Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: /rnjFgpcPXlDLX+1Ujy1RQoEFI8pJiO1R6U5Q8BNHNc=
Subject key identifier: 49:82:C2:55:93:DA:BC:FB:05:5C:9A:5C:41:0F:44:8A:B3:ED:93:7E
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019D38D391D913E51E9A0DB9B29F0C4B9549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0F4B
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: BMriYDGh5YzYm/m6xpWgmQotd1Q8eYj6HPkgYKJK438=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:91:d9:13:e5:1e:9a:0d:b9:b2:9f:0c:4b:95:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=4982c25593dabcfb055c9a5c410f448ab3ed937e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:6d:af:18:ec:23:af:10:1e:da:63:84:bb:
b0:ab:5f:0d:d9:b8:93:6b:db:41:d3:62:c6:43:d1:
db:6b:36:4b:6b:01:cb:24:eb:b4:15:e8:e8:86:cd:
2e:19:74:49:1f:64:4c:71:f1:d2:fb:80:fc:cf:05:
08:45:8a:b6:54:32:92:1e:ec:d0:90:48:c2:57:ba:
3c:13:c4:07:3c:4e:21:68:e8:a7:8f:e4:c7:78:df:
61:38:03:8a:c4:e2:6b:0e:5e:6a:74:22:3c:20:58:
cb:fd:37:a7:53:07:86:ea:d3:d1:cd:30:ff:de:08:
51:67:79:0f:31:cf:7f:34:6a:ac:7d:35:60:7f:7f:
5c:5c:9c:b7:73:b7:53:57:4d:10:82:36:54:d6:57:
c2:2d:44:a4:a5:7c:3c:cb:bc:9b:62:45:b9:de:8c:
ae:08:9c:0d:c5:38:1c:02:28:ba:c2:ab:84:61:8c:
17:b0:5d:63:6d:fe:a7:3b:ab:83:12:69:1d:ec:13:
c1:6f:2f:ec:19:82:f5:3d:37:f5:ee:b2:7d:0c:60:
b2:dc:f9:01:71:8b:17:c0:09:55:4e:44:b8:6e:ee:
58:2b:61:61:15:18:14:8b:d3:b9:f7:6c:aa:37:fd:
89:b6:cd:9c:bc:52:79:5d:63:e7:86:5b:4f:78:b4:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:C2:55:93:DA:BC:FB:05:5C:9A:5C:41:0F:44:8A:B3:ED:93:7E
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:ff:27:b5:25:7b:1c:2e:18:9f:6f:39:e8:62:4d:89:1a:
9a:71:82:8d:bb:bd:90:e4:00:e3:d8:f9:ec:14:a5:b4:56:27:
41:35:df:d2:db:62:7f:3e:6d:94:a0:11:14:d3:55:08:46:c5:
b3:f0:4e:18:95:6d:de:b7:7e:cc:8c:d8:8f:3a:a3:cb:a6:56:
be:2d:e3:16:9c:6b:f2:d7:3b:38:29:51:02:1f:06:c7:5e:e3:
9d:21:ad:54:e2:60:02:c9:dc:20:ec:5c:13:29:44:86:a3:fd:
1f:3a:37:c0:92:19:f0:00:6a:0a:a7:9f:39:51:39:44:6e:03:
6a:98:46:90:d7:b1:f2:69:5f:30:3f:47:a1:8e:21:4f:c8:cd:
95:1c:86:5d:6e:34:bd:68:5a:09:2b:ee:f1:bf:59:85:19:e3:
09:da:d9:44:4d:53:6e:8d:0c:14:07:6e:e5:b4:35:0c:78:53:
7a:8b:47:9d:8e:13:6c:39:d6:d6:1e:32:dc:7b:09:62:01:bd:
67:8c:e2:6f:15:17:ce:52:58:8b:be:55:e2:16:f2:a5:8f:ad:
23:33:af:59:b3:61:4a:de:d5:a4:7e:76:97:56:1e:6f:fb:96:
56:c8:35:ac:64:48:60:6e:4f:ed:27:bd:9e:cf:83:90:09:07:
3a:8b:d0:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405HZE+Uemg25sp8MS5VJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5
NTc5YmUwHhcNMjYwMzI5MDkwMTIyWhcNMjYwMzMwMDkwMTIyWjAzMTEwLwYDVQQD
Eyg0OTgyYzI1NTkzZGFiY2ZiMDU1YzlhNWM0MTBmNDQ4YWIzZWQ5MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxChtrxjsI68QHtpjhLuwq18N2biT
a9tB02LGQ9HbazZLawHLJOu0Fejohs0uGXRJH2RMcfHS+4D8zwUIRYq2VDKSHuzQ
kEjCV7o8E8QHPE4haOinj+THeN9hOAOKxOJrDl5qdCI8IFjL/TenUweG6tPRzTD/
3ghRZ3kPMc9/NGqsfTVgf39cXJy3c7dTV00QgjZU1lfCLUSkpXw8y7ybYkW53oyu
CJwNxTgcAii6wquEYYwXsF1jbf6nO6uDEmkd7BPBby/sGYL1PTf17rJ9DGCy3PkB
cYsXwAlVTkS4bu5YK2FhFRgUi9O592yqN/2Jts2cvFJ5XWPnhltPeLTu3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmCwlWT2rz7BVyaXEEPRIqz7ZN+MB8GA1UdIwQY
MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt
ODI0Y2NlZmQ5YzgxLzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx
LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDr/J7Ul
exwuGJ9vOehiTYkamnGCjbu9kOQA49j57BSltFYnQTXf0ttifz5tlKARFNNVCEbF
s/BOGJVt3rd+zIzYjzqjy6ZWvi3jFpxr8tc7OClRAh8Gx17jnSGtVOJgAsncIOxc
EylEhqP9Hzo3wJIZ8ABqCqefOVE5RG4DaphGkNex8mlfMD9HoY4hT8jNlRyGXW40
vWhaCSvu8b9ZhRnjCdrZRE1Tbo0MFAdu5bQ1DHhTeotHnY4TbDnW1h4y3HsJYgG9
Z4zibxUXzlJYi75V4hbypY+tIzOvWbNhSt7VpH52l1Yeb/uWVsg1rGRIYG5P7Se9
ns+DkAkHOovQbA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:30 2026 by rpki-client