Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: 5pfJcGNMjhxOi6O+Y68rLS2tjBsvmgJNTKGZtv9egDE=
Subject key identifier: 42:90:E9:3F:33:E5:04:A5:2C:57:88:6C:95:4A:E8:D0:5C:56:D9:07
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 01A13F02542029545A63F5F9094F824ED755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 0AD5
Signing time: Thu 15 Oct 2026 10:01:19 +0000
Manifest this update: Thu 15 Oct 2026 10:01:19 +0000
Manifest next update: Fri 16 Oct 2026 10:01:19 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: xHf7vCIUcINJ1BUoqE3V5M+K2GpYAJhYX3l0ldZ0rYk=)
2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:54:20:29:54:5a:63:f5:f9:09:4f:82:4e:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Oct 15 10:01:19 2026 GMT
Not After : Oct 16 10:01:19 2026 GMT
Subject: CN=4290e93f33e504a52c57886c954ae8d05c56d907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:d0:fe:a3:28:4e:79:c6:55:d4:db:7b:be:
89:34:25:4e:ba:5c:24:d0:c1:67:5c:53:f0:62:1d:
a6:d0:9d:42:15:71:98:9e:47:0e:15:17:36:93:1e:
6c:b4:09:1e:bc:ba:e9:26:19:b6:c7:09:73:b8:60:
5e:da:06:30:83:2f:79:a4:22:d9:94:4a:3c:8a:d1:
43:ef:28:49:1d:4e:4d:6d:92:8e:16:cc:63:a3:21:
31:21:12:b9:3f:f4:19:6f:5e:f5:30:e4:0a:c6:12:
83:34:0d:50:27:25:6d:0d:98:cf:2b:c3:e3:c4:89:
01:a0:91:7b:29:fa:7d:4a:a0:29:65:9f:cb:01:a0:
36:ca:70:33:29:d2:69:9c:24:80:e2:e4:f8:7c:12:
41:fc:47:03:f4:18:7d:a1:9e:f9:7e:36:93:3f:5e:
bc:c1:7a:6a:39:20:46:22:c0:a6:fb:bb:37:e4:20:
5e:25:a9:b1:27:dd:83:1a:ef:5a:da:c1:4f:d0:ae:
51:a7:1f:a7:66:d7:96:c1:71:a3:f2:e2:03:f4:a4:
c3:7b:d2:20:97:95:ac:b2:76:b1:c1:61:60:28:b0:
c2:6b:cb:08:a1:ea:a6:0e:8b:57:4b:60:e4:63:b5:
01:ba:86:ad:37:f8:c1:41:b0:2e:01:06:a1:21:40:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:90:E9:3F:33:E5:04:A5:2C:57:88:6C:95:4A:E8:D0:5C:56:D9:07
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:8c:e8:bf:92:39:3b:3e:29:d6:1e:8d:73:2e:a4:1e:7b:
aa:72:ff:09:17:fa:8d:2c:c0:bc:4b:51:28:ca:29:8c:41:d4:
44:b3:91:79:c3:c6:8e:c7:cf:c2:2e:4c:58:19:a7:ac:49:0c:
d5:5e:8e:ff:26:26:8a:e7:e6:b4:ac:bc:64:d7:f9:1f:51:54:
6e:43:e9:e8:33:f4:7f:be:b3:ee:3b:8a:1e:21:74:8a:0c:8c:
ae:83:7c:bf:38:4a:ef:a5:f5:8b:c9:cd:56:c9:ba:f1:f4:f4:
95:d7:1a:22:44:e6:8c:c2:94:a4:c0:fa:2d:7e:60:2e:fb:fa:
66:d5:70:5b:fc:1f:30:2a:bf:04:c3:71:8f:0e:84:58:9e:b1:
9f:fb:bd:23:7f:9b:d6:46:79:ea:37:19:a4:b5:d4:b2:44:6e:
a1:3e:0b:0f:93:32:a5:48:d9:57:55:42:84:7f:e1:51:fb:45:
e1:74:45:eb:48:f2:77:1b:32:5d:ab:2d:eb:cd:89:59:8f:64:
57:82:a5:a7:be:11:e0:ed:cc:85:87:5d:fb:e3:83:77:6b:95:
26:49:62:ab:41:06:9d:65:d5:50:63:e8:c1:c7:b7:23:6a:0a:
93:74:4c:62:6c:67:a2:53:7b:97:d1:67:a8:60:0b:34:f0:53:
99:1a:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:45 2026 by rpki-client