Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: iep7cirUsTqYr1ngfKd9Hbfv3V4rTDvkY+BXXj27Yuo=
Subject key identifier: 66:47:A5:CC:A1:28:6F:71:EA:9C:13:AA:A0:73:9E:C5:27:FE:25:80
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019E300560E60B1FD40C38041BCCC7502A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0FCB
Signing time: Sat 16 May 2026 09:01:59 +0000
Manifest this update: Sat 16 May 2026 09:01:59 +0000
Manifest next update: Sun 17 May 2026 09:01:59 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: O4xhy8vX5+Uks8W9ROacJpktm5Uu6hmkdWCeKMPRlGI=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:60:e6:0b:1f:d4:0c:38:04:1b:cc:c7:50:2a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: May 16 09:01:59 2026 GMT
Not After : May 17 09:01:59 2026 GMT
Subject: CN=6647a5cca1286f71ea9c13aaa0739ec527fe2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:7c:59:3d:02:ea:ad:c5:cf:9b:29:aa:47:
b0:f1:2c:8c:9a:03:a4:0b:5e:aa:ae:dd:7e:e8:31:
0f:3f:71:5a:71:bf:13:a8:cf:73:d4:0f:83:c2:5b:
fa:5d:57:74:6b:b2:15:a8:17:f7:3f:b1:cc:34:0d:
26:7a:2d:06:e4:30:ad:50:5e:7c:d2:42:1e:30:5f:
5a:45:ef:4f:b8:fd:08:87:53:5b:46:45:5d:5c:fd:
e2:fb:9b:07:c9:88:9d:fa:21:41:36:2a:0e:f2:a1:
5d:fd:9c:67:5e:b1:54:ad:15:da:1b:b9:2a:a4:b3:
3c:bc:06:ce:16:7a:1f:18:7e:2f:fe:27:92:71:b3:
c0:3e:5d:ac:e5:26:b1:04:a4:f4:17:3a:1d:56:64:
5d:78:32:24:e5:c9:54:d9:3c:e0:f0:c0:4e:af:ba:
66:93:ad:f7:25:b5:72:15:89:c4:09:42:b9:ce:cd:
62:72:6c:5b:a6:58:ac:b6:94:c0:7f:9a:97:9d:ed:
5e:cc:e2:52:60:2d:66:13:73:78:3a:25:41:53:7e:
3a:fe:59:f1:93:7b:73:8a:d9:56:df:11:3f:44:77:
1f:9f:1e:2d:3d:4f:bb:31:81:7f:8a:4d:69:c6:18:
e3:ec:f3:52:73:20:20:15:b5:d2:74:a3:2e:75:8e:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:A5:CC:A1:28:6F:71:EA:9C:13:AA:A0:73:9E:C5:27:FE:25:80
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:8c:22:7b:bb:08:9a:96:a0:69:77:c5:f0:0d:b9:71:92:
f9:df:1f:35:aa:c8:0b:4d:66:4c:c5:1d:fa:f8:98:6b:a3:8b:
64:59:56:35:e3:6f:fe:dc:6e:06:e6:1c:d0:d1:3c:18:e7:d1:
b0:72:a0:b0:b9:e7:bb:98:77:02:4c:61:76:d1:c8:b6:de:cd:
7c:d1:05:35:1c:77:44:66:62:cc:aa:fd:95:67:09:ab:fd:e4:
a3:ff:31:c0:c4:48:00:52:b2:36:b8:ac:53:25:02:3f:78:26:
94:4b:88:96:65:4c:15:ab:b0:9e:28:49:26:4d:6d:a6:13:5a:
15:1b:2f:14:95:5c:9d:60:a7:15:cc:2b:d5:cd:91:28:66:ed:
00:85:a3:d0:45:db:71:87:b1:38:a0:f6:21:7a:0a:25:85:84:
06:16:2d:d7:61:f6:26:b4:34:b9:1d:1a:e8:90:fd:4a:f6:dd:
96:58:17:6a:10:ee:7d:78:7e:31:7b:95:4f:5a:94:3e:41:60:
22:13:8c:69:1f:3b:ff:c8:79:94:6e:a6:ac:f1:8b:9b:91:c1:
83:a2:31:96:8b:b1:7f:93:73:29:c5:17:d5:98:8e:34:c4:26:
b7:18:1f:4b:07:06:f9:5a:55:1c:50:d0:11:9d:f1:5b:77:4b:
b9:25:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:37 2026 by rpki-client