Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: 4jBPX1Tq9fBcf8+sZRLKEdc+Ywv8wEJlFgGwbJIpFLQ=
Subject key identifier: E5:33:24:40:FB:AB:F8:48:ED:8A:CD:58:6A:19:84:C2:F0:90:0D:15
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 01A13E262B6BBEBF820B7A7C868ED3E56FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 1160
Signing time: Thu 15 Oct 2026 06:00:51 +0000
Manifest this update: Thu 15 Oct 2026 06:00:51 +0000
Manifest next update: Fri 16 Oct 2026 06:00:51 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: ccUD3e9/vvpKYYCzUezcObOYhkBMgGjhXMlRqwyK0u0=)
2: QzyTTwf2L3lrXpyiZTs7COW2eRo.roa (hash: h5PKj77zL0mGWN0YOldjQ3SqvW2ihi8Y1ac/GiARvnk=)
3: qIq5EIN8KZxnuGsPHMVzjJm2lso.roa (hash: ChOgPqro/95TDF+ejXPJDekQfUIcojr6y7ZtjzC1sfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:2b:6b:be:bf:82:0b:7a:7c:86:8e:d3:e5:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Oct 15 06:00:51 2026 GMT
Not After : Oct 16 06:00:51 2026 GMT
Subject: CN=e5332440fbabf848ed8acd586a1984c2f0900d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:e0:28:25:40:a8:a9:68:4a:37:a0:60:74:
9c:80:2b:2b:0e:91:c9:45:2d:1d:9f:4b:15:d1:78:
74:51:bc:3e:0b:fc:93:3b:98:c9:38:ad:a9:2e:71:
17:0e:d2:b9:c0:39:bf:6e:2b:46:ad:3a:de:81:84:
9b:15:a4:c7:fb:d1:1a:1a:7c:47:c0:9b:5b:a9:c9:
49:18:fc:68:d2:97:43:6d:3b:d1:59:57:00:da:d5:
27:b1:19:c9:a7:fc:40:13:3f:92:0a:c2:33:c6:d1:
bb:23:88:75:d2:aa:22:52:6a:76:50:d0:89:f1:a2:
4c:61:9d:7f:68:d5:49:9d:f0:66:4a:60:47:56:80:
a9:c6:fb:ae:8a:3a:83:32:61:8e:8f:53:29:77:45:
1c:15:c5:78:af:f6:cc:7b:24:23:8c:dc:bb:2b:b7:
29:b3:46:f2:5e:e1:c5:a6:98:45:41:e5:e1:47:14:
9d:50:d7:e0:1c:bf:4e:04:5e:7e:39:38:75:53:ab:
c9:54:99:a0:7b:16:5a:87:9f:57:9e:8b:4e:c4:11:
34:af:c9:f0:c6:2e:72:c7:31:0b:6b:c3:89:d7:f9:
8c:69:17:c3:5d:16:dd:d1:57:23:14:ab:3a:9d:6f:
a2:b5:5b:3a:cd:31:60:24:44:f2:49:df:c8:3c:a5:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:33:24:40:FB:AB:F8:48:ED:8A:CD:58:6A:19:84:C2:F0:90:0D:15
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6c:27:f6:e5:7f:18:a2:f4:c2:5c:04:12:f2:d2:04:2d:54:
08:ac:f5:90:7c:d7:4a:d2:93:63:88:14:53:fb:03:c3:65:03:
39:e9:a2:be:60:a7:df:b0:cc:16:bc:44:7c:83:93:3a:88:29:
a8:e9:17:2d:95:cd:07:0b:f8:2f:fb:d1:c6:59:bd:a2:4f:97:
c9:1d:a6:3b:0e:3e:e2:b1:33:04:6c:c3:03:9d:02:d6:2e:fc:
26:57:2f:5a:91:37:fb:52:a1:39:00:87:55:f9:0a:29:b0:a0:
9d:ea:e6:1f:53:bf:94:8b:95:61:69:24:e3:f5:7d:b2:d8:b3:
24:fe:5d:63:33:ba:01:8b:c0:00:60:7a:49:2f:c6:78:7f:36:
1c:57:b0:3d:fa:34:24:9d:ed:ba:2c:a2:88:79:69:8a:72:6e:
ec:78:ea:05:fe:17:48:43:c1:c6:44:50:4a:98:c1:ff:b6:06:
2e:24:c6:80:86:a2:d2:56:18:25:ab:cf:9c:d8:a2:5a:3d:f6:
41:25:47:bc:32:b6:af:a1:10:f1:37:ff:68:1d:f4:12:80:5a:
08:00:77:96:02:1b:c7:4c:62:35:76:7c:9c:48:03:97:97:d1:
c6:6c:a7:85:ff:cd:68:3d:39:62:49:eb:b6:11:d6:5e:01:bb:
25:1a:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:19 2026 by rpki-client