzAyMDA1ZDhmLzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYtZTNlMzAyMDA1ZDhm
LzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxXJ1dvt
nYTa2Dx1ypo0PbXaalHkN2sOT5pFpGWQEafjdr95DTLLqEFcKNX8doRcpEFl9uA0
qIZec1J/5NduBEMUkJoHb+1FwlTzUq/ud2wfm0jjdRgBfB1rDvFKvNqsm9iLnoF9
/9OY0pFGd7pVp9wF8ou0rQg7xhKQUveR+1h2y2ffkf6FOupFl7++POaqZGweCoFI
fubOh/wCULjSuEUUX5qjXinNcl/sG4Ubl9RZo7e/t37jo7CeWh9DKZ/1wSVwQ2cg
Dm6JTlVZeYrwoKeSnKiXYnijiChBw7oSFYBeVivz85a+RqSFlpJzPj7lOArQxaDJ
uWImD2Akt1KsTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:45 2026 by rpki-client