Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: /iVytQO3x+WZkI5oLrHAJPTmZRQ66nyzdXdHZCKMoZs=
Subject key identifier: DB:E8:65:29:8D:9B:16:70:20:DC:4E:C6:D0:EE:6A:FF:58:72:7F:BD
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 019E30E10EBC83C4EB36A7FFEC5DE5ED27DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 065E
Signing time: Sat 16 May 2026 13:01:55 +0000
Manifest this update: Sat 16 May 2026 13:01:55 +0000
Manifest next update: Sun 17 May 2026 13:01:55 +0000
Files and hashes: 1: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: H0BUOoO93vMzVt2dqaHa/jECdwiayOmIHPgwxN146+c=)
2: F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa (hash: eVI8yrXfhvYwE0S/KV9hYg3kBr3HBxAmGlH35T90T1Y=)
3: tR9QLvg32zRpvf2oKCE6RFQVW0w.roa (hash: 9iUcyr09RC9S3vOC8uu0ZwV6C+S87j6TwJKmC2Yyv1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e1:0e:bc:83:c4:eb:36:a7:ff:ec:5d:e5:ed:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: May 16 13:01:55 2026 GMT
Not After : May 17 13:01:55 2026 GMT
Subject: CN=dbe865298d9b167020dc4ec6d0ee6aff58727fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:43:68:0b:ac:7e:9e:b5:b9:b3:31:33:dd:
66:64:d5:b3:59:5c:ad:d0:9b:88:d3:ab:56:98:f2:
24:ad:70:eb:4e:a4:ab:7c:04:9c:0e:60:b2:ac:69:
a4:6a:d6:a3:82:01:f6:63:7d:5e:c3:db:e8:d0:0d:
11:b8:e1:67:94:31:e6:ae:bc:04:ba:05:84:ba:3a:
68:3f:58:82:10:5b:7b:c7:b7:e6:56:24:d3:9d:1c:
aa:97:66:e8:6a:f9:5b:7a:2c:e1:a2:39:c4:b5:be:
9a:08:40:36:85:d3:02:d5:f8:73:de:e9:81:27:56:
14:cf:95:a1:9d:ba:7b:71:59:86:a2:48:c1:83:05:
31:12:53:95:0c:6b:f4:17:07:5b:7f:5b:38:07:e6:
16:b7:28:02:f1:38:e9:3a:12:68:c7:90:93:49:79:
0d:cf:f4:89:4e:28:34:51:4b:d8:8e:4d:b1:20:05:
b6:8f:66:37:d7:b5:88:de:5c:2a:5f:38:72:91:c2:
73:4a:b9:be:7e:d1:78:47:1a:76:34:7b:49:7f:85:
64:5e:b2:fe:04:16:72:59:97:ad:c6:52:d4:a8:03:
e3:68:19:0a:e3:e4:1b:3e:59:aa:82:0f:28:de:57:
da:ed:90:cc:b8:25:2f:98:92:da:05:c8:5c:78:71:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:65:29:8D:9B:16:70:20:DC:4E:C6:D0:EE:6A:FF:58:72:7F:BD
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:f6:1a:13:13:9f:26:70:bd:36:34:67:09:88:dd:d0:21:
f7:7c:d7:68:1f:14:7b:95:ee:5d:65:6a:fb:75:23:ff:03:74:
86:1a:88:48:7d:92:d3:bf:c3:5b:1d:71:71:4c:3c:84:45:f2:
c6:8c:c8:e6:c7:82:d0:6c:51:74:65:b0:89:21:58:0b:c0:f4:
1f:a8:26:82:f7:ad:0e:f3:f0:54:07:b3:93:b0:cf:3d:fd:2b:
0c:4d:3f:9b:b7:fe:fe:46:4f:ee:a2:48:30:0a:68:de:f2:93:
6b:42:a2:b1:a9:3c:b4:3f:78:fa:c5:65:95:e2:fe:b2:94:fa:
d1:49:5d:f9:c5:98:b6:ea:62:b9:bb:ea:f0:b3:67:52:6a:6f:
59:6a:1a:92:d3:25:86:93:b6:a7:1f:26:36:1d:9e:a2:e2:1b:
b3:eb:6c:e5:5d:5b:34:59:b3:5e:02:8a:c9:31:d4:b2:93:79:
b4:97:a7:3a:ec:ac:ca:8b:0b:0e:10:c6:d6:32:b1:b2:cd:a5:
e2:67:eb:fe:73:3e:ad:43:ff:db:bf:85:a0:e9:cd:c0:b7:4a:
42:9f:66:a6:d8:78:34:ff:eb:d0:08:23:40:32:fb:3a:85:21:
ae:e9:f7:ee:88:e5:0f:e2:a8:cf:31:76:20:f3:d8:1e:47:77:
1f:33:7e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Q68g8TrNqf/7F3l7SfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi
YjA5MWEwHhcNMjYwNTE2MTMwMTU1WhcNMjYwNTE3MTMwMTU1WjAzMTEwLwYDVQQD
EyhkYmU4NjUyOThkOWIxNjcwMjBkYzRlYzZkMGVlNmFmZjU4NzI3ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9NDaAusfp61ubMxM91mZNWzWVyt
0JuI06tWmPIkrXDrTqSrfAScDmCyrGmkatajggH2Y31ew9vo0A0RuOFnlDHmrrwE
ugWEujpoP1iCEFt7x7fmViTTnRyql2boavlbeizhojnEtb6aCEA2hdMC1fhz3umB
J1YUz5Whnbp7cVmGokjBgwUxElOVDGv0Fwdbf1s4B+YWtygC8TjpOhJox5CTSXkN
z/SJTig0UUvYjk2xIAW2j2Y317WI3lwqXzhykcJzSrm+ftF4Rxp2NHtJf4VkXrL+
BBZyWZetxlLUqAPjaBkK4+QbPlmqgg8o3lfa7ZDMuCUvmJLaBchceHEXlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvoZSmNmxZwINxOxtDuav9Ycn+9MB8GA1UdIwQY
MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt
ZjJiZGMyMjc1YjZlLzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl
LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMv2GhMT
nyZwvTY0ZwmI3dAh93zXaB8Ue5XuXWVq+3Uj/wN0hhqISH2S07/DWx1xcUw8hEXy
xozI5seC0GxRdGWwiSFYC8D0H6gmgvetDvPwVAezk7DPPf0rDE0/m7f+/kZP7qJI
MApo3vKTa0Kisak8tD94+sVlleL+spT60Uld+cWYtupiubvq8LNnUmpvWWoaktMl
hpO2px8mNh2eouIbs+ts5V1bNFmzXgKKyTHUspN5tJenOuysyosLDhDG1jKxss2l
4mfr/nM+rUP/27+FoOnNwLdKQp9mpth4NP/r0AgjQDL7OoUhrun37ojlD+KozzF2
IPPYHkd3HzN+uA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:34 2026 by rpki-client