Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: 7occpWpj+4eckvxCbJop+lb811/w/u23JAW58RMO1nU=
Subject key identifier: 33:57:2A:EC:D2:5D:1E:EE:CE:BE:BB:5B:6F:BE:B8:98:2B:F5:66:E4
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 01A0016FEE9FD4D3B13C819EEFFEB55C2148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 10BC
Signing time: Fri 14 Aug 2026 18:01:47 +0000
Manifest this update: Fri 14 Aug 2026 18:01:47 +0000
Manifest next update: Sat 15 Aug 2026 18:01:47 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: 74AS96gGO/QRE32Nm8aBCA2upMQl7vxv9IB804DxEDg=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:ee:9f:d4:d3:b1:3c:81:9e:ef:fe:b5:5c:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Aug 14 18:01:47 2026 GMT
Not After : Aug 15 18:01:47 2026 GMT
Subject: CN=33572aecd25d1eeecebebb5b6fbeb8982bf566e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:64:87:05:70:4f:39:93:81:be:d2:c7:5e:7d:
d8:99:71:cf:ab:66:4c:50:be:cb:1f:b1:c1:61:c7:
51:b6:05:a6:a6:cd:05:2b:fc:8d:f5:4b:08:b7:be:
70:a9:87:3e:a3:08:20:05:2c:0d:a8:e7:5a:c7:81:
86:36:26:81:ca:c5:21:11:c4:a3:78:9a:dc:d2:e6:
cc:fa:f6:5c:c2:a8:1a:4c:55:bd:c4:68:2f:b9:e8:
de:c9:f9:01:5c:8c:84:0e:4e:c5:8f:1e:25:30:db:
8a:65:f1:96:d2:4c:56:91:3b:db:b4:04:e6:fe:e2:
ba:96:f9:7e:f4:08:45:a8:bf:84:e3:45:d9:c4:f8:
c4:35:62:2f:5d:e9:d9:aa:c3:97:f9:b3:d7:c2:05:
c5:95:a3:0c:b7:90:af:a5:36:eb:7a:d2:2c:f7:23:
3d:a7:25:4a:63:4a:52:68:de:6b:e0:69:16:d8:97:
0b:a3:2e:ca:4a:b0:55:8f:48:a0:e7:f6:dc:9c:09:
6e:3f:69:b4:66:18:e0:18:55:97:4d:aa:46:1c:4f:
51:7e:3b:11:37:29:ec:3c:3d:7f:7c:70:d8:a7:1b:
ce:6d:38:5e:6c:c9:98:9f:69:53:77:f2:4f:e5:29:
71:2a:c6:f6:d9:f4:b9:3b:9b:dc:60:e1:92:ef:74:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:2A:EC:D2:5D:1E:EE:CE:BE:BB:5B:6F:BE:B8:98:2B:F5:66:E4
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d9:2c:3e:0b:db:06:16:91:a3:65:f5:27:6f:25:84:62:76:
00:ff:cf:9e:ca:b7:ac:b1:e8:93:d0:83:2d:21:53:52:63:34:
ea:0c:fc:f3:2e:4d:7d:a1:95:e5:24:bf:7a:1c:70:89:18:d0:
eb:74:10:57:44:8d:c9:03:33:81:5b:50:bf:29:47:05:7f:6a:
c9:87:3f:e2:a6:74:a5:25:3f:5e:f5:b3:70:a3:66:13:c1:6d:
dc:a9:5b:83:ad:88:6b:f0:55:04:a4:42:7c:e2:16:00:60:b6:
ae:c7:3b:da:27:ed:f2:b5:6b:a8:b5:ac:31:76:82:ea:c1:d0:
57:6f:1b:c2:c2:4a:27:00:81:ed:0c:24:ab:a8:ff:66:09:19:
a6:0c:75:ed:34:e7:03:3b:f1:ac:bf:42:ae:bb:ba:60:ee:21:
45:f6:61:78:84:2a:f6:aa:5d:2c:4d:20:61:92:48:b8:13:2f:
0f:d3:36:bc:48:b0:6a:d8:ca:f1:8a:ac:2a:38:a5:68:29:6f:
70:45:96:77:7d:8d:5f:92:a7:f8:47:67:49:2f:15:f5:ea:e3:
0f:38:a1:56:f5:9d:67:51:5e:5e:d9:06:50:a1:86:05:eb:a5:
80:3e:ee:58:61:e5:52:4b:c5:7a:95:e6:cd:cf:5a:b5:94:4f:
1c:69:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:44 2026 by rpki-client