Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json)
Hash identifier: ZIYkeJtVxQLdVd8A8rNceCg4rtK6origNYNR1tOSzOQ=
Subject key identifier: 1D:8F:10:2E:F8:44:7E:72:86:86:D4:92:61:0E:78:CF:64:C7:5A:D1
Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Certificate serial: 019E7DB257A528DE401825CBA2A424571A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
Manifest number: 01DF
Signing time: Sun 31 May 2026 11:01:40 +0000
Manifest this update: Sun 31 May 2026 11:01:40 +0000
Manifest next update: Mon 01 Jun 2026 11:01:40 +0000
Files and hashes: 1: C2alc4W0qUaR_O2dT6t7YsOa3tU.roa (hash: XKnTKvL5wXPD8yEbAMnox+MgSzxyy4w+ZP5niGbD9/U=)
2: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: nXbqdvk8zOBDr5qMw1dKtQm7mDlhkItR0G08T5NvIlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:b2:57:a5:28:de:40:18:25:cb:a2:a4:24:57:1a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Validity
Not Before: May 31 11:01:40 2026 GMT
Not After : Jun 1 11:01:40 2026 GMT
Subject: CN=1d8f102ef8447e728686d492610e78cf64c75ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:2c:1a:d4:7f:54:87:37:c0:a3:fd:e2:e0:
e8:c2:f4:79:07:c2:5a:b0:37:a2:95:b1:82:78:01:
07:d5:3f:54:81:cd:ea:48:0c:86:58:88:64:38:00:
9a:e6:b1:3d:ab:b1:4c:75:c3:aa:93:ee:07:97:b6:
99:d7:44:9c:5f:34:bc:8a:c9:25:57:87:08:bc:34:
32:9f:e7:3f:f1:3e:f5:78:1c:d4:f5:a3:18:b7:87:
7e:d9:ce:e7:be:68:b9:4f:af:24:40:fd:09:cb:56:
ac:01:7e:94:9d:00:83:80:67:43:9b:53:83:f6:0a:
92:21:70:79:5e:7f:d4:ee:d3:ca:26:30:2f:99:db:
e0:f3:1d:68:ad:4f:bb:0d:43:15:9c:d4:ca:c9:6a:
3a:76:dd:64:53:43:09:ce:35:3e:43:4a:40:00:e6:
d8:91:53:26:eb:a0:1d:ad:68:81:96:01:62:16:82:
1a:d7:c3:28:e7:b5:fb:f2:53:bc:ca:d3:64:7d:57:
05:e6:61:5e:f3:82:0d:6a:36:1d:92:6a:2f:b3:a7:
f0:fb:87:98:89:2f:bf:d9:f8:65:79:b3:e9:6f:08:
fd:57:11:93:09:a0:c6:82:84:b4:80:30:3f:df:f6:
ca:f8:f6:36:c2:f9:c6:1c:44:c6:78:4b:69:33:9d:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8F:10:2E:F8:44:7E:72:86:86:D4:92:61:0E:78:CF:64:C7:5A:D1
X509v3 Authority Key Identifier:
keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:53:b2:f0:6b:fb:76:f2:89:d8:4b:13:73:30:a4:16:42:8c:
71:9c:34:02:a0:79:1b:20:f9:ed:a3:4b:0e:a5:86:6d:82:c7:
e8:12:e3:dc:82:fa:2d:00:3b:5f:4f:e6:c2:66:72:20:a4:77:
bc:2f:b8:80:c9:d8:be:d4:70:d4:36:e2:7c:50:5c:34:92:af:
45:43:a5:ea:c1:51:3a:76:a2:ec:a2:a9:77:5f:9c:4c:92:a6:
a1:60:49:6c:62:07:50:06:71:e8:37:62:d4:d1:68:05:77:60:
7e:3c:9a:2e:dc:13:f5:a8:03:34:46:12:52:3d:d9:d5:3f:79:
5c:5a:a4:93:ea:9d:d6:c4:f6:50:73:36:1b:ac:ab:ef:4f:a4:
c5:bf:7a:c3:39:5f:dd:0d:95:74:d5:f6:df:59:b9:8c:99:00:
46:87:67:aa:c1:cb:15:fe:ee:9a:c4:66:2e:73:01:92:d1:62:
a4:8b:fc:40:af:e6:a4:7d:df:ee:da:75:23:02:8c:41:77:4e:
12:f1:06:8b:35:bd:a1:80:72:41:6e:74:dd:b7:c8:cc:50:c8:
14:19:57:f6:ca:c5:01:68:c0:1c:36:e8:2e:25:f9:70:23:e5:
00:75:b5:39:a5:cd:64:09:16:40:9d:2e:18:a6:9f:e3:ed:38:
fa:55:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:49:09 2026 by rpki-client