Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: PjFJk+oOHEPqws14CKPsDPUIlJ8h6rYyAuDbmF46Y0A=
Subject key identifier: 87:F0:7E:B8:74:45:4D:D6:F1:08:F6:81:78:BD:DD:84:98:FD:BA:28
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 019E31BC52D5669D81B1585028C91175C0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 0697
Signing time: Sat 16 May 2026 17:01:25 +0000
Manifest this update: Sat 16 May 2026 17:01:25 +0000
Manifest next update: Sun 17 May 2026 17:01:25 +0000
Files and hashes: 1: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: aeYPOaaMfKzj0Cxo1kl8uRszx7EIZaHGK+T3Y+nyZTw=)
2: Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa (hash: deUDIfKP8EAYYGoQ4lRaCxh8/fRxNHbmoAk7A20/nwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:52:d5:66:9d:81:b1:58:50:28:c9:11:75:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: May 16 17:01:25 2026 GMT
Not After : May 17 17:01:25 2026 GMT
Subject: CN=87f07eb874454dd6f108f68178bddd8498fdba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:95:26:31:57:c9:40:30:d7:53:1e:e8:90:
06:83:51:ec:6a:09:d3:ca:f1:d9:2a:0b:a8:54:82:
09:a4:12:9d:cb:1a:0a:2a:a7:69:bc:f3:2d:6d:bc:
1d:49:2b:48:98:00:58:66:23:21:c2:65:e4:d7:a3:
b4:9b:3b:e6:35:77:9e:63:4a:50:fe:d1:a5:57:77:
7a:10:36:2e:53:d5:17:e0:3e:b1:54:07:ed:2c:14:
c7:8e:4e:77:42:53:2c:cd:76:fa:72:18:f1:e0:60:
4a:ba:b5:43:1b:ef:71:e3:12:29:ba:ec:db:7d:2e:
0c:85:a6:9b:37:04:0d:e9:e1:f9:03:e4:5e:a8:be:
b0:29:9d:53:fb:1e:12:13:13:34:96:15:4a:2f:50:
8b:9f:01:e8:75:3f:15:f6:58:72:1c:75:48:86:17:
b9:94:71:a5:62:3a:86:78:f2:18:5e:fd:15:56:c3:
e1:a6:7b:7a:1d:11:cc:de:d1:cc:09:60:cc:bc:c9:
30:b0:19:57:87:0f:15:4e:c5:a2:c3:5e:2d:ed:c6:
51:fa:8f:fd:3b:ee:e8:1c:93:bb:c0:5e:11:e8:06:
ed:37:58:37:18:2b:e5:40:1d:3d:c1:a3:1a:31:d0:
d8:2c:4e:c6:0e:d1:66:7d:2a:22:b5:f8:73:6c:ad:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:7E:B8:74:45:4D:D6:F1:08:F6:81:78:BD:DD:84:98:FD:BA:28
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:21:49:ca:71:f6:50:6a:cb:8b:15:df:d0:c3:1c:5f:1a:47:
2f:9c:ee:06:e5:87:f1:3e:c7:32:93:c2:d6:12:37:0f:99:ca:
60:59:33:3e:73:32:dd:8a:f1:d2:5c:74:c6:db:1d:a4:0d:c7:
ab:b0:a2:dd:78:d6:50:70:fc:66:7e:47:d2:4d:1f:d6:20:e8:
64:30:14:c9:16:54:ca:7a:f0:98:f4:ca:a2:63:f8:c2:3f:db:
44:87:f6:9f:33:12:57:7a:63:8a:71:72:f0:d5:4d:7f:80:74:
b5:99:e0:fe:bd:f9:3a:bd:44:ac:da:b0:4e:2e:46:3a:93:17:
5a:68:97:87:ab:84:0a:d6:1c:c6:3b:18:b5:b6:15:f1:c9:c1:
57:34:35:ae:46:52:7d:05:fc:9d:f9:a0:65:e2:d9:6a:98:fc:
eb:f2:90:7c:64:ab:b0:e9:b1:f8:5d:25:6c:e2:26:51:20:9f:
1a:b5:29:e7:06:09:c4:9c:7f:3d:33:58:ff:ef:74:d7:75:55:
06:28:b7:5a:16:3a:1a:1e:9f:05:1f:f9:86:8f:05:f9:eb:fc:
1c:a9:b1:79:83:0c:ea:83:68:5c:0a:21:e0:dc:63:2e:bc:a9:
de:35:f9:2d:d0:75:1c:5e:7b:45:84:73:e2:5c:a8:92:40:0d:
0d:2e:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:55 2026 by rpki-client